ServiceNow CIS Vulnerability Response
Exam UPDATED ACTUAL QUESTIONS
AND CORRECT ANSWERS
Vulnerability Response - CORRECT ANSWER The process of identifying, classifying,
remediating and mitigating vulnerabilities.
Vulnerability - CORRECT ANSWER Any weakness that allows exploitation or allows
an attacker to further reduce security posture.
Patch Management - CORRECT ANSWER Process to manage the pushing of fixes or
patches to systems. Directly related to Vulnerability Response.
National Vulnerability Database (NVD) - CORRECT ANSWER Online repository of
vulnerability management data, security checklists, security related software flaws,
misconfigurations, product names, and impact metrics.
Common Vulnerabilities and Exposures (CVE) - CORRECT ANSWER A dictionary of
publicly known security vulnerabilities and exposures.
Common Vulnerabilities Scoring System (CVSS) - CORRECT ANSWER An open
framework for communicating the characteristics and severity of software vulnerabilities.
Common Weakness Enumeration (CWE) - CORRECT ANSWER A list of software
weaknesses.
Vulnerability Entry - CORRECT ANSWER Records of potentially vulnerable software
downloaded from the NIST NVD.
Vulnerability Entry table - CORRECT ANSWER sn_vul_entry
, Vulnerable Item - CORRECT ANSWER Pairings of vulnerability entries and
potentially vulnerable configuration items. A single record that captures all collateral related
to the vulnerability.
May belong to more than one Vulnerability Group.
Vulnerable Item table - CORRECT ANSWER sn_vul_vulnerable_item
Note: prior to Kingston it was extended from task table.
Vulnerability Group table - CORRECT ANSWER sn_vul_vulnerability
Note: extended from task table
National Vulnerability Database Entry - CORRECT ANSWER NIST (CVE)
vulnerabilities imported from third-party.
National Vulnerability Database Entry table - CORRECT ANSWER sn_vul_nvd_entry
Note: extends sn_vul_entry
Third Party Vulnerability Entry - CORRECT ANSWER Vulnerabilities from third
parties such as Qualys or Tenable.
Third Party Vulnerability Entry table - CORRECT ANSWER sn_vul_third_party_entry
Note: extends sn_vul_entry
OOB Vulnerability Dashboards (3) - CORRECT ANSWER Vulnerability Remediation
Vulnerability Management
Vulnerability Management (PA)
T/F: Vulnerability Group updates cascade down to related vulnerable items. - CORRECT
ANSWER True
Exam UPDATED ACTUAL QUESTIONS
AND CORRECT ANSWERS
Vulnerability Response - CORRECT ANSWER The process of identifying, classifying,
remediating and mitigating vulnerabilities.
Vulnerability - CORRECT ANSWER Any weakness that allows exploitation or allows
an attacker to further reduce security posture.
Patch Management - CORRECT ANSWER Process to manage the pushing of fixes or
patches to systems. Directly related to Vulnerability Response.
National Vulnerability Database (NVD) - CORRECT ANSWER Online repository of
vulnerability management data, security checklists, security related software flaws,
misconfigurations, product names, and impact metrics.
Common Vulnerabilities and Exposures (CVE) - CORRECT ANSWER A dictionary of
publicly known security vulnerabilities and exposures.
Common Vulnerabilities Scoring System (CVSS) - CORRECT ANSWER An open
framework for communicating the characteristics and severity of software vulnerabilities.
Common Weakness Enumeration (CWE) - CORRECT ANSWER A list of software
weaknesses.
Vulnerability Entry - CORRECT ANSWER Records of potentially vulnerable software
downloaded from the NIST NVD.
Vulnerability Entry table - CORRECT ANSWER sn_vul_entry
, Vulnerable Item - CORRECT ANSWER Pairings of vulnerability entries and
potentially vulnerable configuration items. A single record that captures all collateral related
to the vulnerability.
May belong to more than one Vulnerability Group.
Vulnerable Item table - CORRECT ANSWER sn_vul_vulnerable_item
Note: prior to Kingston it was extended from task table.
Vulnerability Group table - CORRECT ANSWER sn_vul_vulnerability
Note: extended from task table
National Vulnerability Database Entry - CORRECT ANSWER NIST (CVE)
vulnerabilities imported from third-party.
National Vulnerability Database Entry table - CORRECT ANSWER sn_vul_nvd_entry
Note: extends sn_vul_entry
Third Party Vulnerability Entry - CORRECT ANSWER Vulnerabilities from third
parties such as Qualys or Tenable.
Third Party Vulnerability Entry table - CORRECT ANSWER sn_vul_third_party_entry
Note: extends sn_vul_entry
OOB Vulnerability Dashboards (3) - CORRECT ANSWER Vulnerability Remediation
Vulnerability Management
Vulnerability Management (PA)
T/F: Vulnerability Group updates cascade down to related vulnerable items. - CORRECT
ANSWER True
