ServiceNow Certified Implementation Specialist – Security Incident Response — Question 28

Which of the following management activities are associated with Major Security Incident Management?

Answer options

• A. Link security incidents as child incidents to other child incidents, so that all security incidents can be worked
• B. Link security incidents as parent incidents to the major security incident (MSI) so that all security incidents can be worked
• C. Link security incidents as child incidents to the major security incident (MSI) so that all security incidents can be worked
• D. Link security incidents as minor incidents to the major security incident (MSI) so that all security incidents can be worked

Correct answer: C

Explanation

The correct answer is C because linking security incidents as child incidents to the major security incident (MSI) allows for effective tracking and management of related incidents. Options A and B incorrectly describe the relationship between incidents, while option D misclassifies the nature of the incidents in relation to the MSI.