CIS-EM Sample Questions Answers

Two rules for every event

As many rules as possible

As few rules as possible

One rule for every event

Events

Checks

Parameters

Policies

Metrics

Scripts

Severity of -1/OK

Type of Clear

Resolution State of Closing

Resolution State of Clear

Severity of 0/Clear

Only the event rule with the highest Order of execution number will run.

Only the event rule with the lowest Order of execution number will run.

All event rules will run, from the lowest to the highest Order of execution numbers.

All event rules will run, from the highest to the lowest Order of execution numbers.

To create a customized pull connector to retrieve events on behalf of an event source

To automatically populate the Configuration Management Database (CMDB)

To parse a nodename out of your raw event data in an event rule

To run as part of a remediation workflow for IT alerts that fail to execute

Message Key

Additional Information

Source

Node

Set the evt_mgmt.incident_closes_alert

Set the evt_mgmt.alert_closes_incident

Switch over to the alert form and close the alert manually

Create a business rule on the alert table to match the associated Incident with its respective alert

Create a business rule on the incident table

Once every minute

Every 2 minutes

Twice every minute

Every 5 minutes

Event Management and Operational Intelligence

ITOM Visibility

Discovery and Service Mapping

Cloud Management