CIS-EM Sample Questions Answers

Source, type. node, resource, and metric name

Source, source instance, node, and resource

Source, type. node, and metric name

Source, source instance, node, and type

Source, type. node, resource, and time of event

Event Rules

Message Key

Alert Priority

Severity

Additional_info

Message_key

Metric_name

Short_description

CI name, Fully qualified domain name, IP or MAC address

CI name, Webserver name, IP or MAC address

CI name, Fully qualified domain name, SSH public host keys

System class name, Fully qualified domain name, IP or MAC address

The number of unique nodes that can send events to the instance

The number of connectors and listeners it will collect data from

The number of connectors it will collect data from

The number of CIs in the CMDB that it will be monitoring

Alert Insights

Incident List View

CMDB Health Dashboard

Event Management Overview page

Assign a MID Server to the connector

Enter credentials for the connector

Debug the connector

Test the connector

Activate the connector

alert_operator

evt_mgmt_user

evt_mgmt_operator

alert_user

Correctness

Completeness

Configuration

Conciseness

Conformity

Compliance

Python

Regex

sed/awk

JavaScript

In the event rule, set the Severity to 0

In the alert rule, set the Severity to 0

In the alert rule, set the Severity to -1

In the event rule, set the Severity to -1

Verify bucket field in em_event table > 0

Verify event_processor_job_count = 2

Verify event_processor_job_count = 0

Verify event_processor_enable_multi_node = 2

When the statistical model threshold is breached

When they are promoted to IT alerts

When it is manually promoted in insights explorer

When the anomaly score is greater than 100

Check definitions

Check models

Check clones

Check mirrors

Check instances

Metric Registration

Metric Config Rules

Metric Type Actions

Metric to CI

Once every minute

Every 2 minutes

Twice every minute

Every 5 minutes

An alert management rule

A proxy agent

A distributed cluster

An event rule

A REST API

No correlation rules have been defined

No event management rules have been defined

Application services are not operational

No CMDB is configured

The alert correlation property that enables grouping is set to false

Two rules for every event

As many rules as possible

As few rules as possible

One rule for every event

Metric Name

Source

Classification

Node

Severity

Flapping

Closed

Reopen

Processed

Node

Source

Severity

Message Key

Resource

{"CPU":100}

{"CPU":100,’Status":3}

{"CPU":"100","Status":3}

{"CPU":"100"}

The MID Web Server needs to be Restarted

The MID Web Server needs to be Started

An invalid secret key is being passed in the header information of the URL for the REST request

An invalid password is set in the MID Web Server Context