ServiceNow Certified Implementation Specialist – Security Incident Response — Question 45

If the customer’s email server currently has an account setup to report suspicious emails, then what happens next?

Answer options

• A. an integration added to Exchange keeps the ServiceNow platform in sync
• B. the ServiceNow platform ensures that parsing and analysis takes place on their mail server
• C. the customer’s systems are already handling suspicious emails
• D. the customer should set up a rule to forward these mails onto the ServiceNow platform

Correct answer: D

Explanation

The correct answer is D because forwarding suspicious emails to the ServiceNow platform allows for proper handling and escalation of potential threats. Options A and B do not address the immediate action needed for reported emails, while C suggests that the existing systems are managing these emails, which may not be the case if reporting is required.