wtf.bg

What is needed for setting up Operational Inteligence push integration

Which alerts are NOT visible on the Alert console by default

What is used to process alerts? ( choose 3)

What do you need to set up a pull event integration? (select 3)

Which events are useful for creating alerts?

For large networks what changes should be performed as per best practices? (select 2)

Which is the minimum role to view alerts?

If event does not bind to an alert, which field you need to modify?

What is needed in order for a discovered business service to appear on the Event Management dashboard?

What will cause event to be in error state

How often the Events are cleaned form Event table by default?

How often are the events processed by default?

What is a technical service?

If event has no key the alert message key is composed from which fields?

If alert is opened and closed very often for certain period of time how is its state called?

Which table does not extend cmdb_ci_service_auto?

Which attributes are used for CI binding by default?

What transforms incoming events?

How event management is licensed?

What are the Event sources that can push events? ( select 3 )

What best describes the Event process flow?

What type of services are displayed on the Event Management dashboard

What process Alert? (select 3 )

How you can optimize the EM if there are performance issues with the Event processing? (select 2)

If an event is not bind correctly to an Alert which field you should modify?

Which Alerts are not visible on the Alert Console? (select 2)

What are the Event states?

Do the Event rules change the events?

Which table does not extend cmdb_ci_service_auto table?

The CIs marked for maintanance are excluded from impact calculation?

What is Anomaly Heat Map?

Users with evt_mgmt_integration role can close Alerts?

Can EM Self Monitoring monitor connectors?

If Alert changes its state between open and closed for a certain period of time how it is called?

What best describes an Anomaly Score?

In which ITOM Product Suite the Event Management application is available?

By default closing Alerts will?

By default resolving an incident closes the associated alerts?

Can the system automatically create CIs through IT and OI Events.

What is the default pull time of Events from Event sources?

If you have multiple Alert Rules with different priority order on same Alert, which rule will be executed fist

Which step in the alerts will help you to ignore Event from becoming Alert

If customer want agentless Monitor tool will you provide him SNOW as such

What is the best practice to keep your CMDB clean

If you have anomaly range 17.18 and 28.28 which of the following raw metrics will generate Anomaly (select 4)

What role is needed to create Manual or Technical Service

IF you have Latency issues what you need to perform?

What are the correct Event Sources?

What of the following is need for binding Alert? ( select 2 )

What is the purpose of AMB channel on MID server?

What best describe the ECCQ (select 2)

What can be monitored with Self Monitoring?

In which table Impact calculation is stored?

What are the statuses of the alert?

If you have Anomaly Alerts but it is not displayed as an active Alert, what is the first thing you are going to check

When Pulling events with a connector with MID you would need access and Line of Sight to the target and: (select 4)

What 2 fields is the CI Binding based? (select 2)

What is NOT displayed in the Event Management Dashboard

What is the exact name of the script that transforms the data to an Incident from Alert?

When in CI Binding what table do you query to bind to the Node

What is the URI to query/push data directly in the event table from a Power Shell?

What is the preferred parsing strategy for transform maps

If we have 3 Different alert with Different priorities Score, login to the system with almost the same time. Which alerts will be handle it first?

What best describes Anomaly Heat Map?

What is Anomaly Score?

Alert Priority Processing – which is the first one to be processed if you follow the EM best practices

On which operation system MID server could be installed (select 2)?

Which are the two things you should do after creating Connector instance? (select 2)

Where Javascript is used in EM?

What is needed to push events from external sources?

Anomaly alert promotion rule with minimum score 9.5. Two anomaly alerts, A with anomaly score 9.1 and B with 9.8 – which one will be promoted?

You have cluster with four servers. The cluster have influence 60%. How many members should be down in order the BS to be affected?

We have event with source A and alert with source B. Where this source could be modified?

What parameter is used for de-duplication?

We have MID web server with basic authentication for OI. No metrics are coming – what could be the issue?`

In which module you can make orchestration workflow to be executed or task to be automatically created?

Where in the Event table is stored the information from the target system?

Which port on the MID server should be open for outbound connections?

Which URL is used for pushing events with web service API?

Where you could see which event rule processed the event? (select 2)

The operator was able to resolve the issue, but the alert was not closed, even though the evt_mgmt.alert_auto_close_interval is set correctly?

What is true about this screenshot?

Where you could see the CI hierarchy, table definitions?

How to push events directly to ServiceNow?

What is using to configure connector Definitions?

What needs to be done to be able to see Technical Service in Event Management Dashboard

Best Practices for Event Management? (select 3)

Best Practices for Alert Management? (select 3)

There are 3 pictures, one with Alert Promotion Rule where the Minimal Score is 9.5.
The other two pictures show two alerts where the first alert has an anomaly score of 9.0 and the second alert has an anomaly score of 9.5.

Which alert will be promoted?

Which monitoring metric source do you need for Operational Intelligence?

How can we automatically close an alert?

In Alert Action rule, where do you trigger Orchestration Workflow

hich of the following best describes CMDB and CI?

You are not seeing a certain application in Application Navigation. Which is the false statement about the possible reason. (be mindful of the word FALSE sneaked in the question).

In addition to reports, tables and business rules what else is captured in an update set?

What type of Client Scripts are supported?
Select 4

What are types of Visual Task Boards (VTBs)?

What are types of Service Catalog Variables?

How to set a constant variable in a horizontal discovery pattern step?

Discovery deletion strategy is set to ‘Mark as Absent’ – On first Discovery run a Linux server is discovered, with Disk CI located in the server discovered, on next Discovery the Disk CI is not found. How will this be represented in ServiceNow?

If a duplicate CI is found during the Identification phase what will happen next?

A screenshot from the Identification menu is shown with name, attributes with value name on all services, order, etc. and there are 3 services listed with 100, 200, 300 run order value. Initial Discovery sets “Windows1” to one of the CI’s but then the 3rd listed service with order 300 founds a new name of the same CI as “Windows2”. What will happen to this CI?

A screenshot from the Reconciliation menu is shown with name, attributes with value name on all services, order, etc. and there are 3 services listed with 100, 200, 300 run order value. Initial Discovery sets “Windows1” to one of the CI’s but then the 3rd listed service with order 300 founds a new name of the same CI as “Windows2”. What will happen to this CI?

If you have to parse 2 variables from a file using 2 different parsing strategies, how are you going to achieve this?

How a horizontal discovery pattern is extended?

Where is the URL of the connected Instance stored on the MID Server:

What is indicating a yellow status light on the MID Server Dashboard?

What are the default variables visible in the pattern designer when you open an Application Discovery Pattern in Debug Mode?
Select 2 answers.

Match the correct definitions for CMDB Health KPIs?

What operation can be used to transfer a file from the MID Server to another computer?

What best describes Discovery and Service Mapping? Select 2 answers.

If you have a configuration file, what are the 2 main options in the Parse File step to parse it into variables?

When developing a new horizontal discovery pattern, you need?

After a completed Discovery what are the records under the Device tab?

What will create location for the discovered CI?

Which error is a valid one after Identification phase?

Pattern Designer SNMP Query operation, select 2 valid variables?

CI Class Manager menu options?
Select 3 answers.

Which step is taken from Shared Library?

Which will determine the use of Behavior when running Discovery?

What privileges are recommended for Windows Server Discovery?

What is recommended for MID Server to have access to:

How is named the CI that you want to retain during Remediate a de-duplication task process.

What are the types of errors seen after clicking on Errors in Discovery Home?
Select 3

What is true for Enhanced ADM Discovery?

What is Enhanced ADM probe?

How can you discover an OS using a Horizontal Pattern Discovery that is missed by normal Discovery?
Select 2 answers.

If you have SNMP query step what is recommended?

Which one is a query step? Select 2 answers.

Which is the syntax to fill a custom column with name u_custom_column in a table?

If a WMI Query step uses full statement what is true?

What is unavailable in an Infrastructure Pattern?

If you have a subnet /24 and batch size of 5000, how many Shazzam probes will be activated?

If you have a subnet /24 and Shazzam finds 34 devices, how many classifier probes would you expect to run?

Sys/securtiy admin complains that the Windows server WMI Shazzam requires too many open ports in order to complete. What would be the appropriate action?

What are the 3 related lists that can assist you in a discovery status?

What cannot be configured in a Discovery Schedule?

What role is required for the MID Server to communicate with the Instance?

If Shazzam probe returns “No active devices” message what is the most likely reason?

Where is the Port Probe Classifier order/priority set?

Where do you specify to trigger pattern as part of Horizontal Pattern Discovery (“HorizontalDiscoveryProbe-Horizontal” Pattern name was mentioned in the question text)?

What is contained in CMDB?
Select 2 answers.

The Merge step screenshot is showing the following:
Merge step:
First table -> table1
Second table -> table2
Target -> cmdb_ci_web_server

Condition (any)
$process.home_dir contains “mongoose”
Unmatched Values – Remove

Select 3 that are true.

What is potentially more risky for data loss during CI Reclassification?
Select 2 answers.

If there are lost CIs what could be the reason?
Select 2 answers.

If WMI is not available, what hosts will NOT be discovered?

Best practice when using SNMP?

What is needed to run a Quick Discovery?
Select 2 answers.

During Discovery the Sensor contains the ______ and the Probe contains the _____ in ECC Queue?

What best describes a Discovery Pattern?

How to Enhance Discovery?

If you have 1 MID Server and you need to discover 10 000 IPs, which settings will make it run 10 times on 1000 IPs?

What exactly the following means ‘$table[1].example + “-” + $example_variable’ in a step?

What’s needed if you want to extend a MID Server to work with vCenter API?

Select the 3 correct syntaxes used in a pattern step.

BONUS QUESTION
What MID Server configuration we cannot be changed from the Instance?

BONUS QUESTION
If we want only to Identify CI without populating the CMDB we use?

If you do not want Discovery to discover Windows CIs from where you stop it?

What do you see in CI Class Manager?

DiscoverySensor Script Include is the main Sensor?

What you can see on the MID Server Dashboard?

When Pattern Extension section runs?

Discovery Schedules is used for?

Nmap can NOT be installed on Linux?

What of the following errors could be from the CI Classification?

Probe input is processed by Sensor?

How ServiceNow Discovery knows which host is available?

CI Identifiers module is used for?

What is present in the Application pattern type but not in the Infrastructure pattern type?

What are needed to have SNMP probe discovery?

What 3 items are you allowed to set immediatelly when validating a new MID server?

What variables you see when you start Infrastructure pattern?

If we only want to identify a CI without populating into the CMDB we must use?

When developing a new horizontal discovery pattern, you need?

What best describes Discovery Behaviors?

What are the default MID logs?

ADM stands for?

How discovery property start?

How is the MID Server configuration file called?

Classifier could NOT use more than one classification?

What type of patterns exist?

If a CI is not being discovered in the last 30 days, what will delete it?