CIS-EM Certified Implementation Specialist-Event Management Exam Question and Answers

All Primary, Open alerts and anomaly alerts with a Severity of Critical, Major, Minor, and Warning that are not in Maintenance mode

All Primary and Secondary Open alerts and anomaly alerts with a Severity of Critical, Major, Minor, and Warning that are not in Maintenance mode

All Primary alerts with a Severity of Critical, Major, Minor, Warning that are not in Maintenance mode

All Primary, Open alerts with a Severity of Critical, Major, Minor, and Warning that are not in Maintenance mode

All Primary and Secondary Open alerts with a Severity of Critical, Major, Minor, and Warning that are not in Maintenance mode

alert_operator

evt_mgmt_user

evt_mgmt_operator

alert_user

win-ces882ierw is one of your hottest Configuration Items (CIs) that is currently experiencing a high probability of anomalies and should be checked immediately

win-ces882ierw is one of your hottest Configuration Items (CIs), but is currently experiencing a low probability of anomalies

win-ces882ierw is one of your customized list of monitored Configuration Items (CIs) that is currently experiencing a high probability of anomalies and should be checked immediately

win-ces882ierw is one of your customized list of monitored Configuration Items (CIs), but is currently experiencing a low probability of anomalies

Metric_name

Message_key

Short_description

Additional_info

Set the evt_mgmt.incident_closes_alert

Set the evt_mgmt.alert_closes_incident

Switch over to the alert form and close the alert manually

Create a business rule on the alert table to match the associated Incident with its respective alert

Create a business rule on the incident table

Resource

Message Key

Node

Metric Name

Filter out events on ServiceNow Instance for easier consolidation and aggregation.

Promote all events to alerts during initial implementation until you fully understand which should be ignored.

Filter out events at source rather than in the ServiceNow instance.

Base-line “normal-state” events to filter out background noise.

Ignore all non-critical events during initial implementation to streamline processing; add alerts over time as time and resources allow.

Source Instance

Metric Name

Node

Resource

The number of unique nodes that can send events to the instance

The number of connectors and listeners it will collect data from

The number of connectors it will collect data from

The number of CIs in the CMDB that it will be monitoring

Transform and compose alert output

Event filter

Event options

Threshold