ServiceNow Certified Implementation Specialist – Vulnerability Response — Question 13

In regard to the Security Operations Process, which of the following statements defines the “Identify” phase?

Answer options

• A. What processes and assets need protection?
• B. What techniques can identify incidents?
• C. What safeguards are available?
• D. What techniques can restore capabilities?
• E. What techniques can contain impacts of incidents?

Correct answer: A

Explanation

The correct answer, A, focuses on determining the processes and assets that require protection, which is the primary aim of the 'Identify' phase. The other options pertain to different aspects of security operations, such as incident identification, safeguards, restoration, and impact containment, which are relevant to other phases of the process.