Updated Sep-2025 Exam Engine for CIS-VR Exam Free Demo & 365 Day Updates
Exam Passing Guarantee CIS-VR Exam with Accurate Quastions!
NEW QUESTION # 26
To ensure that Vulnerabilities are processed correctly, you can define a Service Level Agreement (SLA) for Vulnerability Response. To achieve this you would:
- A. Make sure you have at least the sn_vul.vulnerability_write role and using the baseline SLA Application Modules
- B. Have the role of Vulnerability admin, but only in the Vulnerability Scope
- C. Log in as a system admin, and using the globally scoped baseline SLA Modules
- D. Create a custom workflow to monitor the time between States
Answer: B
Explanation:
https://docs.servicenow.com/bundle/vancouver-security-management/page/product/vulnerability-response/task/t_CreateVulnSLA.html
NEW QUESTION # 27
Which of the following is the property that controls whether Vulnerability Groups are created by default based on Vulnerabilities in the system?
- A. sn_vul.create_default_vul_groups
- B. sn_vul.autocreate_groups
- C. sn_vul.autocreate_vul_centric_group
- D. sn_vul.autocreate_vul_grouping
Answer: C
Explanation:
"When true, automatically creates a Remediation Task when a vulnerable item is created for a vulnerability entry that does not yet have a group (for Vulnerability Centric functionality)"
NEW QUESTION # 28
Qualys asset tags can be loaded into a table related to the configuration item and used to support business processes or reporting. Set the Qualys Host parameter of asset_tags to a value of __________ to have asset tag information from Qualys be included in the XML payload.
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
NEW QUESTION # 29
Which one of the following record types can be considered the intersection of Vulnerability source information and CMDB CI records?
- A. CMDB_CI_Vuln
- B. Vulnerable Item (VI)
- C. Vulnerability
- D. Vulnerability Task
Answer: C
NEW QUESTION # 30
What type of data would the CIO/CISO want on the dashboard?
- A. Single, clear indicators of organizational health
- B. Up to the minute views
- C. Aggregations for priority and workload
- D. Drill-down to granularity
Answer: A
NEW QUESTION # 31
If fixing a Vulnerable Item outweighs the benefits, the correct course of action is:
- A. Deprioritize the Vulnerable Item Records (VIT) to push them further down the list so it can be ignored
- B. Add the CI to the Vulnerability Scanner's exclusions Related List
- C. Mark the CI inactive in the CMDB and notify the CI owner
- D. Record the accepted risk and Close/Defer the Vulnerable Item
Answer: D
Explanation:
Explanation/Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability- response/concept/c_IndivVulnItemMgmt.html
NEW QUESTION # 32
Which Vulnerability maturity level provides advanced owner assignment?
- A. Automated prioritization
- B. Enterprise risk trending
- C. Improved remediation
- D. Manual operations
Answer: A
NEW QUESTION # 33
What do Vulnerability Exceptions require?
- A. A GRC integration
- B. A Filter Group
- C. An Approval by default
- D. An Exception Workflow
Answer: D
Explanation:
https://docs.servicenow.com/bundle/vancouver-security-management/page/product/vulnerability-response/task/add-exception-approver.html
NEW QUESTION # 34
Where in the platform can you create Filter Groups?
- A. Security Operations > Administration > Filter Groups
- B. Vulnerability > Groups > Filter Groups
- C. Vulnerability > Administration > Filter Groups
- D. Security Operations > Groups > Filter Groups
Answer: D
Explanation:
https://docs.servicenow.com/en-US/bundle/vancouver-security-management/page/product/security-operations-common/task/create-filter-group.html
NEW QUESTION # 35
A common integration point with Vulnerability is:
- A. Knowledge Base
- B. Workflow Mappings
- C. Service Catalog
- D. Risk Indicators within GRC
Answer: D
Explanation:
Explanation/Reference:
NEW QUESTION # 36
Which of the following is the property that controls whether Vulnerability Groups are created by default based on Vulnerabilities in the system?
- A. sn_vul.create_default_vul_groups
- B. sn_vul.autocreate_groups
- C. sn_vul.autocreate_vul_centric_group
- D. sn_vul.autocreate_vul_grouping
Answer: C
NEW QUESTION # 37
Where can you find information related to the Common Vulnerabilities and Exposures (CVE)?
- A. Tenable
- B. NIST
- C. Qualys
- D. MITRE
Answer: B
Explanation:
Explanation/Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability- response/concept/c_VulnerabilityResponse.html
NEW QUESTION # 38
In order to more easily manage large sets of Vulnerable Items, what should you create?
- A. Vulnerability Groups
- B. Vulnerable Item Conditions
- C. Calculator Group
- D. Filter Group
Answer: A
Explanation:
Explanation/Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability- response/concept/vuln-change_mgmnt_ovrvw.html
NEW QUESTION # 39
When an approval is rejected for a Vulnerable Item exception, what happens to the State field for that record?
- A. It is set to 'In Review'
- B. It reverts to 'Analysis'
- C. It will be set back to its previous value
- D. It is set to 'New'
Answer: C
Explanation:
https://docs.servicenow.com/en-US/bundle/vancouver-security-management/page/product/vulnerability-response
NEW QUESTION # 40
Select the three components of a Fitter Condition: Choose 3 answers
- A. Sum
- B. Value
- C. Operator
- D. Field
Answer: A
NEW QUESTION # 41
ServiceNow Vulnerability Response tables typically start with which prefix?
- A. vul_
- B. snvr_
- C. sn_vul_
- D. snvuln_
Answer: C
Explanation:
Explanation/Reference: https://docs.servicenow.com/bundle/jakarta-security-management/page/product/vulnerability- response/reference/r_TblVnlnlMgmt.html
NEW QUESTION # 42
Select the three components of a Filter Condition: (Choose three.)
- A. Operator
- B. Value
- C. Sum
- D. Field
Answer: A,B,D
Explanation:
Explanation/Reference: https://docs.servicenow.com/bundle/orlando-platform-user-interface/page/use/common-ui-elements/concept/c_ConditionBuilder.html
NEW QUESTION # 43
Which of the following best describes a Vulnerability Group?
- A. A Filter defining a sub-set of Cls to be treated as a group
- B. Must have a corresponding filter group
- C. Groups Vis using a Filter against Vulnerable Item Fields
- D. The User Group assigned to resolving the Vulnerable Item
Answer: C
NEW QUESTION # 44
......
To be eligible for the ServiceNow CIS-VR Certification Exam, candidates must have a strong understanding of vulnerability management concepts and techniques, as well as experience working with the ServiceNow platform. CIS-VR exam consists of 60 multiple-choice questions and has a time limit of 90 minutes. A passing score of 70% or higher is required to earn the certification. CIS-VR exam is available in English and can be taken online or in-person at a ServiceNow testing center.
Exam Questions for CIS-VR Updated Versions With Test Engine: https://www.briandumpsprep.com/CIS-VR-prep-exam-braindumps.html
