Summer Special Sale - Limited Time 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 575363r9

Welcome To DumpsPedia
  1. Home
  2. ServiceNow
  3. CIS-Event Management
  4. CIS-EM
  5. Certified Implementation Specialist - Event Management Exam Questions and Answers

CIS-EM Sample Questions Answers

Questions 4

When performing CI Binding, what fields does Event Management match to the Node?

Options:

A.

CI Name, DNS, IP, MAC Address

B.

System class name, FQDN, IP or MAC address

C.

CI name, FQDN, SSH public host keys

D.

CI Name, FQDN, IP, MAC Address

Buy Now
Questions 5

What is the function of the External Communication Channel (ECC) Queue? (Choose three.)

Options:

A.

It is a connection point between a ServiceNow instance and the MID Server.

B.

It contains probe records to be executed on the customer’s network.

C.

It holds jobs that the MID Server needs to perform.

D.

It is a connection point between a hardware CI on a customer’s network and the MID Server.

E.

It contains records of CIs that the ServiceNow admin has submitted for entry into the CMDB.

Buy Now
Questions 6

What does the Service Operations Workspace express list reduce the need for?

Choose 2 answers

Options:

A.

Conducting root cause analysis

B.

Constantly refreshing the list of alerts

C.

Navigating through different interfaces

D.

Performing remediation actions

Buy Now
Questions 7

What two key steps must be performed after creating a new connector instance? (Choose two.)

Options:

A.

Assign a MID Server to the connector

B.

Enter credentials for the connector

C.

Debug the connector

D.

Test the connector

E.

Activate the connector

Buy Now
Questions 8

Which is a correct regex expression to capture only the server's hostname (webserver3) in "The server webserver3.domain.com is down."?

Options:

A.

The server (.*)\..*

B.

.*(\w+\Aw+VAw+).*

C.

The server (.*)\s.*

D.

The server (.*?)\„*

Buy Now
Questions 9

Applying recommended Event Management best practice guidelines, which of the following events should generate an alert?

Options:

A.

Every event should generate an alert so you have the opportunity to resolve them all.

B.

Only events that necessitate action should generate an alert.

C.

Only the most critical events on every CI in the CMDB should generate an alert.

D.

Every event on every critical CI in the CMDB should generate an alert.

Buy Now
Questions 10

What is the primary function of enrich automation in Service Operations Workspace?

Options:

A.

To populate events with more meaningful information

B.

To manage team roles and permissions

C.

To transform and compose event rules

D.

To generate alerts populated with more meaningful information

Buy Now
Questions 11

During processing of the event and if the event Severity is blank, the state of the event is set to:

Options:

A.

Ready

B.

Ignored

C.

Error

D.

Processing

Buy Now
Questions 12

MID Servers provide important functions in your ITOM Health deployment.

What does MID stand for?

Options:

A.

Management, Instrumentation, and Discovery

B.

Messaging, Integration, and Data

C.

Monitoring, Insight, and Domain

D.

Maintenance, Information, and Distribution

Buy Now
Questions 13

Which attribute within an event needs to be exactly the same to allow for deduplication?

Options:

A.

Metric Name

B.

Message Key

C.

Type & Node

D.

Description

E.

Correlation ID

Buy Now
Questions 14

How would you interpret the following data in the Operational Intelligence Insights Explorer?

Options:

A.

win-ces882ierw is one of your hottest Configuration Items (CIs) that is currently experiencing a high probability of anomalies and should be checked immediately

B.

win-ces882ierw is one of your hottest Configuration Items (CIs), but is currently experiencing a low probability of anomalies

C.

win-ces882ierw is one of your customized list of monitored Configuration Items (CIs) that is currently experiencing a high probability of anomalies and should be checked immediately

D.

win-ces882ierw is one of your customized list of monitored Configuration Items (CIs), but is currently experiencing a low probability of anomalies

Buy Now
Questions 15

Where are approval requests for execution of alert remediation tasks configured?

Options:

A.

In the Flow Designer remediation subflow

B.

In Service Operations Workspace

C.

In the alert management rule's approvals related list

D.

In the alert management rule's playbook

Buy Now
Questions 16

What are the valid states an alert can be in during its lifecycle?

Options:

A.

Open, Reopen, Flapping, Closed

B.

New, Updating, Waiting, Complete

C.

Open, Updating, Swinging, Closed

D.

Open, Warning, Flapping, Clear

Buy Now
Questions 17

What would be an appropriate use case for having to write JavaScript in Event Management?

Options:

A.

To change the value of the message key

B.

To create a custom action within a subflow

C.

To parse a node name out of your raw event data in an event rule

D.

To automatically create an incident

Buy Now
Questions 18

The ServiceNow standard and shared set of service-related definitions that enable and support true service level reporting is known as what?

Options:

A.

Service level data model

B.

Business service data model

C.

Application service data model

D.

Common service data model

Buy Now
Questions 19

Where would you look to find and troubleshoot transactions and events that occur on your ServiceNow instance?

Options:

A.

em_event table

B.

System log module

C.

Event Mangement dashboard

D.

State management logs module

Buy Now
Questions 20

Copies of checks that have been included in Agent Client Collector policies are known as what?

Options:

A.

Check definitions

B.

Check models

C.

Check clones

D.

Check mirrors

E.

Check instances

Buy Now
Questions 21

What are the key components that can be managed using Service Operations Workspace integrations Launchpad?

Options:

A.

Event Connectors, Metric Policies, Log Data Inputs

B.

Event Management, Metric Policies. Log Monitoring

C.

Event Management, Metric Intelligence, Log Monitoring

D.

Event Connectors, Metric Intelligence, Log Data inputs

Buy Now
Questions 22

How often do baseline event connectors retrieve events?

Options:

A.

Every 30 seconds

B.

Every 2 minutes

C.

Every 10 minutes

D.

Every 1 minute

E.

Every 5 minutes

Buy Now
Questions 23

What would you use as a central location to explore the CMDB class hierarchy, CI table definitions, and CIs?

Options:

A.

CI Remediations

B.

CI Relation Types

C.

CI Identifiers

D.

Process to CI Type Mapping

E.

CI Class Manager

Buy Now
Questions 24

If events are not matching to alerts as you would like, what field should be changed?

Options:

A.

Resource

B.

Message Key

C.

Node

D.

Metric Name

Buy Now
Questions 25

The default polling time to collect events from an event source is:

Options:

A.

5 seconds

B.

30 seconds

C.

60 seconds

D.

120 seconds

Buy Now
Questions 26

In Service Operations Workspace, what tool shows relationships between configuration items and alerts with real-time updates and detailed impact paths?

Options:

A.

CMDB identification and reconciliation engine (IRE)

B.

Unified service map

C.

Dependency view map

D.

CMDB class manager

Buy Now
Questions 27

How would you ensure the quality of data in your Configuration Management Database (CMDB) over time?

Options:

A.

Manually inventorying configuration items in the CMDB and eliminating duplicate configuration items (CIs)

B.

Only use the ServiceNow Discovery application to populate your CMDB

C.

Using only scripts to automatically monitor for and remediate duplicate configuration items (CIs)

D.

Having well-defined Identification, Reconciliation, and Relationship rules

Buy Now
Questions 28

Out-of-the-box. how often do tie everts get processed in ServiceNow?

Options:

A.

Every 5 seconds

B.

Depends on connectors Used

C.

Every minute via a scheduled job

D.

As soon as the event record is inserted via a business rule

Buy Now
Questions 29

In what sequence are events processed?

Options:

Buy Now
Questions 30

In your environment, no alert CMDB, automated, or text based grouping is occurring. What is most likely the problem?

Options:

A.

No correlation rules have been defined

B.

No event management rules have been defined

C.

Application services are not operational

D.

No CMDB is configured

E.

The alert correlation property that enables grouping is set to false

Buy Now
Questions 31

The MID Server requires an outbound connection on which port?

Options:

A.

445

B.

161

C.

443

D.

143

Buy Now
Questions 32

A support agent resolves an incident associated with an alert, but the alert does automatically close even though the evt_mgmt.incident_closes_alert property is set appropriately to close the alert.

What is the most likely cause of this issue?

Options:

A.

The support agent does not have the evt_mgmt_user role.

B.

The support agent only has the evt_mgmt_admin role.

C.

The support agent has the evt_mgmt_operator role, but not the evt_mgmt_user role.

D.

The support agent has the evt_mgmt_user role, but not the evt_mgmt_operator role.

Buy Now
Questions 33

Which two methods can be used to improve the processing of events in large network environments? (Choose two.)

Options:

A.

Enable multi-node processing

B.

Increase the source polling interval

C.

Ensure the bucket value in the event table is greater than 0

D.

Increase the number of scheduled jobs processing events

Buy Now
Questions 34

The individual commands that the Agent Client Collector executes on the host are known as what? (Choose three.)

Options:

A.

Events

B.

Checks

C.

Parameters

D.

Policies

E.

Metrics

F.

Scripts

Buy Now
Exam Code: CIS-EM
Exam Name: Certified Implementation Specialist - Event Management Exam
Last Update: Jun 26, 2025
Questions: 115
$66  $164.99
$50  $124.99
$42  $104.99
buy now CIS-EM