CIS-EM practice test

1. Question 1 · 1

   When creating an alert management rule, where would you specify a workflow to resolve a given condition?

   Choose one answer.

   • From the Remediation tab
   • From the Actions tab
   • From the Launcher tab
   • In the Related Links section

2. Question 2 · 1

   What feature would you use to trigger a workflow or automatically generate tasks via templates?

   Choose one answer.

   • Event rules
   • Task rules
   • Alert management rules
   • Alert correlation rules

3. Question 3 · 1

   By default, when are idle alerts are closed?

   Choose one answer.

   • After 7 days
   • After 14 days
   • After 30 days
   • Never

4. Question 4 · 1

   What is used to correctly bind an alert to an application?

   Choose one answer.

   • Correlation rules
   • Workflows
   • Classifiers
   • CI identification rules

5. Question 5 · 1

   Where would you find the Priority Breakdown for an Alert?

   Choose one answer.

   • Under the More Information section
   • Under the Activities section
   • Under the History section
   • Under the CI Problems section

6. Question 6 · 1

   In your environment, no alert CMDB, automated, or text based grouping is occurring. What is most likely the problem?

   Choose one answer.

   • No correlation rules have been defined
   • No event management rules have been defined
   • Application services are not operational
   • No CMDB is configured
   • The alert correlation property that enables grouping is set to false

7. Question 7 · 1

   The additional information field is a JSON string that gives more information about an event. An example of a supported JSON string is:

   Choose one answer.

   • {"CPU":100}
   • {"CPU":100,’Status":3}
   • {"CPU":"100","Status":3}
   • {"CPU":"100"}

8. Question 8 · 1

   In order for SNMP trap notifications to appear in ServiceNow as events, what option must be enabled in the required MID server?

   Choose one answer.

   • MID SNMP trap listener
   • SNMP event manager module for MID
   • Event collector MID server extension
   • SNMP agent for MID

9. Question 9 · 1

   What event will cause Agent Client Collector self-monitoring to pause data collection?

   Choose one answer.

   • Communication with the MID server is lost
   • The amount of host memory being used by the agent exceeds a threshold
   • Communication with the ServiceNow instance is lost
   • The amount of host disk space used by the agent exceeds a threshold
   • The amount of host CPU being utilized by the agent exceeds a threshold

10. Question 10 · 1

    What are the valid states an alert can be in during its lifecycle?

    Choose one answer.

    • Open, Reopen, Flapping, Closed
    • New, Updating, Waiting, Complete
    • Open, Updating, Swinging, Closed
    • Open, Warning, Flapping, Clear

11. Question 11 · 1

    What Event Management module allows for configuration of automatic task creation?

    Choose one answer.

    • Alert management rules
    • Task rules
    • Event rules
    • Alert correlation rules

12. Question 12 · 1

    You have a system configured with a MID Web Server using Basic authentication to enable Operational Management Intelligence (OI) to push raw metric data to the MID Server. No data is getting through to the MID Server. What is the most likely cause of the issue?

    Choose one answer.

    • The MID Web Server needs to be Restarted
    • The MID Web Server needs to be Started
    • An invalid secret key is being passed in the header information of the URL for the REST request
    • An invalid password is set in the MID Web Server Context

13. Question 13 · 1

    In the event table, which field maps the external attributes from the target system?

    Choose one answer.

    • Resource
    • Description
    • Source
    • Additional Information

14. Question 14 · 1

    By default, the Alert Console displays what type of alerts?

    Choose one answer.

    • All Primary, Open alerts and anomaly alerts with a Severity of Critical, Major, Minor, and Warning that are not in Maintenance mode
    • All Primary and Secondary Open alerts and anomaly alerts with a Severity of Critical, Major, Minor, and Warning that are not in Maintenance mode
    • All Primary alerts with a Severity of Critical, Major, Minor, Warning that are not in Maintenance mode
    • All Primary, Open alerts with a Severity of Critical, Major, Minor, and Warning that are not in Maintenance mode
    • All Primary and Secondary Open alerts with a Severity of Critical, Major, Minor, and Warning that are not in Maintenance mode

15. Question 15 · 1

    Which are recommended best practices for Event Management? (Choose three.)

    Choose all answers that apply.

    • Filter out events on ServiceNow Instance for easier consolidation and aggregation.
    • Promote all events to alerts during initial implementation until you fully understand which should be ignored.
    • Filter out events at source rather than in the ServiceNow instance.
    • Base-line “normal-state” events to filter out background noise.
    • Ignore all non-critical events during initial implementation to streamline processing; add alerts over time as time and resources allow.

Paid access to all 97 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.