CIS-VR Certified Implementation Specialist - Vulnerability Response Questions and Answers

Aggregations for priority and workload

Time period views

Up-to-the-minute views

Drill-down to granularity

Vulnerability

Filter Groups

Condition Builder

Advanced Scripts

Updated

Remediation status

Remediation target

Closed

It is read-only, you can only change the Assignment Group members for the approval

It exists in the Security Operations Common scope so it can be modified by any Security Operations Admin

It can only be modified by System Adminstrators

It runs against the [sn_vul_change_approval] table

Performance Analytics

Event Management

Governance. Risk, and Compliance

Service Mapping

Vulnerability > Administration > Filter Groups

Vulnerability > Groups > Filter Groups

Security Operations > Administration > Filter Groups

Security Operations > Groups > Filter Groups

NVD Auto-update

Update

CVE Auto-update

On-demand update

com.snc.threat.intelllgence

com.snc.vulnerability

com.snc.threat.feeds

com.snc.securityjncident

Third Party Entries

NVD

CWE

Vulnerable Items

Create a Problem

Create a Security Incident

Create a KB article

Create a Change

Mark the CI inactive in the CMDB and notify the CI owner

Record the accepted risk and Close/Defer the Vulnerable Item

Deprioritize the Vulnerable item Records (VlT) to push them further down the list so it can be ignored

Add the Cl to the Vulnerability Scanners exclusions Related List

What processes and assets need protection?

What techniques can identify incidents?

What safeguards are available?

What techniques can restore capabilities?

What techniques can contain impacts of incidents?

An Approval by default

An Exception Workflow

A GRC integration

A Filter Group

Create a custom workflow to monitor the time between States

Log in as a system admin, and using the globally scoped baseline SLA Modules

Have the role of Vulnerability admin, but only in the Vulnerability Scope

Make sure you have at least the sn_vul.vulnerability_write role and using the baseline SLA Application Modules

Complete

Update

Close/Defer

Save