ServiceNow ServiceNow Certifications CIS-EM Questions & Answers

• Question 61:

  What feature would you use to trigger a workflow or automatically generate tasks via templates?

  A. Event rules

  B. Task rules

  C. Alert management rules

  D. Alert correlation rules

  Correct Answer: C

  https://docs.servicenow.com/en-US/bundle/tokyo-it-operations-management/page/product/event-management/task/create-alert-management-rule.html

• Question 62:

  You have an event that needs to be bound to a non-host CI.

  Which attribute needs to be removed from the Transform and Compose tab?

  A. Source Instance

  B. Metric Name

  C. Node

  D. Resource

  Correct Answer: C

• Question 63:

  For an incoming event with a matching message key, what allows an existing alert to be automatically closed?

  A. In the event rule, set the Severity to 0

  B. In the alert rule, set the Severity to 0

  C. In the alert rule, set the Severity to-1

  D. In the event rule, set the Severity to-1

  Correct Answer: A

  https://www.servicenow.com/community/itom-forum/incomming-events-are-missing-value-in-severity-field-how-do-i/m-p/968110

• Question 64:

  When creating an alert management rule, where would you specify a workflow to resolve a given condition?

  A. From the Remediation tab

  B. From the Actions tab

  C. From the Launcher tab

  D. In the Related Links section

  Correct Answer: B

  There are 3 tabs to configure a rule "Alert Info", "Alert filter" and "Actions" under the tab Actions you can find a Section "remediation Subflows", ... https://docs.servicenow.com/en-US/bundle/tokyo-it-operations-management/page/product/event-management/task/create-alert-management-rule.html

• Question 65:

  When are anomaly alerts generated by Operational Intelligence displayed in alert intelligence?

  A. When the statistical model threshold is breached

  B. When they are promoted to IT alerts

  C. When it is manually promoted in insights explorer

  D. When the anomaly score is greater than 100

  Correct Answer: B

• Question 66:

  Which is not a valid method for accessing alert intelligence?

  A. In the right-click menu of an alert list, select Open in Workspace

  B. By appending/workspace to your instance URL

  C. The application navigator Alerts Console menu item

  D. The application navigator Alert Intelligence menu item

  E. Within an open alert record, click the Open in Workspace button

  F. Select the Lists tab in operator workspace

  Correct Answer: C

  https:///nav_to.do?uri=%2F$sa_alerts_console_view

• Question 67:

  You have a very large networking environment and have noticed that your event notifications are either not being triggered or are delayed. What are best options to try to resolve this issue? (Choose two.)

  A. Ensure all Event Management ?process events jobs are set to a Ready state

  B. Verify that the Bucket field in the event table is set to zero (0)

  C. Add additional event processor jobs

  D. Ensure multi-node event processing is disabled

  Correct Answer: AC

• Question 68:

  In the event table, which field maps the external attributes from the target system?

  A. Resource

  B. Description

  C. Source

  D. Additional Information

  Correct Answer: D

  Source contains just source name (ex. "SolarWinds"). Additional Information contains JSON string that gives more information about the event. https://docs.servicenow.com/bundle/utah-it-operations-management/page/product/event-management/concept/c_EMIntegrateRequirementEvent.html

• Question 69:

  The correct regex to capture the name of the server in "the server webserver3.domain.com is down" would be:

  A. .*(\w+\.\w+\.\w+).*

  B. The server (.*)\s.*

  C. .*\s(\w+\.\w+\.\w+).*

  D. the server (.*).*

  Correct Answer: C

• Question 70:

  What applications are included in the ITOM Health product?

  A. Event Management and Operational Intelligence

  B. ITOM Visibility

  C. Discovery and Service Mapping

  D. Cloud Management

  Correct Answer: A