Servicenow-CIS-EM Exam Format | Servicenow-CIS-EM Course Contents | Servicenow-CIS-EM Course Outline | Servicenow-CIS-EM Exam Syllabus | Servicenow-CIS-EM Exam Objectives

The ServiceNow Certified Implementation Specialist – Event Management Exam
Specification defines the purpose, audience, testing options, exam content coverage,
test framework, and prerequisites to become Certified Implementation Specialist –
Event Management certified.



Six (6) months field experience participating in ServiceNow deployment projects
or maintaining ServiceNow instances

• Participation in at least two ServiceNow ITOM deployments specifically for Event
Management

• Intermediate or above Windows and Unix administration skills

• Intermediate or above SNMP query knowledge

• Intermediate or above JavaScript and regular expression scripting skills

• Introductory or above network administration knowledge

• General familiarity with industry terminology, acronyms, and initialisms



Learning Domain % of Exam

1 Event Management Overview

• IT Operations Management (ITOM) solution

• Define customer challenges

• Event Management key features and capabilities

• Graphical user interfaces (operator workspace, alert
intelligence, dependency maps)

• Common Service Data Model (business, application, and
technical services)

13%

2 Architecture and Discovery

• Discovery and MID server architecture

• Event Management architecture and CMDB

• The monitoring process

• Install a MID server

13%



3 Event Configuration and Use

• Event setup (event processing, event rules, event filter,
event thresholds, operator workspace)

• Event Management process flow (event table, message
key, event processing jobs, event field mapping, CI
binding, best practices)

• Connectors (preconfigured, customized)

• Scripting (Regex, JavaScript, PowerShell)

• Event Management Troubleshooting (event errors,
credentials)

34%

4 Alerts and Tasks

• Alert defined (alert record attributes, scheduled jobs

• Alerts process flow (alert management rules, CI binding,
priority scores, priority groups, incidents, best practices)

• Alert grouping (correlation rules, alert aggregation)

• Alert Intelligence

• Alert impact profile (impact tree, impact rules, cluster
example, SLAs)

30%

5 Event Sources

• Identify event sources

• Push vs. pull methods

• Use inbound actions

• Configure a monitoring connector

10%

Total 100%



Exam Structure

The exam consists of approximately (30) questions. For each question on the
examination, there are multiple possible responses. The person taking the exam reviews
the response options and selects the most correct answer to the question.

Multiple Choice (single answer)

For each multiple-choice question on the exam, there are at least four possible
responses. The candidate taking the exam reviews the response options and selects the
one response most accurately answers the question.

Multiple Select (select all that apply)

For each multiple-select question on the exam, there are at least four possible
responses. The question will state how many responses should be selected. The
candidate taking the exam reviews the response options and selects ALL responses that
accurately answer the question. Multiple-select questions have two or more correct
responses.

Exam Results

After completing and submitting the exam, a pass or fail result is immediately
calculated and displayed to the candidate. More detailed results are not provided to
the candidate.