CertsPoint
Sign In Get Started
See all results for ""
Exams About Us
Sign In Get Started
Exam Overview
Exam Code CIS-SIR
Exam Name ServiceNow Certified Implementation Specialist - Security Incident Response
Vendor Servicenow
Total Questions 60
Last Updated 26-Oct, 2026
Free CIS-SIR Questions Get Premium Access
Why CertsPoint?
  • Latest & Verified Questions
  • Detailed Explanations
  • Regular Updates
  • Full-Length Practice Tests
  • Boost Your Exam Confidence

PDF Study Materials

Downloadable guides and resources

Practice Tests

Full-length tests with real exam experience

Progress Tracking

Monitor your performance and improvement

Study Anywhere

Access on desktop, tablet, and mobile

Excellent
4.6 (398 Up Votes)
Secure Payment Privacy Protected Money Back Guarantee

Free CIS-SIR Practice Questions

Explore 5 free practice questions for the Servicenow CIS-SIR exam and review the answers and explanations to support your preparation.

  1. Question 1

    Single answer

    The Risk Score is calculated by combining all the weights using

    • Option A:
      an arithmetic mean
      Correct
    • Option B:
      addition
      Correct
    • Option C:
      the Risk Score script include
      Correct
    • Option D:
      a geometric mean
      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: A

    Explanation

    In ServiceNow Risk Management, the overall Risk Score is calculated by combining all contributing weights using an arithmetic mean, meaning the individual risk factors are averaged based on their weights to produce a single consolidated risk score. This approach ensures that each factor contributes proportionally to the final score rather than being multiplied or geometrically combined.

  2. Question 2

    Single answer

    The severity field of the security incident is influenced by what?


    • Option A:
      The cost of the response to the security breach
      Correct
    • Option B:
      The impact, urgency and priority of the incident
      Correct
    • Option C:
      The time taken to resolve the security incident
      Correct
    • Option D:
      The business value of the affected asset
      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: B

    Explanation

    In ServiceNow Security Incident Management, the severity field is determined by how critical the incident is, which is based on a combination of impact (how much the business is affected) and urgency (how quickly it needs to be resolved). These two factors together define the priority and overall severity level, ensuring that incidents affecting critical services or requiring immediate attention are classified with higher severity.

  3. Question 3

    Single answer

    The following term is used to describe any observable occurrence:

    • Option A:
      Incident
      Correct
    • Option B:
      Log
      Correct
    • Option C:
      Ticket
      Correct
    • Option D:
      Alert
      Correct
    • Option E:
      Event
      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: E

    Explanation

    In IT Service Management terminology, an event is defined as any observable occurrence or change of state that has significance for the management of IT infrastructure or services. Events are typically generated by systems, applications, or monitoring tools and can later be processed into alerts or incidents depending on their impact.

  4. Question 4

    Single answer

    What is the purpose of Calculator Groups as opposed to Calculators?

    • Option A:
      To provide metadata about the calculators
      Correct
    • Option B:
      To allow the agent to select which calculator they want to execute
      Correct
    • Option C:
      To set the condition for all calculators to run
      Correct
    • Option D:
      To ensure one at maximum will run per group
      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: D

    Explanation

    In ServiceNow, Calculator Groups are used to organize multiple calculators that evaluate similar conditions, but they enforce a rule that only one calculator within the group can execute at a time. This prevents conflicting calculations and ensures that the most appropriate calculator is applied based on defined conditions, maintaining consistency in how results are determined.

  5. Question 5

    Single answer

    What makes a playbook appear for a Security Incident if using Flow Designer?

    • Option A:

      Actions defined to create tasks

      Correct
    • Option B:

      Trigger set to conditions that match the security incident

      Correct
    • Option C:

      Runbook property set to true

      Correct
    • Option D:

      Service Criticality set to High

      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: B

    Explanation

    In Flow Designer Playbooks, a playbook becomes available for a Security Incident when its trigger conditions are configured to match that record type and its attributes. These conditions determine when the playbook is shown and executed, ensuring it only appears for relevant security incidents based on the defined criteria.