ServiceNow Certified Implementation Specialist – Security Incident Response — Question 17

ServiceNow follows the basic guidelines of the NIST lifecycle. Based on the best course of action, usually guided by runbooks and established procedures, problems sought to be fixed in which phase?

Answer options

• A. Analysis
• B. Detection
• C. Eradication
• D. Review

Correct answer: C

Explanation

The correct answer is C, Eradication, as this phase focuses on resolving identified problems based on predefined procedures. The Analysis phase (A) is about understanding the issues, Detection (B) is concerned with identifying potential problems, and Review (D) evaluates the effectiveness of the response, but does not involve direct fixing of issues.