CIS - VR

ServiceNow Vulnerability Response tables typically start with which prefix?

• vul

• sn_vul_

• snvr_

• snvuln_

The Vulnerability Response plugin does not include any dashboards

• true

• false

What is a Vulnerability? (Select the best answer):

• A system susceptibility or a flaw

• Any system susceptibility, flaw, or weakness that allows an exploitation or an attacker to further reduce security posture

• Attacker capability to exploit a flaw

• Attacker access to a flaw

Which of the following is NOT a source of vulnerabilities or vulnerability data that is commonly used in industry?

• NVD

• CWE

• PCI-DSS

• HIPAA

• CVE

Which of the following is not contained in the “Libraries” module?

• Vulnerable Software

• National Vulnerability Database (NVD)

• Common Weaknesses Enumeration (CWE)

• Vulnerability Groups

Vulnerability Response can be best categorized as a ________, focused on identifying and remediating vulnerabilities as early as possible.

• A tentative process

• A proactive process

• A reactive process

• An iterative process

Vulnerability Response can be configured to integrate with vulnerability scanners and to ingest identified vulnerabilities and remediate through a standard process

• true

• false

The Vulnerability Response plugin does not install any new roles; it simply utilizes existing ITSM roles for permissioning

• true

• false

Vulnerability Response can be configured to remediate Vulnerabilities

• true

• false

What is the ID associated with the Vulnerability Response plugin?

• com.snc.threat.intelligence

• com.snc.vulnerability

• som.snc.security_incdient

• com.snc.thread.feeds