CIS-EM Online Practice Questions and Answers

What would you use to define the monitoring sources allowed to communicate with the ServiceNow instance for Operational Intelligence?

A. Metric Registration

B. Metric Config Rules

C. Metric Type Actions

D. Metric to CI

What is the default collection/polling interval applied to all event connectors?

A. Every 120 seconds

B. Every 5 seconds

C. Every 40 seconds

D. Every 60 seconds

E. Every 10 seconds

By default, when are idle alerts are closed?

A. After 7 days

B. After 14 days

C. After 30 days

D. Never

A support agent resolves an incident associated with an alert. What is the best method to close the alert?

A. Set the evt_mgmt.incident_closes_alert

B. Set the evt_mgmt.alert_closes_incident

C. Switch over to the alert form and close the alert manually

D. Create a business rule on the alert table to match the associated Incident with its respective alert

E. Create a business rule on the incident table

How would you ensure the quality of data in your Configuration Management Database (CMDB) over time?

A. Manually inventorying configuration items in the CMDB and eliminating duplicate configuration items (CIs)

B. Only use the ServiceNow Discovery application to populate your CMDB

C. Using only scripts to automatically monitor for and remediate duplicate configuration items (CIs)

D. Having well-defined Identification, Reconciliation, and Relationship rules

What would be the primary use case for creating Javascripts in Event Management?

A. To create a customized pull connector to retrieve events on behalf of an event source

B. To automatically populate the Configuration Management Database (CMDB)

C. To parse a nodename out of your raw event data in an event rule

D. To run as part of a remediation workflow for IT alerts that fail to execute

The default polling time to collect events from an event source is:

A. 5 seconds

B. 30 seconds

C. 60 seconds

D. 120 seconds

What ServiceNow feature would you configure to process incoming email to create events?

A. Transforms

B. Inbound actions

C. Event processing jobs

D. Event Filter

E. Event field mapping

Modified Agent Client Collector policies do not take effect until what action is taken?

A. The check is tested on an existing agent/host

B. The policy is republished

C. Agents re-run the discovery policy

D. MID server synchronization is initiated

E. Agents are restarted

When creating a task from an alert what Event Management Module would be used?

A. Event Rules

B. Alert Correlation Rules

C. Task Management

D. Alert Management