CIS-SIR practice question 15 of 15
What is the purpose of Calculator Groups as opposed to Calculators?
Full set: 60 questionsCalculator Groups in ServiceNow Security Incident Response (SIR) are designed to bundle multiple, related calculators. When the conditions for a group are met, the system evaluates the individual calculators within that group based on their specified order. The first calculator whose conditions are met is executed, and all subsequent calculators in that group are skipped. This ensures that for any given security incident, a maximum of one calculator from the group will run, preventing redundant or conflicting calculations.
A. The primary purpose is execution control and logic, not simply to provide descriptive metadata for the calculators.
B. Calculator execution is automated based on predefined conditions, not through manual selection by an agent.
C. While a group has an overarching condition, its unique purpose is to control which single calculator runs from the set, not to trigger all of them.
1. ServiceNow Product Documentation: Security incident calculator groups. In the Security Incident Response section, the documentation states, "When the conditions of a calculator group are met, the system evaluates the security incident calculators in the group based on their order. The first calculator whose conditions are met is run, and the remaining calculators are skipped." This directly supports the principle that a maximum of one calculator will run per group. (ServiceNow, Tokyo Release, Security Incident Response Documentation).
Keep practicing
Take the free CIS-SIR practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other CIS-SIR practice questions
- Question 1If a desired pre-built integration cannot be found in the platform, what should be your n…
- Question 2Which one of the following users is automatically added to the Request Assessments list?
- Question 3Incident severity is influenced by the business value of the affected asset. Which of the…
- Question 4The severity field of the security incident is influenced by what?
- Question 5Joe is on the SIR Team and needs to be able to configure Territories and Skills. What rol…
- Question 6The EmailUserReportedPhishing script include processes inbound emails and creates a recor…
