Module 3: Security Incident and Threat Intelligence Integrations

Question 1

Sighting Search functions are visible by default in the ServiceNow baseline.
a. True
b. False

Answer 1

b. False

Question 2

When building a custom integration for Security Incident Response, which of the following topics must be considered? Select all that apply.
a. ServiceNow Store Integration
b. Integration Methods
c. Database Design
d. Transaction Volumes
e. UI Interface
f. Data Mapping

Answer 2

Answers: b, d, f

b. Integration Methods
d. Transaction Volumes
f. Data Mapping

Question 3

Customers can use the original Capability Framework and the Capability Framework v2 at the same time.
a. True
b. False

Answer 3

a. True

Question 4

All ServiceNow SecOps integrations are driven from ServiceNow and require an API code from the integrating application.
a. True
b. False

Answer 4

b. False

Question 5

Capabilities using the v2 Framework have which components? Select all that apply.
a. Workflows
b. Workflow Triggers
c. Flows
d. Filter Conditions

Answer 5

Answers: c, d

c. Flows
d. Filter Conditions

Question 6

Which of the following statements are true about the ServiceNow REST API Explorer? Select all that apply.
a. It can generate code that allows an integration system to create incident records
b. It generates code that allows ServiceNow to query an external system
c. It provides code samples that can be used in integrating systems
d. It generates a record that records which two systems are being integrated
e. The code generated could be for Python, JavaScript, Perl or other languages

Answer 6

Answers: a, c, e

a. It can generate code that allows an integration system to create incident records
c. It provides code samples that can be used in integrating systems
e. The code generated could be for Python, JavaScript, Perl or other languages

Question 7

Security Incident Response supports Domain Separation.
a. True
b. False

Answer 7

a. True