ServiceNow CIS-EM Exam - Topic 5 Question 77 Discussion

Actual exam question for ServiceNow's CIS-EM exam

Question #: 77
Topic #: 5

You have an event with a Source of 'Trap from Enterprise 111', but the alert created for this event shows a Source of 'Oracle EM'. If you want to change what this is set to, where in the event rule would you do this?

ATransform and Compose Alert Output lab

BEvent rule info tab

CCI Binding tab

DEvent Filter tab

Show Suggested Answer

Suggested Answer: B

by Trina at Jun 12, 2025, 11:32 AM

Limited Time Offer

25%

Off

Get Premium CIS-EM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Blondell

7 months ago

Agree, Event rule info is the right place!

upvoted 0 times

...

Norah

7 months ago

I thought it was the CI Binding tab?

upvoted 0 times

...

Dottie

7 months ago

It's definitely the Event rule info tab.

upvoted 0 times

...

Rickie

8 months ago

Wait, are you sure? I thought it was in the Event Filter tab.

upvoted 0 times

...

Aleisha

8 months ago

Transform and Compose Alert Output lab sounds wrong for this.

upvoted 0 times

...

Pete

8 months ago

I believe the Event Filter tab is where we set conditions for alerts, but I'm not confident it changes the source directly.

upvoted 0 times

...

Chauncey

8 months ago

I'm a bit confused about this one. The CI Binding tab sounds familiar, but I can't recall if it actually affects the source of the alert.

upvoted 0 times

...

Eladia

9 months ago

I remember practicing a similar question where we had to adjust alert outputs, and I feel like it was related to the Transform and Compose Alert Output lab.

upvoted 0 times

...

Olen

9 months ago

I think we might need to look at the Event rule info tab for changing the source, but I'm not entirely sure.

upvoted 0 times

...

Marguerita

9 months ago

This seems like a straightforward question. The Source field is part of the alert, so I would update it in the Transform and Compose Alert Output lab, which is option A.

upvoted 0 times

...

Carole

9 months ago

I'm a bit confused on this one. The options all sound plausible, but I'm not sure which one is the correct place to update the Source field. I'll need to review the event rule settings more carefully.

upvoted 0 times

...

My

9 months ago

I'm pretty confident the answer is B. The Event rule info tab is where you can customize the alert fields, including the Source.

upvoted 0 times

...

Natalya

10 months ago

Okay, let's think this through step-by-step. The question says the alert shows a different Source than the event, so I'm guessing I need to look at the Transform and Compose Alert Output lab to make that change.

upvoted 0 times

...

Jeannine

10 months ago

Hmm, this one seems tricky. I'll need to carefully review the event rule options to figure out where I can change the Source field.

upvoted 0 times

...

Patrick

1 year ago

Wait, so we're supposed to find where to change the event source, but the options are all about alert outputs and CIs? This question is a trap!

upvoted 0 times

Ben

12 months ago

B) Event rule info tab

upvoted 0 times

...

Vince

12 months ago

A) Transform and Compose Alert Output lab

upvoted 0 times

...

Julio

1 year ago

I'm not sure, but I think it could also be A) Transform and Compose Alert Output lab, as you might need to adjust the alert output.

upvoted 0 times

...

Gearldine

1 year ago

All these people are overthinking it. It's obviously the Event Filter tab. That's where you filter out all the wrong event sources.

upvoted 0 times

Lynna

1 year ago

Actually, it's the Event rule info tab where you can change the Source.

upvoted 0 times

...

Rodney

1 year ago

No, I believe it's the Transform and Compose Alert Output lab.

upvoted 0 times

...

Kandis

1 year ago

I think it's the Event Filter tab.

upvoted 0 times

...

Margurite

1 year ago

I agree with Terry, because that's where you can configure the settings for the event rule.

upvoted 0 times

...

Beth

1 year ago

Haha, the Event rule info tab? Yeah, right, like they'd hide something that important in the info tab. Nice try, whoever wrote this question.

upvoted 0 times

Flo

12 months ago

C) CI Binding tab

upvoted 0 times

...

Luisa

1 year ago

B) Event rule info tab

upvoted 0 times

...

Erasmo

1 year ago

A) Transform and Compose Alert Output lab

upvoted 0 times

...

Margery

1 year ago

Nah, man, the Transform and Compose Alert Output lab is where it's at. That's where you do all the fancy event transformations.

upvoted 0 times

Taryn

1 year ago

B) Event rule info tab

upvoted 0 times

...

Ryan

1 year ago

A) Transform and Compose Alert Output lab

upvoted 0 times

...

Terry

1 year ago

I think the answer is B) Event rule info tab.

upvoted 0 times

...

Iluminada

1 year ago

The CI Binding tab sounds like the right place to me. Gotta bind that event to the correct CI, you know?

upvoted 0 times

...

Chauncey

1 year ago

I'm pretty sure it's the Event Filter tab. That's where you'd go to change the source information.

upvoted 0 times

Wai

1 year ago

I'm not sure, maybe it's the Event rule info tab.

upvoted 0 times

...

Josphine

1 year ago

Yes, you're right. It's definitely D) Event Filter tab. That's where you can modify the source information for the event rule.

upvoted 0 times

...

Blossom

1 year ago

I think it's D) Event Filter tab too. That's where you can adjust the source of the event.

upvoted 0 times

...

Frederica

1 year ago

Actually, it might be the CI Binding tab.

upvoted 0 times

...

Dahlia

1 year ago

D) Event Filter tab

upvoted 0 times

...

Keva

1 year ago

C) CI Binding tab

upvoted 0 times

...

Justine

1 year ago

No, I believe it's the Transform and Compose Alert Output lab.

upvoted 0 times

...

Gussie

1 year ago

B) Event rule info tab

upvoted 0 times

...

Mary

1 year ago

A) Transform and Compose Alert Output lab

upvoted 0 times

...

Izetta

1 year ago

I think it's the Event Filter tab.

upvoted 0 times

...