Free Demo Questions

Test Online Free ServiceNow CIS-EM Exam Questions and Answers

Practice a live sample before buying full access. This page keeps the free CIS-EM question set organized by page so visitors and search engines can reach the canonical -questions.html URL directly.

Updated May 24, 2025 17 Questions 2 Pages

Get CIS-EM Full Access

Question 1 Selectable Answer

The value of the Alert Priority score is a composite of what?

A. The value of the alert’s category and its relative weight
B. The value of the alert’s category and its Priority Group
C. The value of the alert’s Severity and its Priority Group
D. The value of the alert’s Severity and its relative weight

Answer:
Explanation:
Reference: https://docs.servicenow.com/bundle/orlando-it-operations-management/page/product/event- management/concept/alert-priority.html

Question 2 Selectable Answer

In the event table, which field maps the external attributes from the target system?

A. Resource
B. Description
C. Source
D. Additional Information

Answer:

Question 3 Selectable Answer

A support agent resolves an incident associated with an alert, but the alert does automatically close even though the evt_mgmt.incident_closes_alert property is set appropriately to close the alert.
What is the most likely cause of this issue?

A. The support agent does not have the evt_mgmt_user role.
B. The support agent only has the evt_mgmt_admin role.
C. The support agent has the evt_mgmt_operator role, but not the evt_mgmt_user role.
D. The support agent has the evt_mgmt_user role, but not the evt_mgmt_operator role.

Answer:
Explanation:
Reference: https://docs.servicenow.com/bundle/orlando-it-operations-management/page/product/event- management/task/t_EMResolveCloseIncidentAlert.html

Question 4 Selectable Answer

In default configuration using baseline connectors, how often is event data collected from event sources?

A. Once every minute
B. Every 2 minutes
C. Twice every minute
D. Every 5 minutes

Answer:

Question 5 Selectable Answer

A Service is not viewable in Operator Workspace.
What could be the issue?

A. The service is a manual service
B. The service is not set to operational
C. The service was created through Service Mapping
D. The service is a technical service

Answer:

Question 6 Selectable Answer

Copies of checks that have been included in Agent Client Collector policies are known as what?

A. Check definitions
B. Check models
C. Check clones
D. Check mirrors
E. Check instances

Answer:

Question 7 Selectable Answer

What is the function of the External Communication Channel (ECC) Queue? (Choose three.)

A. It is a connection point between a ServiceNow instance and the MID Server.
B. It contains probe records to be executed on the customer’s network.
C. It holds jobs that the MID Server needs to perform.
D. It is a connection point between a hardware CI on a customer’s network and the MID Server.
E. It contains records of CIs that the ServiceNow admin has submitted for entry into the CMD

Answer:

Question 8 Selectable Answer

Agent Client Collector can perform application service monitoring by configuring what option?

A. An alert management rule
B. A proxy agent
C. A distributed cluster
D. An event rule
E. A REST API

Answer:

Question 9 Selectable Answer

Which is the best option to reduce latency issues when receiving events?

A. Verify bucket field in em_event table > 0
B. Verify event_processor_job_count = 2
C. Verify event_processor_job_count = 0
D. Verify event_processor_enable_multi_node = 2

Answer:

Question 10 Selectable Answer

MID Servers provide important functions in your ITOM Health deployment.
What does MID stand for?

A. Management, Instrumentation, and Discovery
B. Messaging, Integration, and Data
C. Monitoring, Insight, and Domain
D. Maintenance, Information, and Distribution

Answer:

Question 11 Selectable Answer

A monitoring tool notification of a notable occurrence is known as what?

A. An alarm
B. An alert
C. An incident
D. A notice
E. An event
F. A metric

Answer:

Question 12 Selectable Answer

What Event Management module allows for configuration of automatic task creation?

A. Alert management rules
B. Task rules
C. Event rules
D. Alert correlation rules

Answer:
Explanation:
Reference: https://docs.servicenow.com/bundle/newyork-it-operations-management/page/product/event- management/task/create-alert-management-rule.html

Question 13 Selectable Answer

Alerts are processed using which of the following? (Choose three.)

A. Alert management rules
B. Event action rules
C. Event rules
D. Scheduled jobs
E. Java and Groovy scripts

Answer:

Question 14 Selectable Answer

In order for SNMP trap notifications to appear in ServiceNow as events, what option must be enabled in the required MID server?

A. MID SNMP trap listener
B. SNMP event manager module for MID
C. Event collector MID server extension
D. SNMP agent for MID

Answer:

Question 15 Selectable Answer

1.Which attribute correlates multiple events to one alert?

A. Additional_info
B. Message_key
C. Metric_name
D. Short_description

Answer:

Current Exam

CIS-EM

ServiceNow
Certified Implementation Specialist – Event Management

View Full CIS-EM Package