ServiceNow Certified Implementation Specialist – Security Incident Response — Question 115

Select all of the following which are key features of the Malware Information Sharing Platform (Choose three.)

Answer options

• A. Dedicated MISP workspace for managing major security incidents
• B. Auto-extract MITRE-ATT&CK™ information from MISP attributes and associate them to SIR security incidents
• C. Attribute enrichment including adding or updating tags, galaxies, or attributes
• D. Send malware to MISP for detonation
• E. Add security incident associated observables as attributes to a MISP event

Correct answer: B, C, E

Explanation

The correct answers B, C, and E highlight specific functionalities that enhance the management and analysis of security incidents within MISP. Option A, while relevant, describes a workspace rather than a feature, and option D refers to a process that is not a primary feature of MISP.