ServiceNow CIS-VR (Certified Implementation Specialist

Introduction
The ServiceNow Certified Implementation Specialist – Vulnerability Response Exam Specification defines the purpose, audience, testing options, exam content coverage, test framework, and prerequisites to become Certified Implementation Specialist – Vulnerability Response certified.

Exam Purpose
The Certified Implementation Specialist – Vulnerability Response exam certifies that a successful candidate has the skills and essential knowledge to contribute to the configuration, implementation, and maintenance of a ServiceNow Vulnerability Response Implementation.

Exam Audience
The Certified Implementation Specialist – Vulnerability Response exam is available to ServiceNow partners, employees, and others interested in becoming a ServiceNow Certified Implementation Specialist – Vulnerability Response.

Exam Preparation
Exam questions are based on official ServiceNow training materials, the ServiceNow documentation site, and the ServiceNow developer site. Study materials posted elsewhere online are not official and should not be used to prepare for the examination.

Prerequisite ServiceNow Training Path
ServiceNow requires the completion of the following prerequisite training course(s) in preparation for the Certified Implementation Specialist – Vulnerability Response exam. Information provided in the following ServiceNow training course(s) contain source material for the exam.
• ServiceNow Security Operations (SecOps) Fundamentals
• Vulnerability Response (VR) Implementation – Upon completion, the candidate will be issued a nontransferable voucher code to register for the Certified Implementation Specialist – Vulnerability Response exam.

Recommended Knowledge & Education

ServiceNow recommends completion of the following Training Course(s) and Certification(s) in preparation for the exam.
• ServiceNow Fundamentals (ILT)
• ServiceNow Implementation Methodology (SIM) Fundamentals (eLearning)
• ServiceNow Platform Implementation (ILT)
• CIS-Vulnerability Response Certification Test Prep
• Automated Test Framework (ATF) Fundamentals (OnDemand)
• Flow Designer Fundamentals
• IntegrationHub Fundamentals
• Mobile Development Fundamentals
• Service Portal Fundamentals

|Additional Resources
In addition to the above, the candidate may find the following additional resources valuable in preparation for the exam.
• Orlando Vulnerability Response Documentation
• ServiceNow Security Operations Now Community Forums
• Glossary of Terms for Security Operations with Wikipedia Links

Additional Recommended Experience
• Three (3) to six (6) months field experience participating in a ServiceNow Security Incident response deployment project or maintaining the SIR application suite in a ServiceNow instance.
• General familiarity with industry terminology, acronyms, and initialisms.

Exam Scope
Exam content is divided into Learning Domains that correspond to key topics and activities typically encountered during ServiceNow implementations. In each Learning Domain, specific learning objectives have been identified and are tested in the exam.
The following table shows the learning domains, weightings, and sub-skills measured by this exam and the percentage of questions represented in each domain. The listed sub-skills should NOT be considered an all-inclusive list of exam content. Learning Domain % of Exam 1 Vulnerability Response Applications and Modules
• About ServiceNow Security Operations
• Introducing Vulnerability Response
• Vulnerability

Getting Data Into Vulnerability Response
• Definition of Vulnerabilities and Vulnerable Items
• Integrating with Vulnerability Scanners and Other Data Sources
• Scanner Integration and CMDB Reconciliation

3 Tools to Manage Vulnerability Response
• Group Vulnerabilities for Easier Management
• Tasking for Vulnerability Remediation
• Exploit Enrichment 25%

4 Automating Vulnerability Response
• Handling Vulnerability Exceptions
• Using Workflows for Process Automation

5 Vulnerability Response Data Visualization
• Data Visualization Overview: Dashboards and Reporting
• Performance Analytics

Exam Registration
Each candidate must register for the exam via the ServiceNow Webassessor website using a voucher obtained by completing the training prerequisite. The exam is available directly through the Webassessor site as a non-proctored, 60-minute exam.

During the registration process, each test taker has the option of taking the exam at an Authorized Testing Center or as an online-proctored exam. In both testing venues, the Certified Implementation Specialist exam is done through a consistent, friendly, user interface customized for ServiceNow tests.

The Kryterion testing network is worldwide and all locations offer a secure, comfortable testing environment. Candidates register for the exam at a specific date and time so there is no waiting and a seat is reserved in the testing center.

Each candidate can also choose to take the exam as an online-proctored exam. This testing environment allows a candidate to take the test on his or her own system provided that certain requirements are met.
NOTE: A special accommodation version of the exam is available. Contact certification@servicenow.com for more information. Depending on the accommodation, there may be a 30-day lead time before testing.

Exam Structure
The exam consists of (60) questions. For each question on the examination, there are multiple possible responses. The person taking the exam reviews the response options and selects the most correct answer to the question.
Multiple Choice (single answer)
For each multiple-choice question on the exam, there are four possible responses. The candidate taking the exam reviews the response options and selects the one response most accurately answers the question.
Multiple Select (select all that apply)
For each multiple-select question on the exam, there are at least four possible responses. The question will state how many responses should be selected. The candidate taking the exam reviews the response options and selects ALL responses that accurately answer the question. Multiple-select questions have two or more correct responses.

Exam Results
After completing and submitting the exam, a pass or fail result is immediately calculated and displayed to the candidate. More detailed results are not provided to the candidate.

QUESTION 1
Select the three components of a Filter Condition: (Choose three.)

A. Field
B. Sum
C. Operator
D. Value

Answer: A,C,D

QUESTION 2
SLAs are used to ensure VUL are processed in a timely matter. Which field is used to determine the expected timeframe for remediating a VIT?

A. Updated
B. Remediation status
C. Remediation target
D. Closed

Answer: C

QUESTION 3
What is the minimum role required to create and change Service Level Agreements for Vulnerability Response groups?

A. sla_manager
B. admin
C. sn_vul.vulnerability_write
D. sn_vul.admin

Answer: D

QUESTION 4
Changes made within a named Update Set in a different application scope:

A. Will be captured
B. Will throw errors
C. Will not be captured
D. Will be partially captured

Answer: A

QUESTION 5
ServiceNow Vulnerability Response tables typically start with which prefix?

A. snvr_
B. snvuln_
C. vul_
D. sn_vul_

Answer: D