Weekend Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: cramtick70

CIS-EM Certified Implementation Specialist - Event Management Exam Questions and Answers

Questions 4

What would be an appropriate use case for having to write JavaScript in Event Management?

Options:

A.

To change the value of the message key

B.

To create a custom action within a subflow

C.

To parse a node name out of your raw event data in an event rule

D.

To automatically create an incident

Buy Now
Questions 5

MID Servers provide important functions in your ITOM Health deployment.

What does MID stand for?

Options:

A.

Management, Instrumentation, and Discovery

B.

Messaging, Integration, and Data

C.

Monitoring, Insight, and Domain

D.

Maintenance, Information, and Distribution

Buy Now
Questions 6

What Event Management module allows for configuration of automatic task creation?

Options:

A.

Alert management rules

B.

Task rules

C.

Event rules

D.

Alert correlation rules

Buy Now
Questions 7

The ServiceNow standard and shared set of service-related definitions that enable and support true service level reporting is known as what?

Options:

A.

Service level data model

B.

Business service data model

C.

Application service data model

D.

Common service data model

Buy Now
Questions 8

Which attribute correlates multiple events to one alert?

Options:

A.

Additional_info

B.

Message_key

C.

Metric_name

D.

Short_description

Buy Now
Questions 9

The correct regex to capture the name of the server in “the server webserver3.domain.com is down” would be:

Options:

A.

.*(\w+\.\w+\.\w+).*

B.

The server (.*)\s.*

C.

.*\s(\w+\.\w+\.\w+).*

D.

the server (.*).*

Buy Now
Questions 10

A monitoring tool notification of a notable occurrence is known as what?

Options:

A.

An alarm

B.

An alert

C.

An incident

D.

A notice

E.

An event

F.

A metric

Buy Now
Questions 11

In the event table, which field maps the external attributes from the target system?

Options:

A.

Resource

B.

Description

C.

Source

D.

Additional Information

Buy Now
Questions 12

Given the following Impact settings and Alerts in a three node cluster that makes up the components of a Business Service, what is the overall service health of this Business Service?

Options:

A.

Critical

B.

Error

C.

Major

D.

Minor

E.

Warning

F.

Clear

Buy Now
Questions 13

What role is required to create a Technical Service?

Options:

A.

evt_mgmt_integration

B.

evt_mgmt_user

C.

evt_mgmt_operator

D.

evt_mgmt_admin

Buy Now
Questions 14

In default configuration using baseline connectors, how often is event data collected from event sources?

Options:

A.

Once every minute

B.

Every 2 minutes

C.

Twice every minute

D.

Every 5 minutes

Buy Now
Questions 15

What are the valid states an alert can be in during its lifecycle?

Options:

A.

Open, Reopen, Flapping, Closed

B.

New, Updating, Waiting, Complete

C.

Open, Updating, Swinging, Closed

D.

Open, Warning, Flapping, Clear

Buy Now
Questions 16

What applications are included in the ITOM Health solution?

Choose 3 answers

Options:

A.

Cloud Provisioning and Governance

B.

Health Log Analytics

C.

Agent Client Collector

D.

Discovery

E.

Service Mapping

F.

Event Management

Buy Now
Questions 17

By default, Event Management tries to bind an alert to CI (configuration item), by matching the node name in the event to which three items in the CMDB (configuration management database)?

Options:

A.

CI name, Fully qualified domain name, IP or MAC address

B.

CI name, Webserver name, IP or MAC address

C.

CI name, Fully qualified domain name, SSH public host keys

D.

System class name, Fully qualified domain name, IP or MAC address

Buy Now
Questions 18

During CI binding, CI matching is done using which two fields? (Choose two.)

Options:

A.

Message Key

B.

Additional Information

C.

Source

D.

Node

Buy Now
Questions 19

What is the primary function of the link view feature in the Service Operations Workspace express list?

Options:

A.

To automatically generate incidents from linked alerts

B.

To manage user permissions across teams

C.

To visualize tag-based alert groups

D.

To update the CMDB dependency map

Buy Now
Questions 20

Which is the best option to reduce latency issues when receiving events?

Options:

A.

Verify bucket field in em_event table > 0

B.

Verify event_processor_job_count = 2

C.

Verify event_processor_job_count = 0

D.

Verify event_processor_enable_multi_node = 2

Buy Now
Questions 21

How would you interpret the following data in the Operational Intelligence Insights Explorer?

Options:

A.

win-ces882ierw is one of your hottest Configuration Items (CIs) that is currently experiencing a high probability of anomalies and should be checked immediately

B.

win-ces882ierw is one of your hottest Configuration Items (CIs), but is currently experiencing a low probability of anomalies

C.

win-ces882ierw is one of your customized list of monitored Configuration Items (CIs) that is currently experiencing a high probability of anomalies and should be checked immediately

D.

win-ces882ierw is one of your customized list of monitored Configuration Items (CIs), but is currently experiencing a low probability of anomalies

Buy Now
Questions 22

Which attribute within an event needs to be exactly the same to allow for deduplication?

Options:

A.

Metric Name

B.

Message Key

C.

Type & Node

D.

Description

E.

Correlation ID

Buy Now
Questions 23

What is the minimum role needed to view alerts?

Options:

A.

alert_operator

B.

evt_mgmt_user

C.

evt_mgmt_operator

D.

alert_user

Buy Now
Questions 24

In Service Operations Workspace, what tool shows relationships between configuration items and alerts with real-time updates and detailed impact paths?

Options:

A.

CMDB identification and reconciliation engine (IRE)

B.

Unified service map

C.

Dependency view map

D.

CMDB class manager

Buy Now
Questions 25

When sending data from the monitoring source to the additional_info field, what format is supported?

Options:

A.

XML

B.

JSON

C.

YAML

D.

Comma separated

Buy Now
Questions 26

A Service is not viewable in Operator Workspace. What could be the issue?

Options:

A.

The service is a manual service

B.

The service is not set to operational

C.

The service was created through Service Mapping

D.

The service is a technical service

Buy Now
Questions 27

If more than one alert management rule applies to a particular alert which of the rules will run based upon the Order of execution field?

Options:

A.

All alert management rule will run, from the highest to the lowest Order of execution numbers.

B.

Only the alert management rule with the highest Order of execution number will run.

C.

All alert management rule will run, from the lowest to the highest Order of execution numbers.

D.

Only the alert management rule with the lowest Order of execution number will run.

Buy Now
Questions 28

Which is an invalid state for an alert?

Options:

A.

Flapping

B.

Closed

C.

Reopen

D.

Processed

Buy Now
Questions 29

The value of the Alert Priority score is a composite of what?

Options:

A.

The value of the alert’s category and its relative weight

B.

The value of the alert’s category and its Priority Group

C.

The value of the alert’s Severity and its Priority Group

D.

The value of the alert’s Severity and its relative weight

Buy Now
Questions 30

In what sequence are events processed?

Options:

Buy Now
Questions 31

What is the primary function of enrich automation in Service Operations Workspace?

Options:

A.

To populate events with more meaningful information

B.

To manage team roles and permissions

C.

To transform and compose event rules

D.

To generate alerts populated with more meaningful information

Buy Now
Questions 32

What would you use to define the monitoring sources allowed to communicate with the ServiceNow instance for Operational Intelligence?

Options:

A.

Metric Registration

B.

Metric Config Rules

C.

Metric Type Actions

D.

Metric to CI

Buy Now
Questions 33

A dynamic grouping of CIs based upon common criteria (filtered CI classes) that can be visualized in operator workspace is called?

Options:

A.

A business service

B.

A technical service

C.

An application service

D.

A manual service

E.

A scoped service

Buy Now
Questions 34

Modified Agent Client Collector policies do not take effect until what action is taken?

Options:

A.

Agents are restarted

B.

Agents re-run the discovery policy

C.

MID server synchronization is initiated

D.

The policy is republished

E.

The check is tested on an existing agent/host

Buy Now
Exam Code: CIS-EM
Exam Name: Certified Implementation Specialist - Event Management Exam
Last Update: Jul 19, 2025
Questions: 115
CIS-EM pdf

CIS-EM PDF

$25.5  $84.99
CIS-EM Engine

CIS-EM Testing Engine

$30  $99.99
CIS-EM PDF + Engine

CIS-EM PDF + Testing Engine

$40.5  $134.99