CIS-SIR — Free Practice Questions
10 free sample questions from a bank of 172, with the correct answers and explanations. No signup required — start practising right now.
1What makes a playbook appear for a Security Incident if using Flow Designer?
- Actions defined to create tasks
- Trigger set to conditions that match the security incident
- Runbook property set to true
- Service Criticality set to High
Answer: B
2Select the one capability that retrieves a list of running processes on a CI from a host or endpoint.
- Get Network Statistics
- Isolate Host
- Get Running Processes
- Publish Watchlist
- Block Action
- Sightings Search
Answer: C
3Actions packaged in Scoped applications are called:
- Action Groups
- Categories
- Spokes
- Subflows
Answer: C
4When testing a flow, the action outcomes can be found where?
- Configuration Details
- System Log
- Execution Details
- Content Record
Answer: C
5Flow Logic in the baseline includes: (Choose two.)
- For Each Loops
- Interrupts
- If Then conditions
- Function Calls
- Wait until
Answer: A, C
6What contains a set of reusable operations that are designed to be used in multiple playbooks?
- Flows
- Actions
- Trigger
- Subflows
Answer: D
7What automates processes and supports triggers with a sequence of reusable actions?
- Subflows
- Actions
- Flows
- Activities
Answer: C
8Once a Phishing Email record is created, which Flow creates a new Security Incident record?
- Security Incident - Phishing Manual
- Security Incident - Automated Phishing Playbook
- Child Incident Automated Flow
- Transform Phishing Email to Security Incident
Answer: D
9When an inbound email is processed and identified as a phishing email what table is it stored in for URP v2?
- Security Incident Alert
- Security Incident Phishing Email
- Security Incident
- Incident
Answer: B
10In order to use User Reported Phishing v2, what must occur in Flow Designer?
- Transform Flow must be published
- Transform Flow must be activated
- Transform Action must be activated
- Phishing Email Aggregation Subflow must be activated
- Transform Flow must be copied and activated
Answer: E
Want the full bank of 172 questions for CIS-SIR? See all practice exams.