Summer Special 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: bestdeal

Free ServiceNow CIS-EM Practice Exam with Questions & Answers | Set: 3

Questions 21

Which the following alert promotion rule defined in your ServiceNow instance, which of the anomalies below would be automatically promoted into IT alerts on the Alert Console?

CIS-EM Question 21

A)

CIS-EM Question 21

B)

CIS-EM Question 21

C)

Both anomaly A and anomaly B

D)

Neither anomaly A or anomaly B

Options:
A.

Option A

B.

Option B

C.

Option C

D.

Option D

ServiceNow CIS-EM Premium Access
Questions 22

If a Message Key is not provided, which fields are concatenated to make our own?

Options:
A.

Source, Type, Node, Resource, Metric Name

B.

Source, DNS, Node, Additional info, Metric Name

C.

Source, Type, DNS, Additional info, Metric Name

D.

Source, Source Instance, Node, Type, Resource

Questions 23

By default, when are idle alerts are closed?

Options:
A.

After 7 days

B.

After 14 days

C.

After 30 days

D.

Never

Questions 24

When are anomaly alerts generated by Operational Intelligence displayed in alert intelligence?

Options:
A.

When the statistical model threshold is breached

B.

When they are promoted to IT alerts

C.

When it is manually promoted in insights explorer

D.

When the anomaly score is greater than 100

Questions 25

Where would you look to find and troubleshoot transactions and events that occur on your ServiceNow instance?

Options:
A.

em_event table

B.

System log module

C.

Event Mangement dashboard

D.

State management logs module

Questions 26

When creating an alert management rule, where would you specify a workflow to resolve a given condition?

Options:
A.

From the Remediation tab

B.

From the Actions tab

C.

From the Launcher tab

D.

In the Related Links section

Questions 27

What is the function of the External Communication Channel (ECC) Queue? (Choose three.)

Options:
A.

It is a connection point between a ServiceNow instance and the MID Server.

B.

It contains probe records to be executed on the customer’s network.

C.

It holds jobs that the MID Server needs to perform.

D.

It is a connection point between a hardware CI on a customer’s network and the MID Server.

E.

It contains records of CIs that the ServiceNow admin has submitted for entry into the CMDB.

Questions 28

In order for SNMP trap notifications to appear in ServiceNow as events, what option must be enabled in the required MID server?

Options:
A.

MID SNMP trap listener

B.

SNMP event manager module for MID

C.

Event collector MID server extension

D.

SNMP agent for MID

Questions 29

Copies of checks that have been included in Agent Client Collector policies are known as what?

Options:
A.

Check definitions

B.

Check models

C.

Check clones

D.

Check mirrors

E.

Check instances

Questions 30

Which are recommended best practices for Event Management? (Choose three.)

Options:
A.

Filter out events on ServiceNow Instance for easier consolidation and aggregation.

B.

Promote all events to alerts during initial implementation until you fully understand which should be ignored.

C.

Filter out events at source rather than in the ServiceNow instance.

D.

Base-line “normal-state” events to filter out background noise.

E.

Ignore all non-critical events during initial implementation to streamline processing; add alerts over time as time and resources allow.

Exam Code: CIS-EM
Certification Provider: ServiceNow
Exam Name: Certified Implementation Specialist-Event Management Exam
Last Update: Jul 16, 2025
Questions: 115