Discuss ServiceNow CIS-EM Exam Topic 5 Question 8

For an incoming event with a matching message key, what allows an existing alert to be automatically closed?

AIn the event rule, set the Severity to 0

BIn the alert rule, set the Severity to 0

CIn the alert rule, set the Severity to -1

DIn the event rule, set the Severity to -1

Suggested Answer: D

Get Premium CIS-EM Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Miles 12 months ago

No way, it's definitely B!

Marsha 12 months ago

I always thought Severity 0 would close alerts.

Salena 1 year ago

Wait, are we sure about that? I thought it was D.

Josphine 1 year ago

Definitely agree with C! That's how it works.

Miesha 1 year ago

I think it's option C, setting Severity to -1 in the alert rule.

Ines 1 year ago

I believe it's option D, but I might be mixing it up with another question about alert management.

Nickolas 1 year ago

This question feels familiar; I practiced one where we had to adjust severity levels, but I can't remember the exact details.

Marge 1 year ago

I remember something about setting severity to -1 for alerts, but I can't recall if it was in the event rule or the alert rule.

Aliza 1 year ago

I think it might be option C, but I'm not entirely sure if it's the alert rule or the event rule that needs to be adjusted.

Oretha 1 year ago

Hmm, I'm not sure about this one. I'll need to review the Cisco ESA authentication methods to decide between LDAP Query and LDAP BIND.

Salena 1 year ago

Okay, I've got this. The key is that the question is asking for the commands that connect to the remote host on port 2222. So B and C are the clear winners here - the -p option and the -o Port=2222 option are the most straightforward ways to specify the port.

Berry 1 year ago

Okay, let's think this through. Expressway-E and Expressway-C work together, so I need to consider their combined capabilities.

Christiane 1 year ago

I think option D is the way to go. Allowing the user to run jobs when important workloads are not running seems like the simplest and most cost-effective solution. As long as the user is aware of the timing, this should work well.

Rikki 1 year ago

I'm not sure about the terminology; I kept mixing up Suite and Deluxe room.

ServiceNow CIS-EM Exam - Topic 5 Question 8 Discussion