Free Practice Questions for ServiceNow CIS-EM Exam

Question 1

For an incoming event with a matching message key, what allows an existing alert to be automatically closed?

AIn the event rule, set the Severity to 0

BIn the alert rule, set the Severity to 0

CIn the alert rule, set the Severity to -1

DIn the event rule, set the Severity to -1

Correct Answer: D. In the event rule, set the Severity to -1

Question 2

In your environment, no alert CMDB, automated, or text based grouping is occurring. What is most likely the problem?

ANo correlation rules have been defined

BNo event management rules have been defined

CApplication services are not operational

DNo CMDB is configured

EThe alert correlation property that enables grouping is set to false

Correct Answer: D. No CMDB is configured

Question 3

What are the key components that can be managed using Service Operations Workspace integrations Launchpad?

AEvent Connectors, Metric Policies, Log Data Inputs

BEvent Management, Metric Policies. Log Monitoring

CEvent Management, Metric Intelligence, Log Monitoring

DEvent Connectors, Metric Intelligence, Log Data inputs

Correct Answer: D. Event Connectors, Metric Intelligence, Log Data inputs

Question 4

What ServiceNow feature would you configure to process incoming email to create events?

AEvent field mapping

BEvent processing jobs

CTransforms

DEvent Filler

EInbound actions

Correct Answer: E. Inbound actions

Question 5

The correct regex to capture the name of the server in ''the server webserver3.domain.com is down'' would be:

A.*(\w+\.\w+\.\w+).*

BThe server (.*)\s.*

C.*\s(\w+\.\w+\.\w+).*

Dthe server (.*).*

Correct Answer: A. .*(\w+\.\w+\.\w+).*

Question 6

During processing of the event and if the event Severity is blank, the state of the event is set to:

AReady

BIgnored

CError

DProcessing

Correct Answer: C. Error

Question 7

When performing CI Binding, what fields does Event Management match to the Node?

ACI Name, DNS, IP, MAC Address

BSystem class name, FQDN, IP or MAC address

CCI name, FQDN, SSH public host keys

DCI Name, FQDN, IP, MAC Address

Correct Answer: C. CI name, FQDN, SSH public host keys

Question 8

Within an event rule, how would you parse a nodename out of your raw event data?

AJavaScript

BGroovy script

CPowerShell script

DRegex statement

Correct Answer: A. JavaScript

Question 9

What attribute is used to consolidate events into a single alert?

AEvent Rules

BMessage Key

CAlert Priority

DSeverity

Correct Answer: B. Message Key

Question 10

Applying recommended Event Management best practice guidelines, which of the following events should generate an alert?

AEvery event should generate an alert so you have the opportunity to resolve them all.

BOnly events that necessitate action should generate an alert.

COnly the most critical events on every CI in the CMDB should generate an alert.

DEvery event on every critical CI in the CMDB should generate an alert.

Correct Answer: B. Only events that necessitate action should generate an alert.