question: 1

What is the purpose of Event Management in ServiceNow?
A. Automating service requests
B. Monitoring infrastructure and responding to issues
C. Managing HR-related requests
D. Managing knowledge articles
✅ correct answer: B
🧠 explanation: Event Management monitors the health of infrastructure and services, responding to alerts and events in real-time.

question: 2

Which table stores events in ServiceNow?
A. cmdb_ci
B. em_event
C. incident
D. task
✅ correct answer: B
🧠 explanation: The em_event table is the core table where all events are stored in ServiceNow Event Management.

question: 3

What component correlates events into alerts?
A. CI Class Manager
B. Alert Rule
C. Event Rule
D. Correlation Rule
✅ correct answer: C
🧠 explanation: Event Rules process incoming events and generate alerts based on matching conditions.

question: 4

What is the role of an Alert Rule?
A. Create incidents from tasks
B. Classify alerts into impact levels
C. Convert alerts into incidents
D. Visualize dashboards
✅ correct answer: C
🧠 explanation: Alert Rules define how alerts should trigger incidents, define assignment groups, and set severity.

question: 5

Which ServiceNow plugin must be activated to use Event Management?
A. Discovery
B. Event Management Core
C. Performance Analytics
D. Virtual Agent
✅ correct answer: B
🧠 explanation: Event Management Core is the required plugin that enables core functionality for Event Management.

question: 6

What is a Connector Definition in Event Management?
A. Script to send emails
B. Configuration for CMDB health
C. Template to receive and process events from sources
D. Manual CI import tool
✅ correct answer: C
🧠 explanation: Connector Definitions process incoming events from various monitoring tools like SolarWinds or SCOM.

question: 7

What is a Connector Instance?
A. A scheduled script
B. A CI status checker
C. A configured version of a Connector Definition
D. A discovery schedule
✅ correct answer: C
🧠 explanation: A Connector Instance applies a Connector Definition to a specific monitoring tool environment.

question: 8

What do you use to map event fields to ServiceNow alert fields?
A. Event Field Mapper
B. Event Rules
C. Transform Maps
D. Script Includes
✅ correct answer: A
🧠 explanation: Event Field Mapper allows administrators to map external event fields to ServiceNow alert fields.

question: 9

Which type of rule determines how events are grouped into alerts?
A. Transform Rule
B. Event Rule
C. Alert Rule
D. Correlation Rule
✅ correct answer: B
🧠 explanation: Event Rules correlate multiple events into a single alert when they match specified conditions.

question: 10

Which table stores alerts in ServiceNow Event Management?
A. em_event
B. em_alert
C. cmdb_ci
D. incident
✅ correct answer: B
🧠 explanation: The em_alert table stores alerts that are generated from events via Event Rules.

question: 11

What is the purpose of Alert Aggregation in Event Management?
A. Create duplicate alerts
B. Simplify alert noise by combining similar alerts
C. Separate critical alerts from minor ones
D. Route alerts to different teams
✅ correct answer: B
🧠 explanation: Alert Aggregation helps reduce alert fatigue by combining related alerts into a single alert entity.

question: 12

What is the function of Event Management Dashboard?
A. Tracks HR cases
B. Displays tasks assigned to IT staff
C. Visualizes real-time alert and CI health data
D. Configures knowledge base
✅ correct answer: C
🧠 explanation: The dashboard provides visibility into system health using alerts, impacted services, and status summaries.

question: 13

What does a Trigger Condition in an Event Rule do?
A. Sends an email to users
B. Determines when the rule should execute
C. Deletes old alerts
D. Updates incident states
✅ correct answer: B
🧠 explanation: Trigger Conditions define the logic for when an Event Rule should process an incoming event.

question: 14

How are CIs linked to events in ServiceNow?
A. Through incident priority
B. Through CI identifiers in event payloads
C. By user input
D. From performance metrics
✅ correct answer: B
🧠 explanation: CIs are linked to events using identifiers (like CI name, IP, or sys_id) in the event payload.

question: 15

What must be defined to generate alerts from events?
A. CMDB schedule
B. Event Rule
C. Knowledge article
D. SLA
✅ correct answer: B
🧠 explanation: Event Rules are necessary to define how and when to generate alerts from events.

question: 16

What is the Alert Management application used for?
A. Writing scripts
B. Mapping users to roles
C. Monitoring and managing active alerts
D. Importing discovery data
✅ correct answer: C
🧠 explanation: Alert Management allows IT teams to view, assign, and manage alerts generated by the Event Management process.

question: 17

Which one of the following is NOT a valid alert severity level in ServiceNow?
A. Critical
B. Warning
C. Info
D. Fatal
✅ correct answer: D
🧠 explanation: Fatal is not a standard severity level. Valid levels are: Critical, Major, Minor, Warning, Info.

question: 18

What is used to transform multiple alerts into a single incident?
A. CMDB
B. Correlation Rules
C. Event Field Mapper
D. Assignment Rules
✅ correct answer: B
🧠 explanation: Correlation Rules group related alerts to create a unified incident, reducing noise.

question: 19

What does the Impact Tree help visualize in Event Management?
A. Performance metrics of users
B. CMDB import process
C. Service dependencies and their impact
D. Discovery schedules
✅ correct answer: C
🧠 explanation: The Impact Tree shows how alerts on CIs affect related business services and dependencies.

question: 20

Which field determines whether an event should trigger an alert?
A. Source
B. Metric
C. Trigger Condition
D. Impact
✅ correct answer: C
🧠 explanation: The Trigger Condition evaluates event data and determines whether an alert should be generated.

question: 21

What is the purpose of Suppression Rules in Event Management?
A. Highlight duplicate events
B. Ignore or prevent specific events from creating alerts
C. Convert tasks to incidents
D. Map event fields
✅ correct answer: B
🧠 explanation: Suppression Rules prevent noisy or irrelevant events from becoming alerts.

question: 22

What happens if no Event Rule matches an event?
A. It is discarded
B. It is escalated
C. It is stored in the em_event table but no alert is created
D. It creates a critical incident
✅ correct answer: C
🧠 explanation: Events remain in the em_event table but are not processed into alerts without a matching Event Rule.

question: 23

What type of script is used in Event Rules to customize logic?
A. UI Policy
B. Business Rule
C. Transform Script
D. Script Action
✅ correct answer: D
🧠 explanation: Script Actions allow for customization of behavior within Event Rules.

question: 24

Which source can send events to ServiceNow Event Management?
A. Microsoft Teams
B. Amazon S3
C. SolarWinds
D. Excel
✅ correct answer: C
🧠 explanation: Monitoring tools like SolarWinds, Nagios, and SCOM can send events into ServiceNow.

question: 25

Which protocol is commonly used to ingest events into Event Management?
A. FTP
B. SNMP
C. SOAP only
D. IMAP
✅ correct answer: B
🧠 explanation: SNMP traps are widely used to deliver events to Event Management from network devices.

question: 26

Which module in ServiceNow lets you view the history of processed events?
A. Alert Console
B. CMDB Dashboard
C. Event Log
D. Impact Tree
✅ correct answer: C
🧠 explanation: The Event Log provides a detailed view of incoming events and their processing status.

question: 27

Which feature helps automatically link alerts to a business service?
A. Business Rule
B. Alert Mapping
C. Impact Analysis
D. Service Mapping
✅ correct answer: D
🧠 explanation: Service Mapping connects alerts to impacted business services using dependency data.

question: 28

What does Root Cause Analysis (RCA) in Event Management help determine?
A. Who caused the issue
B. The originating alert or CI causing the service impact
C. Who should respond
D. The duration of the alert
✅ correct answer: B
🧠 explanation: RCA identifies the original cause of the issue impacting a business service or infrastructure.

question: 29

What is the use of the Maintenance Schedule in Event Management?
A. Prevents alerts from being generated during planned maintenance
B. Automatically escalates critical alerts
C. Runs discovery scripts
D. Configures dashboards
✅ correct answer: A
🧠 explanation: Maintenance Schedules ensure planned outages do not generate unnecessary alerts.

question: 30

Which plugin allows Event Management to integrate with external monitoring tools?
A. MID Server
B. ODBC Driver
C. ITSM Mobile
D. App Engine Studio
✅ correct answer: A
🧠 explanation: The MID Server facilitates secure communication between ServiceNow and external systems like monitoring tools.