A.Because SIR is a scoped application, roles and script includes will begin with the sn_si prefix

B.Because the Security Incident Response application uses a Secure Identity token

C.Because ServiceNow checks the instance for a Secure Identity when logging on to this scoped application

D.Because ServiceNow tracks license use against the Security Incident Response Application

A.To allow the agent to select which calculator they want to execute

B.To ensure one at maximum will run per group

C.To set the condition for all calculators to run

D.To provide metadata about the calculators

A.Security Analyst

B.Manager

C.Security Basic

D.Security Admin

A.Runbook property set to true

B.Trigger set to conditions that match the security incident

C.Service Criticality set to High

D.Actions defined to create tasks

A.State of the phishing email

B.Who reported the phishing attempt

C.URLs, domains, or IP addresses appearing in the body

D.Hashes and/or file names found in the EML attachment

E.Type of Ingestion Rule used to identify this email as a phishing attempt

F.IP addresses from the header