ServiceNow Certified Implementation Specialist – Security Incident Response — Question 32

What factor, if any, limits the ability to close SIR records?

Answer options

• A. Opened related INC records
• B. Best practice dictates that SIR records should be set to 'Resolved' never to 'Closed'
• C. Nothing, SIR records could be closed at any time
• D. All post-incident review questioners have to be completed first

Correct answer: D

Explanation

The correct answer is D because it is necessary to complete all post-incident review questionnaires before closing SIR records. Options A, B, and C are incorrect as they do not reflect the procedural requirements for closing SIR records.