Summer Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: dcdisc65

Page: 1 / 4
Total 34 questions
Exam Code: CIS-EM                Update: Oct 16, 2025
Exam Name: Certified Implementation Specialist - Event Management Exam

ServiceNow Certified Implementation Specialist - Event Management Exam CIS-EM Exam Dumps: Updated Questions & Answers (October 2025)

Question # 1

A support agent resolves an incident associated with an alert. What is the best method to close the alert?

A.

Set the evt_mgmt.incident_closes_alert

B.

Set the evt_mgmt.alert_closes_incident

C.

Switch over to the alert form and close the alert manually

D.

Create a business rule on the alert table to match the associated Incident with its respective alert

E.

Create a business rule on the incident table

Question # 2

What are the possible actions available in alert management?

Choose 3 answers

A.

Execute remediation subflows

B.

Execute remediation workflows

C.

Launch applications

D.

Evaluate business rule

E.

Create a service catalog request

Question # 3

The correct regex to capture the name of the server in “the server webserver3.domain.com is down” would be:

A.

.*(\w+\.\w+\.\w+).*

B.

The server (.*)\s.*

C.

.*\s(\w+\.\w+\.\w+).*

D.

the server (.*).*

Question # 4

When performing CI Binding, what fields does Event Management match to the Node?

A.

CI Name, DNS, IP, MAC Address

B.

System class name, FQDN, IP or MAC address

C.

CI name, FQDN, SSH public host keys

D.

CI Name, FQDN, IP, MAC Address

Question # 5

The default polling time to collect events from an event source is:

A.

5 seconds

B.

30 seconds

C.

60 seconds

D.

120 seconds

Question # 6

If the Message Key is not populated, the default value is created from which fields?

A.

Source, type. node, resource, and metric name

B.

Source, source instance, node, and resource

C.

Source, type. node, and metric name

D.

Source, source instance, node, and type

E.

Source, type. node, resource, and time of event

Question # 7

Where are approval requests for execution of alert remediation tasks configured?

A.

In the Flow Designer remediation subflow

B.

In Service Operations Workspace

C.

In the alert management rule's approvals related list

D.

In the alert management rule's playbook

Question # 8

You have an event that needs to be bound to a non-host CI.

Which attribute needs to be removed from the Transform and Compose tab?

A.

Source Instance

B.

Metric Name

C.

Node

D.

Resource

Question # 9

Which is a correct regex expression to capture only the server's hostname (webserver3) in "The server webserver3.domain.com is down."?

A.

The server (.*)\..*

B.

.*(\w+\Aw+VAw+).*

C.

The server (.*)\s.*

D.

The server (.*?)\„*

Question # 10

Which attribute within an event needs to be exactly the same to allow for deduplication?

A.

Metric Name

B.

Message Key

C.

Type & Node

D.

Description

E.

Correlation ID

Page: 1 / 4
Total 34 questions

Most Popular Certification Exams

Payment

       

Contact us

dumpscollection live chat

Site Secure

mcafee secure

TESTED 16 Oct 2025