Weekend Sale Limited Time Flat 70% Discount offer - Ends in 0d 00h 00m 00s - Coupon code: 70spcl

ServiceNow CIS-EM Certified Implementation Specialist - Event Management Exam Exam Practice Test

Page: 1 / 12
Total 115 questions

Certified Implementation Specialist - Event Management Exam Questions and Answers

Question 1

Which step in the event rule configuration process enables you to ignore events and prevent alert generation?

Options:

A.

Transform and compose alert output

B.

Event filter

C.

Event options

D.

Threshold

Question 2

What would you use to define the monitoring sources allowed to communicate with the ServiceNow instance for Operational Intelligence?

Options:

A.

Metric Registration

B.

Metric Config Rules

C.

Metric Type Actions

D.

Metric to CI

Question 3

What ServiceNow feature is an aid to rapid implementation of your Event Management and Operational Intelligence features?

Options:

A.

Deployment wizard

B.

Step-by-step guide

C.

Checklist application

D.

Guided setup

Question 4

What is an alert called that moves from an open to a closed state multiple times within a designated time-frame?

Options:

A.

Fluctuating

B.

Swinging

C.

Flipping

D.

Flapping

Question 5

If more than one alert management rule applies to a particular alert which of the rules will run based upon the Order of execution field?

Options:

A.

All alert management rule will run, from the highest to the lowest Order of execution numbers.

B.

Only the alert management rule with the highest Order of execution number will run.

C.

All alert management rule will run, from the lowest to the highest Order of execution numbers.

D.

Only the alert management rule with the lowest Order of execution number will run.

Question 6

Given the following Impact settings and Alerts in a three node cluster that makes up the components of a Business Service, what is the overall service health of this Business Service?

Question # 6

Options:

A.

Critical

B.

Error

C.

Major

D.

Minor

E.

Warning

F.

Clear

Question 7

What determines if an alert management rule's actions apply to an alert?

Options:

A.

The alert's bound configuration item

B.

The alert management rule's filter

C.

The alert management rule's field mapping

D.

The message key

Question 8

What does Operational Intelligence proactively identify before they cause service outages?

Options:

A.

Missing CMDB data

B.

Defects

C.

Alert correlations

D.

Orphaned CIs

E.

Anomalies

Question 9

What are the possible actions available in alert management?

Choose 3 answers

Options:

A.

Execute remediation subflows

B.

Execute remediation workflows

C.

Launch applications

D.

Evaluate business rule

E.

Create a service catalog request

Question 10

Where would you look to find and troubleshoot transactions and events that occur on your ServiceNow instance?

Options:

A.

em_event table

B.

System log module

C.

Event Mangement dashboard

D.

State management logs module

Question 11

A support agent resolves an incident associated with an alert. What is the best method to close the alert?

Options:

A.

Set the evt_mgmt.incident_closes_alert

B.

Set the evt_mgmt.alert_closes_incident

C.

Switch over to the alert form and close the alert manually

D.

Create a business rule on the alert table to match the associated Incident with its respective alert

E.

Create a business rule on the incident table

Question 12

You have an event with a Source of ‘Trap from Enterprise 111’, but the alert created for this event shows a Source of ‘Oracle EM’. If you want to change what this is set to, where in the event rule would you do this?

Options:

A.

Transform and Compose Alert Output lab

B.

Event rule info tab

C.

CI Binding tab

D.

Event Filter tab

Question 13

What are the server requirements to allow Operational Intelligence to successfully collect operational metric data via a push?

Options:

A.

This requires a minimum of three MID Servers - two for Event Management and one additional MID Server dedicated for use by Operational Intelligence (OI).

B.

This requires a MID Web Server in addition to the MID Server.

C.

Nothing additional is required; this is handled by the MID Server.

D.

This requires a minimum of two MID Servers - one for Event Management and one additional MID Server dedicated for use by Operational Intelligence (OI).

Question 14

When are anomaly alerts generated by Operational Intelligence displayed in alert intelligence?

Options:

A.

When the statistical model threshold is breached

B.

When they are promoted to IT alerts

C.

When it is manually promoted in insights explorer

D.

When the anomaly score is greater than 100

Question 15

What is one of the main benefits of using Event Management and Operational Intelligence?

Options:

A.

To improve service availability by helping IT staff pinpoint service issue causes and evaluate the impact of planned changes.

B.

To increase service agility and produce fast, predictable results by automating manual, routine, error-prone tasks.

C.

To rapidly configure and launch secure, agentless discovery of hardware and software resources and their relationships.

D.

To proactively warn against possible service outages using a range of advanced predictive machine learning methods.

Question 16

To determine the top incidents for the CI associated with an alert, where is the best place to look?

Options:

A.

Alert Insights

B.

Incident List View

C.

CMDB Health Dashboard

D.

Event Management Overview page

Question 17

A monitoring tool notification of a notable occurrence is known as what?

Options:

A.

An alarm

B.

An alert

C.

An incident

D.

A notice

E.

An event

F.

A metric

Question 18

Out-of-the-box. how often do tie everts get processed in ServiceNow?

Options:

A.

Every 5 seconds

B.

Depends on connectors Used

C.

Every minute via a scheduled job

D.

As soon as the event record is inserted via a business rule

Question 19

How often do baseline event connectors retrieve events?

Options:

A.

Every 30 seconds

B.

Every 2 minutes

C.

Every 10 minutes

D.

Every 1 minute

E.

Every 5 minutes

Question 20

The ServiceNow standard and shared set of service-related definitions that enable and support true service level reporting is known as what?

Options:

A.

Service level data model

B.

Business service data model

C.

Application service data model

D.

Common service data model

Question 21

What feature would you use to trigger a workflow or automatically generate tasks via templates?

Options:

A.

Event rules

B.

Task rules

C.

Alert management rules

D.

Alert correlation rules

Question 22

You have a system configured with a MID Web Server using Basic authentication to enable Operational Management Intelligence (OI) to push raw metric data to the MID Server. No data is getting through to the MID Server.

What is the most likely cause of the issue?

Options:

A.

The MID Web Server needs to be Restarted

B.

The MID Web Server needs to be Started

C.

An invalid secret key is being passed in the header information of the URL for the REST request

D.

An invalid password is set in the MID Web Server Context

Question 23

A Service is not viewable in Operator Workspace. What could be the issue?

Options:

A.

The service is a manual service

B.

The service is not set to operational

C.

The service was created through Service Mapping

D.

The service is a technical service

Question 24

What does the Service Operations Workspace express list reduce the need for?

Choose 2 answers

Options:

A.

Conducting root cause analysis

B.

Constantly refreshing the list of alerts

C.

Navigating through different interfaces

D.

Performing remediation actions

Question 25

A support agent resolves an incident associated with an alert, but the alert does automatically close even though the evt_mgmt.incident_closes_alert property is set appropriately to close the alert.

What is the most likely cause of this issue?

Options:

A.

The support agent does not have the evt_mgmt_user role.

B.

The support agent only has the evt_mgmt_admin role.

C.

The support agent has the evt_mgmt_operator role, but not the evt_mgmt_user role.

D.

The support agent has the evt_mgmt_user role, but not the evt_mgmt_operator role.

Question 26

If a Message Key is not provided, which fields are concatenated to make our own?

Options:

A.

Source, Type, Node, Resource, Metric Name

B.

Source, DNS, Node, Additional info, Metric Name

C.

Source, Type, DNS, Additional info, Metric Name

D.

Source, Source Instance, Node, Type, Resource

Question 27

You have an event that needs to be bound to a non-host CI.

Which attribute needs to be removed from the Transform and Compose tab?

Options:

A.

Source Instance

B.

Metric Name

C.

Node

D.

Resource

Question 28

For an incoming event with a matching message key, what allows an existing alert to be automatically closed?

Options:

A.

In the event rule, set the Severity to 0

B.

In the alert rule, set the Severity to 0

C.

In the alert rule, set the Severity to -1

D.

In the event rule, set the Severity to -1

Question 29

What is the function of the External Communication Channel (ECC) Queue? (Choose three.)

Options:

A.

It is a connection point between a ServiceNow instance and the MID Server.

B.

It contains probe records to be executed on the customer’s network.

C.

It holds jobs that the MID Server needs to perform.

D.

It is a connection point between a hardware CI on a customer’s network and the MID Server.

E.

It contains records of CIs that the ServiceNow admin has submitted for entry into the CMDB.

Question 30

A customer informs you that they already have monitoring and event management tools.

Which of the following describes the extra value that ServiceNow Event Management provides? (Choose four.)

Options:

A.

ServiceNow Event Management Alerts, Incidents, Problems, and changes are automatically correlated with CIs and Business Services that can be visualized in Business Service maps.

B.

ServiceNow Event Management manages relationships between alerts and related incidents to maintain an end-to-end event management lifecycle.

C.

ServiceNow Event Management provides a business-centric platform and single system of record for service monitoring and remediation results, to better control and manage performance and availability.

D.

ServiceNow Event Management provides state-of-the-art performance monitoring capabilities across a wide array of different types of infrastructures.

E.

ServiceNow Event Management utilizes the power of integration with leading monitoring systems to automatically create actionable alerts.

Question 31

You have a very large networking environment and have noticed that your event notifications are either not being triggered or are delayed.

What are best options to try to resolve this issue? (Choose two.)

Options:

A.

Ensure all Event Management – process events jobs are set to a Ready state

B.

Verify that the Bucket field in the event table is set to zero (0)

C.

Add additional event processor jobs

D.

Ensure multi-node event processing is disabled

Question 32

What event value will auto close an alert?

Options:

A.

Severity of -1/OK

B.

Type of Clear

C.

Resolution State of Closing

D.

Resolution State of Clear

E.

Severity of 0/Clear

Question 33

The MID Server requires an outbound connection on which port?

Options:

A.

445

B.

161

C.

443

D.

143

Question 34

What missing attribute would cause an event to have a state of Error?

Options:

A.

Metric Name

B.

Source

C.

Classification

D.

Node

E.

Severity

Page: 1 / 12
Total 115 questions