Weekend Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: best70

CIS-EM Certified Implementation Specialist - Event Management Exam Questions and Answers

Questions 4

The default polling time to collect events from an event source is:

Options:

A.

5 seconds

B.

30 seconds

C.

60 seconds

D.

120 seconds

Buy Now
Questions 5

What applications are included in the ITOM Health solution?

Choose 3 answers

Options:

A.

Cloud Provisioning and Governance

B.

Health Log Analytics

C.

Agent Client Collector

D.

Discovery

E.

Service Mapping

F.

Event Management

Buy Now
Questions 6

Where can you look to determine what event rule created an alert? (Choose two.)

Options:

A.

Alert Activity

B.

Event Additional Information

C.

Event Processing Notes

D.

Alert Message Key

E.

Alert Source

Buy Now
Questions 7

What ServiceNow feature would you configure to process incoming email to create events?

Options:

A.

Event field mapping

B.

Event processing jobs

C.

Transforms

D.

Event Filler

E.

Inbound actions

Buy Now
Questions 8

By default, the Alert Console displays what type of alerts?

Options:

A.

All Primary, Open alerts and anomaly alerts with a Severity of Critical, Major, Minor, and Warning that are not in Maintenance mode

B.

All Primary and Secondary Open alerts and anomaly alerts with a Severity of Critical, Major, Minor, and Warning that are not in Maintenance mode

C.

All Primary alerts with a Severity of Critical, Major, Minor, Warning that are not in Maintenance mode

D.

All Primary, Open alerts with a Severity of Critical, Major, Minor, and Warning that are not in Maintenance mode

E.

All Primary and Secondary Open alerts with a Severity of Critical, Major, Minor, and Warning that are not in Maintenance mode

Buy Now
Questions 9

How would you interpret the following data in the Operational Intelligence Insights Explorer?

CIS-EM Question 9

Options:

A.

win-ces882ierw is one of your hottest Configuration Items (CIs) that is currently experiencing a high probability of anomalies and should be checked immediately

B.

win-ces882ierw is one of your hottest Configuration Items (CIs), but is currently experiencing a low probability of anomalies

C.

win-ces882ierw is one of your customized list of monitored Configuration Items (CIs) that is currently experiencing a high probability of anomalies and should be checked immediately

D.

win-ces882ierw is one of your customized list of monitored Configuration Items (CIs), but is currently experiencing a low probability of anomalies

Buy Now
Questions 10

When creating event rules, is it best practice to create:

Options:

A.

Two rules for every event

B.

As many rules as possible

C.

As few rules as possible

D.

One rule for every event

Buy Now
Questions 11

Agent Client Collector is built on what framework that enables you to adopt and extend monitoring checks from the community?

Options:

A.

Icinga

B.

Sensu

C.

SolarWinds

D.

Nagios

E.

Zabbix

Buy Now
Questions 12

A monitoring tool notification of a notable occurrence is known as what?

Options:

A.

An alarm

B.

An alert

C.

An incident

D.

A notice

E.

An event

F.

A metric

Buy Now
Questions 13

What event will cause Agent Client Collector self-monitoring to pause data collection?

Options:

A.

Communication with the MID server is lost

B.

The amount of host memory being used by the agent exceeds a threshold

C.

Communication with the ServiceNow instance is lost

D.

The amount of host disk space used by the agent exceeds a threshold

E.

The amount of host CPU being utilized by the agent exceeds a threshold

Buy Now
Questions 14

You have a system configured with a MID Web Server using Basic authentication to enable Operational Management Intelligence (OI) to push raw metric data to the MID Server. No data is getting through to the MID Server.

What is the most likely cause of the issue?

Options:

A.

The MID Web Server needs to be Restarted

B.

The MID Web Server needs to be Started

C.

An invalid secret key is being passed in the header information of the URL for the REST request

D.

An invalid password is set in the MID Web Server Context

Buy Now
Questions 15

A dynamic grouping of CIs based upon common criteria (filtered CI classes) that can be visualized in operator workspace is called?

Options:

A.

A business service

B.

A technical service

C.

An application service

D.

A manual service

E.

A scoped service

Buy Now
Questions 16

Which is the best option to reduce latency issues when receiving events?

Options:

A.

Verify bucket field in em_event table > 0

B.

Verify event_processor_job_count = 2

C.

Verify event_processor_job_count = 0

D.

Verify event_processor_enable_multi_node = 2

Buy Now
Questions 17

What is the recommended approach to normalizing data from a source system to the default values in Event Management?

Options:

A.

Event field mapping

B.

Transform maps

C.

Alert management rules

D.

Business rules

Buy Now
Questions 18

What is Event Management licensing based on?

Options:

A.

The number of unique nodes that can send events to the instance

B.

The number of connectors and listeners it will collect data from

C.

The number of connectors it will collect data from

D.

The number of CIs in the CMDB that it will be monitoring

Buy Now
Questions 19

Which attribute within an event needs to be exactly the same to allow for deduplication?

Options:

A.

Metric Name

B.

Message Key

C.

Type & Node

D.

Description

E.

Correlation ID

Buy Now
Questions 20

Which attribute is responsible for de-duplication?

Options:

A.

Metric_name

B.

Message_key

C.

Short_description

D.

Additional_info

Buy Now
Questions 21

What type of system can a MID Server can be installed on?

Options:

A.

OpenVMS System

B.

Microsoft Windows Server

C.

Linux System

D.

Microsoft Windows Desktop

E.

Any system inside the customer firewall

F.

Mac OS X System

Buy Now
Questions 22

What are the possible actions available in alert management?

Choose 3 answers

Options:

A.

Execute remediation subflows

B.

Execute remediation workflows

C.

Launch applications

D.

Evaluate business rule

E.

Create a service catalog request

Buy Now
Questions 23

MID Servers provide important functions in your ITOM Health deployment.

What does MID stand for?

Options:

A.

Management, Instrumentation, and Discovery

B.

Messaging, Integration, and Data

C.

Monitoring, Insight, and Domain

D.

Maintenance, Information, and Distribution

Buy Now
Questions 24

In order for SNMP trap notifications to appear in ServiceNow as events, what option must be enabled in the required MID server?

Options:

A.

MID SNMP trap listener

B.

SNMP event manager module for MID

C.

Event collector MID server extension

D.

SNMP agent for MID

Buy Now
Questions 25

If the Message Key is not populated, the default value is created from which fields?

Options:

A.

Source, type. node, resource, and metric name

B.

Source, source instance, node, and resource

C.

Source, type. node, and metric name

D.

Source, source instance, node, and type

E.

Source, type. node, resource, and time of event

Buy Now
Questions 26

What are the valid states an alert can be in during its lifecycle?

Options:

A.

Open, Reopen, Flapping, Closed

B.

New, Updating, Waiting, Complete

C.

Open, Updating, Swinging, Closed

D.

Open, Warning, Flapping, Clear

Buy Now
Questions 27

The individual commands that the Agent Client Collector executes on the host are known as what? (Choose three.)

Options:

A.

Events

B.

Checks

C.

Parameters

D.

Policies

E.

Metrics

F.

Scripts

Buy Now
Questions 28

If more than one event rule applies to a particular event or metric, which of the event rules will run based upon the Order of execution number?

Options:

A.

Only the event rule with the highest Order of execution number will run.

B.

Only the event rule with the lowest Order of execution number will run.

C.

All event rules will run, from the lowest to the highest Order of execution numbers.

D.

All event rules will run, from the highest to the lowest Order of execution numbers.

Buy Now
Questions 29

During processing of the event and if the event Severity is blank, the state of the event is set to:

Options:

A.

Ready

B.

Ignored

C.

Error

D.

Processing

Buy Now
Questions 30

What ServiceNow feature is an aid to rapid implementation of your Event Management and Operational Intelligence features?

Options:

A.

Deployment wizard

B.

Step-by-step guide

C.

Checklist application

D.

Guided setup

Buy Now
Questions 31

Based on the information shown, which of the following three alerts should be processed first?

Options:

A.

The Alert Priority score 3106020.001 was calculated according to the following factors, ordered by their respective priority (2018-06-01 19:34:01 GMT) Category (Score, Weight)

1. Business services – (3.0, 1000000)

2. Severity – (1.0, 100000)

3. CI type – (60.0, 100)

4. Role – (2.0, 10)

5. Secondary – (0)

6. State – (1.0, 0.001)

B.

The Alert Priority score 4406020.001 was calculated according to the following factors, ordered by their respective priority (2018-05-31 20:04:47 GMT) Category (Score, Weight)

1. Business services – (4.0, 1000000.0)

2. Severity – (4.0, 100000.0)

3. CI type – (60.0, 100.0)

4. Role – (2.0, 10.0)

5. Secondary – (0)

6. State – (1.0, 0.001)

C.

The Alert Priority score 3306020.001 was calculated according to the following factors, ordered by their respective priority (2018-05-31 19:56:54 GMT) Category (Score, Weight)

1. Business services – (3.0, 1000000.0)

2. Severity – (3.0, 100000.0)

3. CI type – (60.0, 100.0)

4. Role – (2.0, 10.0)

5. Secondary – (0)

6. State – (1.0, 0.001)

D.

They should be processed in the order in which they were received.

Buy Now
Questions 32

A Service is not viewable in Operator Workspace. What could be the issue?

Options:

A.

The service is a manual service

B.

The service is not set to operational

C.

The service was created through Service Mapping

D.

The service is a technical service

Buy Now
Questions 33

What is the minimum role needed to view alerts?

Options:

A.

alert_operator

B.

evt_mgmt_user

C.

evt_mgmt_operator

D.

alert_user

Buy Now
Questions 34

Which is a correct regex expression to capture only the server's hostname (webserver3) in "The server webserver3.domain.com is down."?

Options:

A.

The server (.*)\..*

B.

.*(\w+\Aw+VAw+).*

C.

The server (.*)\s.*

D.

The server (.*?)\„*

Buy Now
Exam Code: CIS-EM
Exam Name: Certified Implementation Specialist - Event Management Exam
Last Update: Jul 13, 2025
Questions: 115

PDF + Testing Engine

$134.99

Testing Engine

$99.99

PDF (Q&A)

$84.99