[Jan 29, 2022] CIS-EM Dumps Full Questions – Exam Study Guide [Q13-Q29]

NO.13 You have an event with a Source of ‘Trap from Enterprise 111’, but the alert created for this event shows a Source of ‘Oracle EM’. If you want to change what this is set to, where in the event rule would you do this?

NO.14 A support agent resolves an incident associated with an alert, but the alert does automatically close even though the evt_mgmt.incident_closes_alert property is set appropriately to close the alert.
What is the most likely cause of this issue?

NO.15 How would you interpret the following data in the Operational Intelligence Insights Explorer?

NO.16 By default, Event Management tries to bind an alert to CI (configuration item), by matching the node name in the event to which three items in the CMDB (configuration management database)?

NO.17 Which the following alert promotion rule defined in your ServiceNow instance, which of the anomalies below would be automatically promoted into IT alerts on the Alert Console?

NO.18 Which attribute is responsible for de-duplication?

NO.19 What two key steps must be performed after creating a new connector instance? (Choose two.)

NO.20 Which attribute is responsible for de-duplication?

NO.21 The value of the Alert Priority score is a composite of what?

NO.22 When creating an alert management rule, where would you specify a workflow to resolve a given condition?

NO.23 The MID Server requires an outbound connection on which port?

NO.24 What is the default collection/polling interval applied to all event connectors?

NO.25 By default, the Alert Console displays what type of alerts?

NO.26 What are the two most accurate statements regarding the ServiceNow CMDB (configuration management database) and CIs (configuration items)?

NO.27 A customer informs you that they already have monitoring and event management tools.
Which of the following describes the extra value that ServiceNow Event Management provides? (Choose four.)

NO.28 You have a system configured with a MID Web Server using Basic authentication to enable Operational Management Intelligence (OI) to push raw metric data to the MID Server. No data is getting through to the MID Server.
What is the most likely cause of the issue?

NO.29 For an incoming event with a matching message key, what allows an existing alert to be automatically closed?