ServiceNow Certified Implementation Specialist – Security Incident Response — Question 98

A Post Incident Review can contain which of the following? (Choose three.)

Answer options

• A. Post incident questionnaires
• B. An audit trail
• C. Attachments associated with the security incident
• D. Key incident fields
• E. Performance Analytics reports

Correct answer: A, B, D

Explanation

The correct answers A, B, and D are integral components of a Post Incident Review as they provide insights and documentation about the incident. Option C, while relevant to incidents, is more about specific files rather than review content, and option E refers to general performance metrics rather than specific incident review elements.