CIS-EM Online Practice Questions and Answers

Within an event rule, how would you parse a nodename out of your raw event data?

A. JavaScript

B. Groovy script

C. PowerShell script

D. Regex statement

A support agent resolves an incident associated with an alert. What is the best method to close the alert?

A. Set the evt_mgmt.incident_closes_alert

B. Set the evt_mgmt.alert_closes_incident

C. Switch over to the alert form and close the alert manually

D. Create a business rule on the alert table to match the associated Incident with its respective alert

E. Create a business rule on the incident table

When sending data from the monitoring source to the additional_info field, what format is supported?

A. XML

B. JSON

C. YAML

D. Comma separated

How often do baseline event connectors retrieve events?

A. Every 30 seconds

B. Every 2 minutes

C. Every 10 minutes

D. Every 1 minute

E. Every 5 minutes

Which attribute correlates multiple events to one alert?

A. Additional_info

B. Message_key

C. Metric_name

D. Short_description

What is the function of the External Communication Channel (ECC) Queue? (Choose three.)

A. It is a connection point between a ServiceNow instance and the MID Server.

B. It contains probe records to be executed on the customer's network.

C. It holds jobs that the MID Server needs to perform.

D. It is a connection point between a hardware CI on a customer's network and the MID Server.

E. It contains records of CIs that the ServiceNow admin has submitted for entry into the CMDB.

A four node cluster makes up the components (CIs) of a Business Service. The impact influence for the cluster is set to 60%.

How many members of the cluster must be in a Critical state in order for the Business Service to display as Critical in the Impact Tree?

A. 1

B. 2

C. 3

D. 4

What is used to correctly bind an alert to an application?

A. Correlation rules

B. Workflows

C. Classifiers

D. CI identification rules

Within a PowerShell script, which two URI's could you use to log events directly to the ServiceNow event table? (Choose two.)

A. https://[Your_ServiceNow_instance_URL]/rest_api/now/my_tables/em_event

B. https://[Your_ServiceNow_instance_URL]/api/global/em/jsonv2

C. https://[Your_ServiceNow_instance_URL]/api/now/table/em_event

D. https://[Your_ServiceNow_instance_URL]/api/table/em_event

E. https://[Your_ServiceNow_instance_URL]/rest_api/now/table/em_event

What does the Asynchronous Messaging Bus (AMB) channel do on the MID Server?

A. Opens an inbound connection to the MID Server

B. Allows Web Server transactions to be passed to ServiceNow

C. Sends heartbeat information to the ServiceNow instance to ensure MID is communicating

D. Continually queries the External Communication Channel (ECC) queue via a persistent query