Certified Implementation Specialist - Security Incident Response
Free ServiceNow CIS-SIR practice quiz — 300 original questions, 7 exam domains and 6 timed mocks, plus a blueprint-mapped guide to security incident response.
New here? Start with the free quiz to find your weak spots, then take the placement check to get a study plan tailored to them.
Which feature allows a security incident to be automatically reassigned or escalated when it remains unaddressed beyond a defined threshold?
- A. Escalation rules / escalation logic ✓
- B. CMDB reconciliation
- C. The portal theme manager
- D. The knowledge import wizard
Escalation logic automatically escalates or reassigns incidents that are not addressed within thresholds. CMDB reconciliation, the knowledge import wizard, and the theme manager do not perform escalation.
Every question carries reasoning like this. All original, mapped to the public exam blueprint — no real or recalled exam items are reproduced.
What an Exam Pack includes
Every one original, with a full explanation and a blueprint reference.
Full length, weighted to the real blueprint, scored by domain.
Written to the published CIS-SIR blueprint — all 7 domains.
High-yield recall for the terms and tables that get tested.
Percent-correct by domain, so you know where the gap is.
Drill a single domain, or work a dated plan to your exam date.
✓ Pass guarantee on annual All-Access — sit your exam during the year and if you don't pass, send your score report and we extend your access another year, free.
Build your study plan
Enter your exam date and we'll lay out an actionable, blueprint-weighted plan from today to test day — guide, flashcards, question bank, and all 6 timed mocks, scheduled.
Loading…
Exam blueprint & domain weights
What CIS-SIR learners say
Frequently asked questions
300 expert-reviewed practice questions, plus 6 timed mock exams and 50 flashcards. The free quiz includes a 25-question sample.
No — and that's the point. Every question is original and mapped to the official CIS-SIR blueprint, written to build well-rounded mastery of the whole certification. The aim isn't to memorize leaked answers (which violates ServiceNow's certification agreement and can get your credential revoked); it's to genuinely prepare you — so you pass the exam and walk away ready to apply these skills in real-world ServiceNow implementations.
It is weighted across 7 domains: Security Incident Response Management (30%), Security Incident Response Overview (15%), Automation and Standard Processes (15%), Security Incident & Threat Intelligence Integrations (14%), Risk Calculations and Post Incident Response (13%), Create Security Incidents (10%), Data Visualization (3%).
ServiceNow does not publish its cut score and it is not always 70%. We use 70% as a study-readiness benchmark only.
Independent study material. Not affiliated with, authorized, or endorsed by ServiceNow. ServiceNow® is a registered trademark of ServiceNow, Inc. Questions are original and mapped to the public exam blueprint; no real exam items are reproduced.