CIS-SIR practice question 11 of 15
What is the fastest way for security incident administrators to remove unwanted widgets from the Security Incident Catalog?
Full set: 60 questionsThe Security Incident Catalog is a specific implementation of the ServiceNow Service Catalog. The content displayed on its main page, including categories and items that function as widgets, is controlled by its underlying configuration record. The fastest and most direct method for an administrator to modify this content is by accessing the catalog's definition record. The snsi.admin role has the necessary permissions to navigate to Service Catalog > Catalog Definitions, select the Security Incident Catalog, and remove associated categories or items, which in turn removes the corresponding "widget" from the user-facing page.
A. Clicking the X on the top right corner: This is not a standard feature for permanent administrative removal of configured components on a ServiceNow catalog page.
B. Talking to the system administrator: This is an indirect method and not the fastest, as the snsi.admin role is designed to have the permissions to manage its own application's catalog.
C. Can't be removed: This is incorrect. ServiceNow is designed for customization, and catalog content is fully configurable by administrators.
1. ServiceNow Product Documentation, "Create a catalog": This document outlines the standard procedure for managing catalogs. The process begins by navigating to Service Catalog > Catalog Definitions > Maintain Catalogs and editing the specific catalog record. This record is the "Catalog Definition record" and serves as the central point for configuration. (ServiceNow Washington DC Release, Service Catalog Management, "Create a catalog").
2. ServiceNow Product Documentation, "Security Incident Response roles": The documentation for the Security Incident Response application specifies that the snsi.admin role contains the catalogadmin role. The catalogadmin role grants permissions to "Manage all aspects of the Service Catalog application, including catalogs, categories, and items." This confirms the security incident administrator has the authority to perform this action directly. (ServiceNow Washington DC Release, Security Incident Response, "Security Incident Response roles").
3. ServiceNow Product Documentation, "Security Incident Catalog": This page describes the purpose of the Security Incident Catalog. It functions as a standard service catalog, meaning standard catalog administration principles apply for its modification. The visual elements ("widgets") are representations of the categories and items defined within the catalog's definition. (ServiceNow Washington DC Release, Security Incident Response, "Security Incident Catalog").
Keep practicing
Take the free CIS-SIR practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other CIS-SIR practice questions
- Question 1If a desired pre-built integration cannot be found in the platform, what should be your n…
- Question 2Which one of the following users is automatically added to the Request Assessments list?
- Question 3Incident severity is influenced by the business value of the affected asset. Which of the…
- Question 4The severity field of the security incident is influenced by what?
- Question 5Joe is on the SIR Team and needs to be able to configure Territories and Skills. What rol…
- Question 6The EmailUserReportedPhishing script include processes inbound emails and creates a recor…
