CIS-SIR practice question 15 of 15

What is the purpose of Calculator Groups as opposed to Calculators?

Full set: 60 questions
Answer options
A: To provide metadata about the calculators
B: To allow the agent to select which calculator they want to execute
C: To set the condition for all calculators to run
D: To ensure one at maximum will run per group Correct answer
Correct Answer:
D. To ensure one at maximum will run per group
Explanation

Calculator Groups in ServiceNow Security Incident Response (SIR) are designed to bundle multiple, related calculators. When the conditions for a group are met, the system evaluates the individual calculators within that group based on their specified order. The first calculator whose conditions are met is executed, and all subsequent calculators in that group are skipped. This ensures that for any given security incident, a maximum of one calculator from the group will run, preventing redundant or conflicting calculations.

Why Incorrect

A. The primary purpose is execution control and logic, not simply to provide descriptive metadata for the calculators.
B. Calculator execution is automated based on predefined conditions, not through manual selection by an agent.
C. While a group has an overarching condition, its unique purpose is to control which single calculator runs from the set, not to trigger all of them.

References

1. ServiceNow Product Documentation: Security incident calculator groups. In the Security Incident Response section, the documentation states, "When the conditions of a calculator group are met, the system evaluates the security incident calculators in the group based on their order. The first calculator whose conditions are met is run, and the remaining calculators are skipped." This directly supports the principle that a maximum of one calculator will run per group. (ServiceNow, Tokyo Release, Security Incident Response Documentation).

Scroll to Top