CIS-EM
Free trial
Verified
Question 1
When creating an alert management rule, where would you specify a workflow to resolve a given condition?
- A: From the Remediation tab
- B: From the Actions tab
- C: From the Launcher tab
- D: In the Related Links section
Question 2
What feature would you use to trigger a workflow or automatically generate tasks via templates?
- A: Event rules
- B: Task rules
- C: Alert management rules
- D: Alert correlation rules
Question 3
By default, when are idle alerts are closed?
- A: After 7 days
- B: After 14 days
- C: After 30 days
- D: Never
Question 4
What is used to correctly bind an alert to an application?
- A: Correlation rules
- B: Workflows
- C: Classifiers
- D: CI identification rules
Question 5
If you wanted to create a quick response alert rule to open an Ask Jeeves search on the description of the alert, where would it configured?
- A: Launch Applications
- B: Remediation Workflows
- C: Remediation SubFlows
- D: Operator Workspace
Question 6
Where would you find the Priority Breakdown for an Alert?
- A: Under the More Information section
- B: Under the Activities section
- C: Under the History section
- D: Under the CI Problems section
Question 7
Where does an operator give feedback on an automated alert grouping?
- A: Feedback attribute on the virtual alert record
- B: Feedback attribute on the child alert record
- C: Feedback attribute on the event record
- D: Feedback attribute on the alert record
- E: Dropdown box on the alert group record
Question 8
In your environment, no alert CMDB, automated, or text based grouping is occurring. What is most likely the problem?
- A: No correlation rules have been defined
- B: No event management rules have been defined
- C: Application services are not operational
- D: No CMDB is configured
- E: The alert correlation property that enables grouping is set to false
Question 9
The additional information field is a JSON string that gives more information about an event. An example of a supported JSON string is:
- A: {"CPU":100}
- B: {"CPU":100,’Status":3}
- C: {"CPU":"100","Status":3}
- D: {"CPU":"100"}
Question 10
In order for SNMP trap notifications to appear in ServiceNow as events, what option must be enabled in the required MID server?
- A: MID SNMP trap listener
- B: SNMP event manager module for MID
- C: Event collector MID server extension
- D: SNMP agent for MID
Question 11
What event will cause Agent Client Collector self-monitoring to pause data collection?
- A: Communication with the MID server is lost
- B: The amount of host memory being used by the agent exceeds a threshold
- C: Communication with the ServiceNow instance is lost
- D: The amount of host disk space used by the agent exceeds a threshold
- E: The amount of host CPU being utilized by the agent exceeds a threshold
Question 12
Agent Client Collector can perform application service monitoring by configuring what option?
- A: An alert management rule
- B: A proxy agent
- C: A distributed cluster
- D: An event rule
- E: A REST API
Question 13
What are the valid states an alert can be in during its lifecycle?
- A: Open, Reopen, Flapping, Closed
- B: New, Updating, Waiting, Complete
- C: Open, Updating, Swinging, Closed
- D: Open, Warning, Flapping, Clear
Question 14
What Event Management module allows for configuration of automatic task creation?
- A: Alert management rules
- B: Task rules
- C: Event rules
- D: Alert correlation rules
Question 15
You have a system configured with a MID Web Server using Basic authentication to enable Operational Management Intelligence (OI) to push raw metric data to the MID Server. No data is getting through to the MID Server.
What is the most likely cause of the issue?
- A: The MID Web Server needs to be Restarted
- B: The MID Web Server needs to be Started
- C: An invalid secret key is being passed in the header information of the URL for the REST request
- D: An invalid password is set in the MID Web Server Context
Question 16
In the event table, which field maps the external attributes from the target system?
- A: Resource
- B: Description
- C: Source
- D: Additional Information
Question 17
By default, the Alert Console displays what type of alerts?
- A: All Primary, Open alerts and anomaly alerts with a Severity of Critical, Major, Minor, and Warning that are not in Maintenance mode
- B: All Primary and Secondary Open alerts and anomaly alerts with a Severity of Critical, Major, Minor, and Warning that are not in Maintenance mode
- C: All Primary alerts with a Severity of Critical, Major, Minor, Warning that are not in Maintenance mode
- D: All Primary, Open alerts with a Severity of Critical, Major, Minor, and Warning that are not in Maintenance mode
- E: All Primary and Secondary Open alerts with a Severity of Critical, Major, Minor, and Warning that are not in Maintenance mode
Question 18
Which are recommended best practices for Event Management? (Choose three.)
- A: Filter out events on ServiceNow Instance for easier consolidation and aggregation.
- B: Promote all events to alerts during initial implementation until you fully understand which should be ignored.
- C: Filter out events at source rather than in the ServiceNow instance.
- D: Base-line “normal-state” events to filter out background noise.
- E: Ignore all non-critical events during initial implementation to streamline processing; add alerts over time as time and resources allow.
Question 19
For an incoming event with a matching message key, what allows an existing alert to be automatically closed?
- A: In the event rule, set the Severity to 0
- B: In the alert rule, set the Severity to 0
- C: In the alert rule, set the Severity to -1
- D: In the event rule, set the Severity to -1
Question 20
A support agent resolves an incident associated with an alert, but the alert does automatically close even though the evt_mgmt.incident_closes_alert property is set appropriately to close the alert.
What is the most likely cause of this issue?
- A: The support agent does not have the evt_mgmt_user role.
- B: The support agent only has the evt_mgmt_admin role.
- C: The support agent has the evt_mgmt_operator role, but not the evt_mgmt_user role.
- D: The support agent has the evt_mgmt_user role, but not the evt_mgmt_operator role.
Question 21
What are the two most accurate statements regarding the ServiceNow CMDB (configuration management database) and CIs (configuration items)?
- A: The CMDB is a series of tables that contain only key hardware components located in critical paths within your platform that must be managed.
- B: The CMDB is a dynamic list that tracks both the CIs within your platform and the relationship between those items.
- C: All CIs stored in the CMDB must have an assigned IP address within your infrastructure.
- D: A CI is any component within your infrastructure that needs to be managed in order to deliver Services.
Question 22
What types of system can a MID Server install on? (Choose two.)
- A: OpenVMS System
- B: Microsoft Windows Server
- C: Linux System
- D: Microsoft Windows Desktop
- E: Any system inside the customer firewall
- F: Mac OS X System
That’s the end of your free questions
You’ve reached the preview limit for CIS-EMConsider upgrading to gain full access!
Free preview mode
Enjoy the free questions and consider upgrading to gain full access!