ServiceNow Certified Implementation Specialist – Security Incident Response — Question 21

Select the one capability that retrieves a list of active network connections from a host or endpoint.

Answer options

• A. Sightings Search
• B. Block Action
• C. Get Running Processes
• D. Publish Watchlist
• E. Isolate Host
• F. Get Network Statistics

Correct answer: F

Explanation

The correct answer is F, Get Network Statistics, as it specifically retrieves information about active network connections. The other options do not focus on network connections; for instance, A deals with sightings, B pertains to blocking actions, C involves processes, D relates to watchlists, and E isolates hosts.