CIS-SIR 무료 덤프문제 온라인 액세스

The following term is used to describe any observable occurrence:.

• A.Ticket
• B.Incident
• C.Log
• D.Alert
• E.Event

What field is used to distinguish Security events from other IT events?

• A.Source
• B.Type
• C.Description
• D.Classification

David is on the Network team and has been assigned a security incident response task. What role does he need to be able to view and work the task?

• A.External
• B.Security Basic
• C.Security Analyst
• D.Read

When the Security Phishing Email record is created what types of observables are stored in the record?
(Choose three.)

• A.Hashes and/or file names found in the EML attachment
• B.URLs, domains, or IP addresses appearing in the body
• C.State of the phishing email
• D.Who reported the phishing attempt
• E.IP addresses from the header
• F.Type of Ingestion Rule used to identify this email as a phishing attempt

How do you select which process definition to use?

• A.By selecting the desired process within the Process Definition module
• B.By selecting the desired process within the Process Selection module
• C.By setting the process definition record to Active
• D.By setting the Script Include record to Active