Spring Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: pass65

CIS-EM Certified Implementation Specialist - Event Management Exam Questions and Answers

Questions 4

If more than one event rule applies to a particular event or metric, which of the event rules will run based upon the Order of execution number?

Options:

A.

Only the event rule with the highest Order of execution number will run.

B.

Only the event rule with the lowest Order of execution number will run.

C.

All event rules will run, from the lowest to the highest Order of execution numbers.

D.

All event rules will run, from the highest to the lowest Order of execution numbers.

Buy Now
Questions 5

What are the server requirements to allow Operational Intelligence to successfully collect operational metric data via a push?

Options:

A.

This requires a minimum of three MID Servers - two for Event Management and one additional MID Server dedicated for use by Operational Intelligence (OI).

B.

This requires a MID Web Server in addition to the MID Server.

C.

Nothing additional is required; this is handled by the MID Server.

D.

This requires a minimum of two MID Servers - one for Event Management and one additional MID Server dedicated for use by Operational Intelligence (OI).

Buy Now
Questions 6

If the Message Key is not populated, the default value is created from which fields?

Options:

A.

Source, type. node, resource, and metric name

B.

Source, source instance, node, and resource

C.

Source, type. node, and metric name

D.

Source, source instance, node, and type

E.

Source, type. node, resource, and time of event

Buy Now
Questions 7

When performing CI Binding, what fields does Event Management match to the Node?

Options:

A.

CI Name, DNS, IP, MAC Address

B.

System class name, FQDN, IP or MAC address

C.

CI name, FQDN, SSH public host keys

D.

CI Name, FQDN, IP, MAC Address

Buy Now
Questions 8

During processing of the event and if the event Severity is blank, the state of the event is set to:

Options:

A.

Ready

B.

Ignored

C.

Error

D.

Processing

Buy Now
Questions 9

Which step in the event rule configuration process enables you to ignore events and prevent alert generation?

Options:

A.

Transform and compose alert output

B.

Event filter

C.

Event options

D.

Threshold

Buy Now
Questions 10

What two key steps must be performed after creating a new connector instance? (Choose two.)

Options:

A.

Assign a MID Server to the connector

B.

Enter credentials for the connector

C.

Debug the connector

D.

Test the connector

E.

Activate the connector

Buy Now
Questions 11

What ServiceNow feature would you configure to process incoming email to create events?

Options:

A.

Event field mapping

B.

Event processing jobs

C.

Transforms

D.

Event Filler

E.

Inbound actions

Buy Now
Questions 12

What is the default collection/polling interval applied to all event connectors?

Options:

A.

Every 120 seconds

B.

Every 5 seconds

C.

Every 40 seconds

D.

Every 60 seconds

E.

Every 10 seconds

Buy Now
Questions 13

What are the key components that can be managed using Service Operations Workspace integrations Launchpad?

Options:

A.

Event Connectors, Metric Policies, Log Data Inputs

B.

Event Management, Metric Policies. Log Monitoring

C.

Event Management, Metric Intelligence, Log Monitoring

D.

Event Connectors, Metric Intelligence, Log Data inputs

Buy Now
Questions 14

Processing on an event will create a state of error if what value is not set?

Options:

A.

Node

B.

Source

C.

Severity

D.

Message Key

E.

Resource

Buy Now
Questions 15

What applications are included in the ITOM Health product?

Options:

A.

Event Management and Operational Intelligence

B.

ITOM Visibility

C.

Discovery and Service Mapping

D.

Cloud Management

Buy Now
Questions 16

The value of the Alert Priority score is a composite of what?

Options:

A.

The value of the alert’s category and its relative weight

B.

The value of the alert’s category and its Priority Group

C.

The value of the alert’s Severity and its Priority Group

D.

The value of the alert’s Severity and its relative weight

Buy Now
Questions 17

What is the primary function of the link view feature in the Service Operations Workspace express list?

Options:

A.

To automatically generate incidents from linked alerts

B.

To manage user permissions across teams

C.

To visualize tag-based alert groups

D.

To update the CMDB dependency map

Buy Now
Questions 18

What is an alert called that moves from an open to a closed state multiple times within a designated time-frame?

Options:

A.

Fluctuating

B.

Swinging

C.

Flipping

D.

Flapping

Buy Now
Questions 19

Agent Client Collector is built on what framework that enables you to adopt and extend monitoring checks from the community?

Options:

A.

Icinga

B.

Sensu

C.

SolarWinds

D.

Nagios

E.

Zabbix

Buy Now
Questions 20

What would you use to define the monitoring sources allowed to communicate with the ServiceNow instance for Operational Intelligence?

Options:

A.

Metric Registration

B.

Metric Config Rules

C.

Metric Type Actions

D.

Metric to CI

Buy Now
Questions 21

Which is not a valid method for accessing alert intelligence?

Options:

A.

In the right-click menu of an alert list, select Open in Workspace

B.

By appending/workspace to your instance URL

C.

The application navigator Alerts Console menu item

D.

The application navigator Alert Intelligence menu item

E.

Within an open alert record, click the Open in Workspace button

F.

Select the Lists tab in operator workspace

Buy Now
Questions 22

You have an event with a Source of ‘Trap from Enterprise 111’, but the alert created for this event shows a Source of ‘Oracle EM’. If you want to change what this is set to, where in the event rule would you do this?

Options:

A.

Transform and Compose Alert Output lab

B.

Event rule info tab

C.

CI Binding tab

D.

Event Filter tab

Buy Now
Questions 23

In Service Operations Workspace, what tool shows relationships between configuration items and alerts with real-time updates and detailed impact paths?

Options:

A.

CMDB identification and reconciliation engine (IRE)

B.

Unified service map

C.

Dependency view map

D.

CMDB class manager

Buy Now
Questions 24

How would you interpret the following data in the Operational Intelligence Insights Explorer?

CIS-EM Question 24

Options:

A.

win-ces882ierw is one of your hottest Configuration Items (CIs) that is currently experiencing a high probability of anomalies and should be checked immediately

B.

win-ces882ierw is one of your hottest Configuration Items (CIs), but is currently experiencing a low probability of anomalies

C.

win-ces882ierw is one of your customized list of monitored Configuration Items (CIs) that is currently experiencing a high probability of anomalies and should be checked immediately

D.

win-ces882ierw is one of your customized list of monitored Configuration Items (CIs), but is currently experiencing a low probability of anomalies

Buy Now
Questions 25

What are the possible actions available in alert management?

Choose 3 answers

Options:

A.

Execute remediation subflows

B.

Execute remediation workflows

C.

Launch applications

D.

Evaluate business rule

E.

Create a service catalog request

Buy Now
Questions 26

Based on the information shown, which of the following three alerts should be processed first?

Options:

A.

The Alert Priority score 3106020.001 was calculated according to the following factors, ordered by their respective priority (2018-06-01 19:34:01 GMT) Category (Score, Weight)

1. Business services – (3.0, 1000000)

2. Severity – (1.0, 100000)

3. CI type – (60.0, 100)

4. Role – (2.0, 10)

5. Secondary – (0)

6. State – (1.0, 0.001)

B.

The Alert Priority score 4406020.001 was calculated according to the following factors, ordered by their respective priority (2018-05-31 20:04:47 GMT) Category (Score, Weight)

1. Business services – (4.0, 1000000.0)

2. Severity – (4.0, 100000.0)

3. CI type – (60.0, 100.0)

4. Role – (2.0, 10.0)

5. Secondary – (0)

6. State – (1.0, 0.001)

C.

The Alert Priority score 3306020.001 was calculated according to the following factors, ordered by their respective priority (2018-05-31 19:56:54 GMT) Category (Score, Weight)

1. Business services – (3.0, 1000000.0)

2. Severity – (3.0, 100000.0)

3. CI type – (60.0, 100.0)

4. Role – (2.0, 10.0)

5. Secondary – (0)

6. State – (1.0, 0.001)

D.

They should be processed in the order in which they were received.

Buy Now
Questions 27

The default polling time to collect events from an event source is:

Options:

A.

5 seconds

B.

30 seconds

C.

60 seconds

D.

120 seconds

Buy Now
Questions 28

Alerts are processed using which of the following? (Choose three.)

Options:

A.

Alert management rules

B.

Event action rules

C.

Event rules

D.

Scheduled jobs

E.

Java and Groovy scripts

Buy Now
Questions 29

How often do baseline event connectors retrieve events?

Options:

A.

Every 30 seconds

B.

Every 2 minutes

C.

Every 10 minutes

D.

Every 1 minute

E.

Every 5 minutes

Buy Now
Questions 30

A Service is not viewable in Operator Workspace. What could be the issue?

Options:

A.

The service is a manual service

B.

The service is not set to operational

C.

The service was created through Service Mapping

D.

The service is a technical service

Buy Now
Questions 31

What missing attribute would cause an event to have a state of Error?

Options:

A.

Metric Name

B.

Source

C.

Classification

D.

Node

E.

Severity

Buy Now
Questions 32

The correct regex to capture the name of the server in “the server webserver3.domain.com is down” would be:

Options:

A.

.*(\w+\.\w+\.\w+).*

B.

The server (.*)\s.*

C.

.*\s(\w+\.\w+\.\w+).*

D.

the server (.*).*

Buy Now
Questions 33

To determine the top incidents for the CI associated with an alert, where is the best place to look?

Options:

A.

Alert Insights

B.

Incident List View

C.

CMDB Health Dashboard

D.

Event Management Overview page

Buy Now
Questions 34

For an incoming event with a matching message key, what allows an existing alert to be automatically closed?

Options:

A.

In the event rule, set the Severity to 0

B.

In the alert rule, set the Severity to 0

C.

In the alert rule, set the Severity to -1

D.

In the event rule, set the Severity to -1

Buy Now
Exam Code: CIS-EM
Exam Name: Certified Implementation Specialist - Event Management Exam
Last Update: May 16, 2026
Questions: 115

PDF + Testing Engine

$64.99  $185.69

Testing Engine

$49.99  $142.83
buy now CIS-EM testing engine

PDF (Q&A)

$54.99  $157.11
buy now CIS-EM pdf