最新版を今すぐ試そう！[2025年05月] 試験準備には欠かさない！CIS-VR問題集
有能な受験者がシミュレーション済みのCIS-VR試験PDF問題を試そう
CIS-VR認定試験の対象となるには、候補者は、脆弱性応答モジュールの経験を含む、少なくとも6か月のServiceNowプラットフォームでの経験が必要です。また、推奨されるトレーニングコースを完了し、最低スコア70％で認定試験に合格する必要があります。 CIS-VR認定を達成することは、脆弱性管理とセキュリティ対応に関する候補者の専門知識を示し、ServiceNowプラットフォームを使用するすべての組織にとって貴重な資産となっています。
CIS-VR認定試験は、ServiceNow脆弱性対応アプリケーションを実装および構成するIT専門家にとって貴重な認定です。この認定は、候補者の脆弱性管理に関する知識と専門知識、およびServiceNowプラットフォームを効果的に使用する能力を示しています。適切なトレーニングとリソースにより、ITの専門家は試験に備え、IT業界でのキャリアを進めることができます。
質問 # 22
What must Vulnerability Exceptions be supplied by default?
- A. A manual approval authority for the exception
- B. A reason for the exception
- C. Requirement Actions for the exception
- D. Integrations with GRC to handle the exception
正解：B
質問 # 23
Which of the following best describes a Vulnerability Group?
- A. Groups VIs using a Filter against Vulnerable Item Fields
- B. The User Group assigned to resolving the Vulnerable Item
- C. Must have a corresponding filter group
- D. A Filter defining a sub-set of CIs to be treated as a group
正解：C
解説：
Explanation/Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability- response/concept/vulnerability-groups.html
質問 # 24
What system property allows for the auto creation of Vulnerability Groups based on the Vulnerable Item's Vulnerability?
- A. sn_vul.autocreate_vul_centric_group
- B. sn_vul.autocreate_vul_filter_group
- C. sn_vul.autocreate_vul_group_item
- D. sn_vul.autocreate_vul_approval_group
正解：B
質問 # 25
What option can be used to close out a Vulnerable item Record or initiate the Exception Process?
- A. Update
- B. Complete
- C. Close/Defer
- D. Save
正解：D
質問 # 26
Which statement about patching is most correct?
- A. Patch management and Vulnerability Response are interchangeable terms
- B. As long as you are patching actively, Vulnerability Response isn't necessary
- C. Mature organizations abandon patching
- D. Patching is one of many responses to a Vulnerability
正解：D
解説：
Explanation
質問 # 27
What Business Rule creates a Configuration Item from a Vulnerable Item record?
- A. Create CI from Vulnerable Group Details
- B. Create CI from Vulnerable item Details
- C. Determine CI from Network Details
- D. Create CI from Closed Item Details
正解：A
質問 # 28
Which application provides the opportunity to align security events with organizational controls, automatically appraising other business functions of potential impact?
- A. Governance, Risk, and Compliance
- B. Event Management
- C. Service Mapping
- D. Performance Analytics
正解：A
解説：
Explanation/Reference: https://docs.servicenow.com/bundle/orlando-governance-risk-compliance/page/product/grc- common/reference/grc-terms.html
質問 # 29
Which module is used to adjust the frequency in which CVEs are updated?
- A. Update
- B. NVD Auto-update
- C. CVE Auto-update
- D. On-demand update
正解：B
解説：
The module within the ServiceNow Vulnerability Response application that can be used to get information from the National Vulnerability Database (NVD) at any moment is NVD Auto-update. This module allows for the automated updating of CVEs and other vulnerability data from the NVD, ensuring that the information in ServiceNow is current and accurate.
質問 # 30
Filter Groups provide a way to:
- A. Build criteria once
- B. Decouple the use of the grouping from the definition of the grouping
- C. Reuse criteria in a variety of places
- D. All of the above
正解：A
質問 # 31
What is the purpose of Scoped Applications?
- A. Suppliers can only charge for applications when they are scoped
- B. An application needs to be scoped in order to be deployed as a plugin
- C. Scoping encapsulates and protects data and functionality
- D. Scoped applications are scalable. Global applications are not
正解：C
解説：
Application scoping protects applications by encapsulating and protecting their data and functionality, preventing interference from another application scope, including the Global scope. This is achieved with a unique identifier (e.g. sn_vul).
質問 # 32
Some customers may have a clearly-defined, well-documented vulnerability exception process and some may even provide a diagram illustrating that process.
What is the main advantage of having this documentation when translating it into a Flow or Workflow?
- A. Build the Flow/Workflow directly into the platform
- B. Perfect opportunity for process improvement
- C. Understand their internal process
- D. No advantage
正解：C
質問 # 33
In order to more easily manage large sets of Vulnerable items, what should you create?
- A. Vulnerable item Conditions
- B. Vulnerability Groups
- C. Filter Group
- D. Calculator Group
正解：B
質問 # 34
in regard to the Security Operations Process, which of the following statements defines the "identify" phase?
- A. What safeguards are available?
- B. What techniques can contain impacts of incidents?
- C. What techniques can restore capabilities?
- D. What techniques can identify incidents?
- E. What processes and assets need protection?
正解：E
質問 # 35
Items in the ServiceNow Store are built and supported by:
- A. The company that created the Application
- B. ServiceNow Professional Services
- C. ServiceNow Technical Support
- D. An Implementation Partner
正解：A
解説：
Explanation/Reference:
質問 # 36
What role Is required to view the Vulnerability Overview Dashboard?
- A. sn_vul.vulnerability.wnte
- B. sn_vuI.vulnerability.read
- C. sn_vul.ciso
- D. sn_vuI.manager
正解：B
質問 # 37
Ignoring a Vulnerable item:
- A. Move the item to the Slushbucket
- B. Has no impact on the list of Active Vulnerable Items
- C. Temporarily removes the item from the list of Active Vulnerable items
- D. Permanently removes the item from the list of Active Vulnerable items
正解：C
解説：
https://docs.servicenow.com/bundle/washingtondc-security-management/page/product/vulnerability-response/task/defer-vul-item.html
質問 # 38
Best Practices dictate that when creating a Change task from a Vulnerable Item which of the following fields should be used for assigning the Assigned To field on the Change task?
- A. Best Practice does not dictate a specific field
- B. Managed By on CMDB_CI
- C. Assigned To on CMDB_CI Record
- D. Assigned To on Vulnerable item
正解：C
質問 # 39
In order to more easily manage large sets of Vulnerable Items, you would want to create:
- A. Script Includes
- B. Vulnerability Sets
- C. Vulnerability Groups
- D. Filter Groups
正解：C
質問 # 40
SLAs are used to ensure VUL are processed in a timely matter. Which field is used to determine the expected timeframe for remediating a VlT?
- A. Updated
- B. Closed
- C. Remediation status
- D. Remediation target
正解：B
質問 # 41
When an approval is rejected for a Vulnerable Item exception, what happens to the State field for that record?
- A. It is set to 'In Review'
- B. It reverts to 'Analysis'
- C. It is set to 'New'
- D. It will be set back to its previous value
正解：D
解説：
https://docs.servicenow.com/en-US/bundle/vancouver-security-management/page/product/vulnerability-response/concept/vr-exception-management.html
質問 # 42
What type of data would the CIO/CISO want on the dashboard?
- A. Single, clear indicators of organizational health
- B. Aggregations for priority and workload
- C. Up to the minute views
- D. Drill-down to granularity
正解：B
質問 # 43
Where can you find information related to the Common Vulnerabilities and Exposures (CVE)?
- A. MITRE
- B. NIST
- C. Tenable
- D. Qualys
正解：B
解説：
Explanation/Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability- response/concept/c_VulnerabilityResponse.html
質問 # 44
In order to more easily manage large sets of Vulnerable Items, you would want to create:
- A. Script Includes
- B. Vulnerability Sets
- C. Vulnerability Groups
- D. Filter Groups
正解：C
解説：
Explanation/Reference: https://docs.servicenow.com/bundle/kingston-release-notes/page/release-notes/security- operations/secops-vuln-resp-rn.html
質問 # 45
Items in the ServiceNow Store are built and supported by:
- A. The company that created the Application
- B. ServiceNow Technical Support
- C. ServiceNow Professional Services
- D. An Implementation Partner
正解：B
質問 # 46
The components Installed with Vulnerability Response Include:
- A. Tables, Scheduled Jobs, Security Operations Common
- B. Business Rules, Roles, Workflows
- C. Properties, Client Scripts, Wizards
- D. Ul Pages. Business Rules, Vulnerability Scanners
正解：A
解説：
https://docs.servicenow.com/bundle/vancouver-security-management/page/product/vulnerability-response/refere
質問 # 47
......
ServiceNow CIS-VR 認定は、セキュリティオペレーション、脆弱性管理、リスク管理、コンプライアンスで働く IT プロフェッショナルに役立ちます。また、ServiceNow 管理者が脆弱性管理のスキルと知識を拡大したい場合にも適しています。この認定は、求職者が ServiceNow を使用して脆弱性を管理するために必要なスキルを持っていることを雇用主に示し、求職者にとって就職市場で競争力のあるアドバンテージとなります。
検証済み材料を使うならまずCIS-VRテストエンジンを試そう：https://www.jpntest.com/shiken/CIS-VR-mondaishu
合格するに必要な問題集はCIS-VR試験：https://drive.google.com/open?id=1EONMZzJdo37xaNeycS39WkHxg4LDuj20