ServiceNow CIS-VR Exam Practice Questions, practice question pack
SERVICENOW · CIS-VR

ServiceNow CIS-VR Exam Practice Questions

132 questionsPDF by emailUpdated September 2026

US$39

Try 10 questions free

Card, Apple Pay or Google Pay. Your PDF is sent by email as soon as you check out.

Pass or your money backFail the exam after using this pack and we refund it. How the guarantee works
Category:
TRY BEFORE YOU BUY

Three of the 132 questions in this pack

Question 1

Select the three components of a Filter Condition: (Choose three.)

  1. Field
  2. Sum
  3. Operator
  4. Value
Show answer and explanation

Correct answer: A, C, D

A. Field C. Operator D. Value A Filter Condition in ServiceNow consists of three essential components: the Field (what attribute to filter on), the Operator (how to compare the field value), and the Value (what to compare against). These three elements work together to create a logical filtering rule. Sum is a mathematical aggregation function and is not a component of a filter condition structure.

Why the other options are wrong

  • B. Sum is an aggregation function used in reporting and calculations, not a filter condition component.

Question 2

SLAs are used to ensure VUL are processed in a timely matter.

Which field is used to determine the expected timeframe for remediating a VIT?

  1. Updated
  2. Remediation status
  3. Remediation target
  4. Closed
Show answer and explanation

Correct answer: C. Remediation target

The Remediation target field is used to determine the expected timeframe for remediating a vulnerability. This field sets the deadline or target date by which remediation should be completed according to the SLA. Updated tracks when changes occurred, Remediation status indicates the current state of remediation work, and Closed indicates completion, none of these define the expected timeframe for remediation.

Why the other options are wrong

  • A. Updated tracks when records were modified, not the expected remediation timeframe.
  • B. Remediation status shows current progress but does not define the expected timeframe.
  • D. Closed indicates when work is finished, not when it should be completed by.

Question 3

What is the minimum role required to create and change Service Level Agreements for Vulnerability Response groups?

  1. sla_manager
  2. admin
  3. sn_vul.vulnerability_write
  4. sn_vul.admin
Show answer and explanation

Correct answer: D. sn_vul.admin

The sn_vul.admin role is the minimum role required to create and change Service Level Agreements for Vulnerability Response groups. This role provides the necessary administrative privileges specific to the Vulnerability Response module. While admin is a global administrative role that could perform this function, sn_vul.admin is the appropriate specialized role. The sla_manager role manages SLAs in general but not specifically for Vulnerability Response, and sn_vul.vulnerability_write is for writing vulnerability records, not managing SLAs.

Why the other options are wrong

  • A. sla_manager handles general SLA management but not specifically for Vulnerability Response groups.
  • B. admin is overly broad; the specific sn_vul.admin role is the minimum required.
  • C. sn_vul.vulnerability_write allows writing vulnerability records, not creating or changing SLAs.

See all 10 free questions Get the full pack, US$39

132 practice questions for ServiceNow Certified Implementation Specialist: Vulnerability Response (CIS-VR), with full explanations.

Every question comes with the correct answer, the reasoning behind it, and a short note on why each wrong option is wrong. Work through it once with the answers, then again with the questions-only copy under exam conditions.

  • 132 questions across all five CIS-VR domains
  • Answers and explanations for every question, including the wrong options
  • A questions-only PDF for timed practice runs
  • Instant delivery by email the moment you check out
  • Free monthly updates for as long as the exam is live
  • Pass or your money back

A CIS-VR attempt costs US$450. This pack is US$39, paid once.

Try 10 questions free before you buy.

Last updated September 2026 · 132 questions

What makes the CIS-VR hard

CIS-VR is the vulnerability half of the ServiceNow Security Operations pair, and the exam is really about one pipeline: scanner findings come in, get matched to configuration items, become vulnerable items, get grouped, assigned, remediated or excepted, and closed out. Every domain sits somewhere on that pipeline. It is 45 questions in 90 minutes, cut against the Zurich release, and because CIS-DF is now a prerequisite it assumes you know how CI matching and the IRE behave.

Applications and Modules and Getting Data In are 25% each. The applications domain covers the Security Operations overview, the Vulnerability Response data model on the platform, and the Application Vulnerability Response and Container Vulnerability Response extensions. Getting data in covers vulnerabilities versus vulnerable items, integrating scanners such as Qualys, Tenable and Rapid7 and other sources, the application and container integrations, and solution and enrichment management.

Tools to Manage Vulnerability Response at 23% covers the Vulnerability Workspaces, classification rules, assignment rules, remediation task rules, remediation target rules and the vulnerability calculators that set risk scores. Automating Vulnerability Response at 20% covers exceptions and false positives, workflows for process automation and vulnerability close out. Dashboards and Reports at 7% covers data visualisation, dashboards and reporting, and Performance Analytics. The rule order questions are the ones people miss: know which rule runs first when a vulnerable item is created and what happens when two rules match.

About the exam

CIS-VR (Certified Implementation Specialist, Vulnerability Response) certifies the ability to implement ServiceNow Vulnerability Response: the VR applications and modules, getting scanner data into VR, the tools to manage remediation, automating VR, and dashboards and reports. Prerequisite: the CIS Data Foundations (CMDB and CSDM) certification. ServiceNow recommends the Vulnerability Response Fundamentals and Implementation courses.

Exam domains

  • Vulnerability Response Applications and Modules: 25%
  • Getting Data into Vulnerability Response: 25%
  • Tools to Manage Vulnerability Response: 23%
  • Automating Vulnerability Response: 20%
  • Vulnerability Response Dashboards and Reports: 7%

45 multiple-choice and multiple-select questions, 90 minutes, passing score not published by ServiceNow, US$450 per attempt (instructor-led training includes one free attempt), Pearson VUE test centre or OnVUE online proctored, certification kept current with annual delta exams and the yearly Certification Maintenance Program fee.

Reviews

There are no reviews yet.

Only logged in customers who have purchased this product may leave a review.

Questions before you buy

What do I get when I buy the ServiceNow CIS-VR pack?

132 practice questions as a PDF, each with the correct answer, a full explanation and a note on why the other options are wrong, plus a separate questions-only PDF for timed practice.

How quickly do I receive it?

Your PDF is prepared and sent to your email address after checkout, and you get a confirmation as soon as it is on its way.

Is there a free sample?

Yes. Ten questions from this pack, with answers and explanations, are free on this page and as a PDF, so you can judge the quality before you pay.

Are updates included?

Yes. The pack is updated every month for as long as the exam is live, and updates are free for everyone who has bought it.

What if I fail the exam?

We refund the pack. Sit the exam 7 to 30 days after buying, then send your official score report within 7 days of the exam date, as set out in the refund policy.

Can I share it with colleagues?

Each purchase is licensed to one person. For a team, school or training organisation, email support@certstash.com for a licence that fits.

Related products