Free Practice Questions for the ServiceNow CIS-Security Incident Response CIS-SIR Exam (2026 Updated)

Which of the following process definitions allow only single-step progress through the process defined without allowing step skipping?

What is the key to a successful implementation?

The severity field of the security incident is influenced by what?

In order to see the Actions in Flow Designer for Security Incident, what plugin must be activated?

The Risk Score is calculated by combining all the weights using .

To configure Security Incident Escalations, you need the following role(s): .

Incident severity is influenced by the business value of the affected asset.

Which of the following are asset types that can be affected by an incident? (Choose two.)

Why should discussions focus with the end in mind?

Which improvement opportunity can be found baseline which can contribute towards process maturity and strengthen costumer’s overall security posture?

What parts of the Security Incident Response lifecycle is responsible for limiting the impact of a security incident?

What is calculated as an arithmetic mean taking into consideration different values in the CI, Security Incident, and User records?

Security tag used when a piece of information requires support to be effectively acted upon, yet carries risks to privacy, reputation, or operations if shared outside of the organizations involved.

What does a flow require?

Joe is on the SIR Team and needs to be able to configure Territories and Skills. What role does he need?

The EmailUserReportedPhishing script include processes inbound emails and creates a record in which table?