Weekend Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

Free and Premium ServiceNow CIS-EM Dumps Questions Answers

Page: 1 / 9
Total 115 questions

Certified Implementation Specialist - Event Management Exam Questions and Answers

Question 1

What are the possible actions available in alert management?

Choose 3 answers

Options:

A.

Execute remediation subflows

B.

Execute remediation workflows

C.

Launch applications

D.

Evaluate business rule

E.

Create a service catalog request

Buy Now
Question 2

What applications are included in the ITOM Health solution?

Choose 3 answers

Options:

A.

Cloud Provisioning and Governance

B.

Health Log Analytics

C.

Agent Client Collector

D.

Discovery

E.

Service Mapping

F.

Event Management

Question 3

In default configuration using baseline connectors, how often is event data collected from event sources?

Options:

A.

Once every minute

B.

Every 2 minutes

C.

Twice every minute

D.

Every 5 minutes

Question 4

What two key steps must be performed after creating a new connector instance? (Choose two.)

Options:

A.

Assign a MID Server to the connector

B.

Enter credentials for the connector

C.

Debug the connector

D.

Test the connector

E.

Activate the connector

Question 5

When creating event rules, is it best practice to create:

Options:

A.

Two rules for every event

B.

As many rules as possible

C.

As few rules as possible

D.

One rule for every event

Question 6

Which attribute correlates multiple events to one alert?

Options:

A.

Additional_info

B.

Message_key

C.

Metric_name

D.

Short_description

Question 7

During CI binding, CI matching is done using which two fields? (Choose two.)

Options:

A.

Message Key

B.

Additional Information

C.

Source

D.

Node

Question 8

The individual commands that the Agent Client Collector executes on the host are known as what? (Choose three.)

Options:

A.

Events

B.

Checks

C.

Parameters

D.

Policies

E.

Metrics

F.

Scripts

Question 9

Based on the information shown, which of the following three alerts should be processed first?

Options:

A.

The Alert Priority score 3106020.001 was calculated according to the following factors, ordered by their respective priority (2018-06-01 19:34:01 GMT) Category (Score, Weight)

1. Business services – (3.0, 1000000)

2. Severity – (1.0, 100000)

3. CI type – (60.0, 100)

4. Role – (2.0, 10)

5. Secondary – (0)

6. State – (1.0, 0.001)

B.

The Alert Priority score 4406020.001 was calculated according to the following factors, ordered by their respective priority (2018-05-31 20:04:47 GMT) Category (Score, Weight)

1. Business services – (4.0, 1000000.0)

2. Severity – (4.0, 100000.0)

3. CI type – (60.0, 100.0)

4. Role – (2.0, 10.0)

5. Secondary – (0)

6. State – (1.0, 0.001)

C.

The Alert Priority score 3306020.001 was calculated according to the following factors, ordered by their respective priority (2018-05-31 19:56:54 GMT) Category (Score, Weight)

1. Business services – (3.0, 1000000.0)

2. Severity – (3.0, 100000.0)

3. CI type – (60.0, 100.0)

4. Role – (2.0, 10.0)

5. Secondary – (0)

6. State – (1.0, 0.001)

D.

They should be processed in the order in which they were received.

Question 10

Where would you look to find and troubleshoot transactions and events that occur on your ServiceNow instance?

Options:

A.

em_event table

B.

System log module

C.

Event Mangement dashboard

D.

State management logs module

Question 11

A dynamic grouping of CIs based upon common criteria (filtered CI classes) that can be visualized in operator workspace is called?

Options:

A.

A business service

B.

A technical service

C.

An application service

D.

A manual service

E.

A scoped service

Question 12

Which are recommended best practices for Event Management? (Choose three.)

Options:

A.

Filter out events on ServiceNow Instance for easier consolidation and aggregation.

B.

Promote all events to alerts during initial implementation until you fully understand which should be ignored.

C.

Filter out events at source rather than in the ServiceNow instance.

D.

Base-line “normal-state” events to filter out background noise.

E.

Ignore all non-critical events during initial implementation to streamline processing; add alerts over time as time and resources allow.

Question 13

Modified Agent Client Collector policies do not take effect until what action is taken?

Options:

A.

Agents are restarted

B.

Agents re-run the discovery policy

C.

MID server synchronization is initiated

D.

The policy is republished

E.

The check is tested on an existing agent/host

Question 14

What is an alert called that moves from an open to a closed state multiple times within a designated time-frame?

Options:

A.

Fluctuating

B.

Swinging

C.

Flipping

D.

Flapping

Question 15

A customer informs you that they already have monitoring and event management tools.

Which of the following describes the extra value that ServiceNow Event Management provides? (Choose four.)

Options:

A.

ServiceNow Event Management Alerts, Incidents, Problems, and changes are automatically correlated with CIs and Business Services that can be visualized in Business Service maps.

B.

ServiceNow Event Management manages relationships between alerts and related incidents to maintain an end-to-end event management lifecycle.

C.

ServiceNow Event Management provides a business-centric platform and single system of record for service monitoring and remediation results, to better control and manage performance and availability.

D.

ServiceNow Event Management provides state-of-the-art performance monitoring capabilities across a wide array of different types of infrastructures.

E.

ServiceNow Event Management utilizes the power of integration with leading monitoring systems to automatically create actionable alerts.

Question 16

In Service Operations Workspace, what tool shows relationships between configuration items and alerts with real-time updates and detailed impact paths?

Options:

A.

CMDB identification and reconciliation engine (IRE)

B.

Unified service map

C.

Dependency view map

D.

CMDB class manager

Question 17

What is the recommended approach to normalizing data from a source system to the default values in Event Management?

Options:

A.

Event field mapping

B.

Transform maps

C.

Alert management rules

D.

Business rules

Question 18

What event will cause Agent Client Collector self-monitoring to pause data collection?

Options:

A.

Communication with the MID server is lost

B.

The amount of host memory being used by the agent exceeds a threshold

C.

Communication with the ServiceNow instance is lost

D.

The amount of host disk space used by the agent exceeds a threshold

E.

The amount of host CPU being utilized by the agent exceeds a threshold

Question 19

Given the following Impact settings and Alerts in a three node cluster that makes up the components of a Business Service, what is the overall service health of this Business Service?

Options:

A.

Critical

B.

Error

C.

Major

D.

Minor

E.

Warning

F.

Clear

Question 20

Agent Client Collector is built on what framework that enables you to adopt and extend monitoring checks from the community?

Options:

A.

Icinga

B.

Sensu

C.

SolarWinds

D.

Nagios

E.

Zabbix

Question 21

If more than one event rule applies to a particular event or metric, which of the event rules will run based upon the Order of execution number?

Options:

A.

Only the event rule with the highest Order of execution number will run.

B.

Only the event rule with the lowest Order of execution number will run.

C.

All event rules will run, from the lowest to the highest Order of execution numbers.

D.

All event rules will run, from the highest to the lowest Order of execution numbers.

Question 22

How would you ensure the quality of data in your Configuration Management Database (CMDB) over time?

Options:

A.

Manually inventorying configuration items in the CMDB and eliminating duplicate configuration items (CIs)

B.

Only use the ServiceNow Discovery application to populate your CMDB

C.

Using only scripts to automatically monitor for and remediate duplicate configuration items (CIs)

D.

Having well-defined Identification, Reconciliation, and Relationship rules

Question 23

You have an event with a Source of ‘Trap from Enterprise 111’, but the alert created for this event shows a Source of ‘Oracle EM’. If you want to change what this is set to, where in the event rule would you do this?

Options:

A.

Transform and Compose Alert Output lab

B.

Event rule info tab

C.

CI Binding tab

D.

Event Filter tab

Question 24

Out-of-the-box. how often do tie everts get processed in ServiceNow?

Options:

A.

Every 5 seconds

B.

Depends on connectors Used

C.

Every minute via a scheduled job

D.

As soon as the event record is inserted via a business rule

Question 25

What is the default collection/polling interval applied to all event connectors?

Options:

A.

Every 120 seconds

B.

Every 5 seconds

C.

Every 40 seconds

D.

Every 60 seconds

E.

Every 10 seconds

Question 26

The correct regex to capture the name of the server in “the server webserver3.domain.com is down” would be:

Options:

A.

.*(\w+\.\w+\.\w+).*

B.

The server (.*)\s.*

C.

.*\s(\w+\.\w+\.\w+).*

D.

the server (.*).*

Question 27

The default polling time to collect events from an event source is:

Options:

A.

5 seconds

B.

30 seconds

C.

60 seconds

D.

120 seconds

Question 28

What is the minimum role needed to view alerts?

Options:

A.

alert_operator

B.

evt_mgmt_user

C.

evt_mgmt_operator

D.

alert_user

Question 29

You have a system configured with a MID Web Server using Basic authentication to enable Operational Management Intelligence (OI) to push raw metric data to the MID Server. No data is getting through to the MID Server.

What is the most likely cause of the issue?

Options:

A.

The MID Web Server needs to be Restarted

B.

The MID Web Server needs to be Started

C.

An invalid secret key is being passed in the header information of the URL for the REST request

D.

An invalid password is set in the MID Web Server Context

Question 30

MID Servers provide important functions in your ITOM Health deployment.

What does MID stand for?

Options:

A.

Management, Instrumentation, and Discovery

B.

Messaging, Integration, and Data

C.

Monitoring, Insight, and Domain

D.

Maintenance, Information, and Distribution

Question 31

What are the valid states an alert can be in during its lifecycle?

Options:

A.

Open, Reopen, Flapping, Closed

B.

New, Updating, Waiting, Complete

C.

Open, Updating, Swinging, Closed

D.

Open, Warning, Flapping, Clear

Question 32

Where are approval requests for execution of alert remediation tasks configured?

Options:

A.

In the Flow Designer remediation subflow

B.

In Service Operations Workspace

C.

In the alert management rule's approvals related list

D.

In the alert management rule's playbook

Question 33

What makes all ServiceNow metrics, tasks, services, configuration items, assets, people, locations, and information a single system of record for IT and business processes?

Options:

A.

ServiceNow is installed within your datacenter providing you complete control

B.

All applications are built on the Oracle database standard, providing uniformity across products

C.

All applications that are built by ServiceNow utilize the same data model and code base

D.

ServiceNow runs on supported Windows servers and is managed through Windows Update

E.

A single table houses all data elements within ServiceNow

F.

ServiceNow utilizes the AWS MariaDB cloud database structure, providing a single system of record

Question 34

How often do baseline event connectors retrieve events?

Options:

A.

Every 30 seconds

B.

Every 2 minutes

C.

Every 10 minutes

D.

Every 1 minute

E.

Every 5 minutes

Page: 1 / 9
Total 115 questions