CIS-SIR Questions Bank

Knowledge articles that describe steps an analyst needs to follow to complete Security incident tasks might be associated to those tasks through which of the following?

What is calculated as an arithmetic mean taking into consideration different values in the CI, Security Incident, and User records?

Select the one capability that retrieves a list of running processes on a CI from a host or endpoint.

Which of the following tag classifications are provided baseline? (Choose three.)