You have an event with a Source of Trap from Enterprise 111, but the alert created for this event
shows a Source of Oracle EM. If you want to change what this is set to, where in the event rule
would you do this?
A customer informs you that they already have monitoring and event management tools.
Which of the following describes the extra value that ServiceNow Event Management provides?
What two key steps must be performed after creating a new connector instance? (Choose two.)
During processing of the event and if the event Severity is blank, the state of the event is set to:
When creating event rules, is it best practice to create:
If more than one event rule applies to a particular event or metric, which of the event rules will run
based upon the Order of execution number?
The MID Server requires an outbound connection on which port?
By default, Event Management tries to bind an alert to CI (configuration item), by matching the node
name in the event to which three items in the CMDB (configuration management database)?
Which the following alert promotion rule defined in your ServiceNow instance, which of the
anomalies below would be automatically promoted into IT alerts on the Alert Console?
Both anomaly A and anomaly B
Neither anomaly A or anomaly B
A four node cluster makes up the components (CIs) of a Business Service. The impact influence for
the cluster is set to 60%.
How many members of the cluster must be in a Critical state in order for the Business Service to
display as Critical in the Impact Tree?
What would you use as a central location to explore the CMDB class hierarchy, CI table definitions,
What are the two most accurate statements regarding the ServiceNow CMDB (configuration
management database) and CIs (configuration items)?
A support agent resolves an incident associated with an alert, but the alert does automatically close
even though the evt_mgmt.incident_closes_alert property is set appropriately to close the alert.
What is the most likely cause of this issue?
For an incoming event with a matching message key, what allows an existing alert to be
Which are recommended best practices for Event Management? (Choose three.)