ServiceNow CIS-EM Exam - Topic 5 Question 8 Discussion

Actual exam question for ServiceNow's CIS-EM exam

Question #: 8
Topic #: 5

[All CIS-EM Questions]

For an incoming event with a matching message key, what allows an existing alert to be automatically closed?

AIn the event rule, set the Severity to 0

BIn the alert rule, set the Severity to 0

CIn the alert rule, set the Severity to -1

DIn the event rule, set the Severity to -1

Show Suggested Answer

Suggested Answer: D

by Daniela at May 03, 2022, 12:41 PM

Limited Time Offer

25%

Off

Get Premium CIS-EM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Miles

4 months ago

No way, it's definitely B!

upvoted 0 times

...

Marsha

4 months ago

I always thought Severity 0 would close alerts.

upvoted 0 times

...

Salena

5 months ago

Wait, are we sure about that? I thought it was D.

upvoted 0 times

...

Josphine

5 months ago

Definitely agree with C! That's how it works.

upvoted 0 times

...

Miesha

5 months ago

I think it's option C, setting Severity to -1 in the alert rule.

upvoted 0 times

...

Ines

5 months ago

I believe it's option D, but I might be mixing it up with another question about alert management.

upvoted 0 times

...

Nickolas

5 months ago

This question feels familiar; I practiced one where we had to adjust severity levels, but I can't remember the exact details.

upvoted 0 times

...

Marge

5 months ago

I remember something about setting severity to -1 for alerts, but I can't recall if it was in the event rule or the alert rule.

upvoted 0 times

...

Aliza

5 months ago

I think it might be option C, but I'm not entirely sure if it's the alert rule or the event rule that needs to be adjusted.

upvoted 0 times

...

Oretha

5 months ago

Hmm, I'm not sure about this one. I'll need to review the Cisco ESA authentication methods to decide between LDAP Query and LDAP BIND.

upvoted 0 times

...

Okay, I've got this. The key is that the question is asking for the commands that connect to the remote host on port 2222. So B and C are the clear winners here - the -p option and the -o Port=2222 option are the most straightforward ways to specify the port.

upvoted 0 times

...

Berry

5 months ago

Okay, let's think this through. Expressway-E and Expressway-C work together, so I need to consider their combined capabilities.

upvoted 0 times

...

Christiane

6 months ago

I think option D is the way to go. Allowing the user to run jobs when important workloads are not running seems like the simplest and most cost-effective solution. As long as the user is aware of the timing, this should work well.

upvoted 0 times

...

Rikki

6 months ago

I'm not sure about the terminology; I kept mixing up Suite and Deluxe room.

upvoted 0 times

...