Weekend Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: clap70

CIS-EM Certified Implementation Specialist - Event Management Exam Questions and Answers

Questions 4

What is Event Management licensing based on?

Options:

A.

The number of unique nodes that can send events to the instance

B.

The number of connectors and listeners it will collect data from

C.

The number of connectors it will collect data from

D.

The number of CIs in the CMDB that it will be monitoring

Buy Now
Questions 5

What is the primary function of the link view feature in the Service Operations Workspace express list?

Options:

A.

To automatically generate incidents from linked alerts

B.

To manage user permissions across teams

C.

To visualize tag-based alert groups

D.

To update the CMDB dependency map

Buy Now
Questions 6

What is the function of the External Communication Channel (ECC) Queue? (Choose three.)

Options:

A.

It is a connection point between a ServiceNow instance and the MID Server.

B.

It contains probe records to be executed on the customer’s network.

C.

It holds jobs that the MID Server needs to perform.

D.

It is a connection point between a hardware CI on a customer’s network and the MID Server.

E.

It contains records of CIs that the ServiceNow admin has submitted for entry into the CMDB.

Buy Now
Questions 7

If events are not matching to alerts as you would like, what field should be changed?

Options:

A.

Resource

B.

Message Key

C.

Node

D.

Metric Name

Buy Now
Questions 8

When sending data from the monitoring source to the additional_info field, what format is supported?

Options:

A.

XML

B.

JSON

C.

YAML

D.

Comma separated

Buy Now
Questions 9

The ServiceNow standard and shared set of service-related definitions that enable and support true service level reporting is known as what?

Options:

A.

Service level data model

B.

Business service data model

C.

Application service data model

D.

Common service data model

Buy Now
Questions 10

You have a very large networking environment and have noticed that your event notifications are either not being triggered or are delayed.

What are best options to try to resolve this issue? (Choose two.)

Options:

A.

Ensure all Event Management – process events jobs are set to a Ready state

B.

Verify that the Bucket field in the event table is set to zero (0)

C.

Add additional event processor jobs

D.

Ensure multi-node event processing is disabled

Buy Now
Questions 11

The Event Management operator workspace can display all of the following except?

Options:

A.

Alert groups

B.

Manual application services

C.

Discovered application services from Service Mapping

D.

Correlation groups

E.

Technical services

Buy Now
Questions 12

The additional information field is a JSON string that gives more information about an event. An example of a supported JSON string is:

Options:

A.

{"CPU":100}

B.

{"CPU":100,’Status":3}

C.

{"CPU":"100","Status":3}

D.

{"CPU":"100"}

Buy Now
Questions 13

What is the default collection/polling interval applied to all event connectors?

Options:

A.

Every 120 seconds

B.

Every 5 seconds

C.

Every 40 seconds

D.

Every 60 seconds

E.

Every 10 seconds

Buy Now
Questions 14

What two key steps must be performed after creating a new connector instance? (Choose two.)

Options:

A.

Assign a MID Server to the connector

B.

Enter credentials for the connector

C.

Debug the connector

D.

Test the connector

E.

Activate the connector

Buy Now
Questions 15

What event will cause Agent Client Collector self-monitoring to pause data collection?

Options:

A.

Communication with the MID server is lost

B.

The amount of host memory being used by the agent exceeds a threshold

C.

Communication with the ServiceNow instance is lost

D.

The amount of host disk space used by the agent exceeds a threshold

E.

The amount of host CPU being utilized by the agent exceeds a threshold

Buy Now
Questions 16

Based on the information shown, which of the following three alerts should be processed first?

Options:

A.

The Alert Priority score 3106020.001 was calculated according to the following factors, ordered by their respective priority (2018-06-01 19:34:01 GMT) Category (Score, Weight)

1. Business services – (3.0, 1000000)

2. Severity – (1.0, 100000)

3. CI type – (60.0, 100)

4. Role – (2.0, 10)

5. Secondary – (0)

6. State – (1.0, 0.001)

B.

The Alert Priority score 4406020.001 was calculated according to the following factors, ordered by their respective priority (2018-05-31 20:04:47 GMT) Category (Score, Weight)

1. Business services – (4.0, 1000000.0)

2. Severity – (4.0, 100000.0)

3. CI type – (60.0, 100.0)

4. Role – (2.0, 10.0)

5. Secondary – (0)

6. State – (1.0, 0.001)

C.

The Alert Priority score 3306020.001 was calculated according to the following factors, ordered by their respective priority (2018-05-31 19:56:54 GMT) Category (Score, Weight)

1. Business services – (3.0, 1000000.0)

2. Severity – (3.0, 100000.0)

3. CI type – (60.0, 100.0)

4. Role – (2.0, 10.0)

5. Secondary – (0)

6. State – (1.0, 0.001)

D.

They should be processed in the order in which they were received.

Buy Now
Questions 17

Which attribute correlates multiple events to one alert?

Options:

A.

Additional_info

B.

Message_key

C.

Metric_name

D.

Short_description

Buy Now
Questions 18

How often do baseline event connectors retrieve events?

Options:

A.

Every 30 seconds

B.

Every 2 minutes

C.

Every 10 minutes

D.

Every 1 minute

E.

Every 5 minutes

Buy Now
Questions 19

By default, when are idle alerts are closed?

Options:

A.

After 7 days

B.

After 14 days

C.

After 30 days

D.

Never

Buy Now
Questions 20

You have a system configured with a MID Web Server using Basic authentication to enable Operational Management Intelligence (OI) to push raw metric data to the MID Server. No data is getting through to the MID Server.

What is the most likely cause of the issue?

Options:

A.

The MID Web Server needs to be Restarted

B.

The MID Web Server needs to be Started

C.

An invalid secret key is being passed in the header information of the URL for the REST request

D.

An invalid password is set in the MID Web Server Context

Buy Now
Questions 21

What is the preferred method of parsing in the Transform/Compose step of an event rule?

Options:

A.

Python

B.

Regex

C.

sed/awk

D.

JavaScript

Buy Now
Questions 22

Alerts are processed using which of the following? (Choose three.)

Options:

A.

Alert management rules

B.

Event action rules

C.

Event rules

D.

Scheduled jobs

E.

Java and Groovy scripts

Buy Now
Questions 23

A dynamic grouping of CIs based upon common criteria (filtered CI classes) that can be visualized in operator workspace is called?

Options:

A.

A business service

B.

A technical service

C.

An application service

D.

A manual service

E.

A scoped service

Buy Now
Questions 24

A Service is not viewable in Operator Workspace. What could be the issue?

Options:

A.

The service is a manual service

B.

The service is not set to operational

C.

The service was created through Service Mapping

D.

The service is a technical service

Buy Now
Questions 25

Applying recommended Event Management best practice guidelines, which of the following alerts should be processed first?

Options:

A.

Alert00l0042

B.

Alert0010003

C.

Alert00l0075

D.

Alert00l0074

Buy Now
Questions 26

What makes all ServiceNow metrics, tasks, services, configuration items, assets, people, locations, and information a single system of record for IT and business processes?

Options:

A.

ServiceNow is installed within your datacenter providing you complete control

B.

All applications are built on the Oracle database standard, providing uniformity across products

C.

All applications that are built by ServiceNow utilize the same data model and code base

D.

ServiceNow runs on supported Windows servers and is managed through Windows Update

E.

A single table houses all data elements within ServiceNow

F.

ServiceNow utilizes the AWS MariaDB cloud database structure, providing a single system of record

Buy Now
Questions 27

What is the primary function of enrich automation in Service Operations Workspace?

Options:

A.

To populate events with more meaningful information

B.

To manage team roles and permissions

C.

To transform and compose event rules

D.

To generate alerts populated with more meaningful information

Buy Now
Questions 28

Within an event rule, how would you parse a nodename out of your raw event data?

Options:

A.

JavaScript

B.

Groovy script

C.

PowerShell script

D.

Regex statement

Buy Now
Questions 29

What does Operational Intelligence proactively identify before they cause service outages?

Options:

A.

Missing CMDB data

B.

Defects

C.

Alert correlations

D.

Orphaned CIs

E.

Anomalies

Buy Now
Questions 30

Within the ServiceNow IT Operations Management solution set, which statement most accurately describes what Event Management is?

Options:

A.

The process responsible for defining, analyzing, planning, measuring, and improving all aspects of the availability of IT services

B.

The process responsible for ensuring the capacity of IT Services and IT infrastructure is able to deliver agreed upon service level targets in a cost-effective manner

C.

The process responsible for recovery action and planning through machine learning

D.

The process responsible for monitoring all abnormal occurrences throughout the IT infrastructure, allowing for normal operations, and detecting and escalating exception conditions

Buy Now
Questions 31

Copies of checks that have been included in Agent Client Collector policies are known as what?

Options:

A.

Check definitions

B.

Check models

C.

Check clones

D.

Check mirrors

E.

Check instances

Buy Now
Questions 32

What would be the primary use case for creating Javascripts in Event Management?

Options:

A.

To create a customized pull connector to retrieve events on behalf of an event source

B.

To automatically populate the Configuration Management Database (CMDB)

C.

To parse a nodename out of your raw event data in an event rule

D.

To run as part of a remediation workflow for IT alerts that fail to execute

Buy Now
Questions 33

By default, the Alert Console displays what type of alerts?

Options:

A.

All Primary, Open alerts and anomaly alerts with a Severity of Critical, Major, Minor, and Warning that are not in Maintenance mode

B.

All Primary and Secondary Open alerts and anomaly alerts with a Severity of Critical, Major, Minor, and Warning that are not in Maintenance mode

C.

All Primary alerts with a Severity of Critical, Major, Minor, Warning that are not in Maintenance mode

D.

All Primary, Open alerts with a Severity of Critical, Major, Minor, and Warning that are not in Maintenance mode

E.

All Primary and Secondary Open alerts with a Severity of Critical, Major, Minor, and Warning that are not in Maintenance mode

Buy Now
Questions 34

What is one of the main benefits of using Event Management and Operational Intelligence?

Options:

A.

To improve service availability by helping IT staff pinpoint service issue causes and evaluate the impact of planned changes.

B.

To increase service agility and produce fast, predictable results by automating manual, routine, error-prone tasks.

C.

To rapidly configure and launch secure, agentless discovery of hardware and software resources and their relationships.

D.

To proactively warn against possible service outages using a range of advanced predictive machine learning methods.

Buy Now
Exam Code: CIS-EM
Exam Name: Certified Implementation Specialist - Event Management Exam
Last Update: Jul 4, 2025
Questions: 115
CIS-EM pdf

CIS-EM PDF

$25.5  $84.99
CIS-EM Engine

CIS-EM Testing Engine

$30  $99.99
CIS-EM PDF + Engine

CIS-EM PDF + Testing Engine

$40.5  $134.99