CIS-EM Exam Preparation

Certified Implementation Specialist - Event Management

Official Exam Page ↗Official Study Guide ↗Practice Questions (100)

Exam Details

Questions

60 min

Duration

Not published

Cut Score

$450

Exam Fee

Exam Blueprint

Official blueprint KB0011604 v8.0, updated January 2026 ↗

Domain	Weight
Alerts and Tasks • Alert defined (alert record attributes, scheduled jobs • Alerts process flow (alert management rules, CI binding, priority scores, priority groups, incidents, best practices) • Alert grouping (correlation rules, alert aggregation) • Alert intelligence in Service Operations Workspace • Alert management rules • Alert impact profile (impact tree, impact rules, cluster example, SLAs)	30%
Event Configuration and Use • Event setup (event processing, event rules, event filter, event thresholds, operator workspace) • Event Management process flow (event table, message key, event processing jobs, event field mapping, CI binding, best practices) • Connectors (preconfigured, customized) • Scripting (Regex, JavaScript, PowerShell)	27%
Event Sources • Identify event sources • Push vs. pull methods • Use inbound actions • Configure a monitoring connector • Use Agent Client Collector Monitoring	16%
Architecture and Discovery • Discovery and MID server architecture • Event Management architecture and CMDB • The monitoring process • Validate a MID server	10%
Metric Intelligence • Review metric intelligence capabilities • Connect a metric source • Review the metric data pipeline • Identify anomaly bounds and thresholds • Use metric intelligence in Service Operations	10%
Event Management Overview • IT Operations Management (ITOM) solution • Define customer challenges • Event Management key features and capabilities • Graphical user interfaces (operator workspace, alert intelligence, dependency maps) • Common Service Data Model (business, application, and technical services)	7%

Study Plan

Focus on high-weight topics first for maximum impact. Topics are ordered by exam weight.

Event Management Overview

0% weight

ITOM solution positioning, customer challenges, Event Management features, operator workspace, alert intelligence, dependency maps, and CSDM integration

Practice (7 questions)

Architecture and Discovery

0% weight

Discovery and MID server architecture, Event Management architecture, CMDB integration, monitoring process, and MID server validation

Practice (10 questions)

Event Configuration and Use

0% weight

Event processing, event rules, filters, thresholds, operator workspace, message keys, CI binding, connectors, and scripting with regex/JavaScript/PowerShell

Practice (27 questions)

Alerts and Tasks

0% weight

Alert records, scheduled jobs, alert management rules, priority scores, incident creation, correlation rules, aggregation, and Service Operations Workspace

Practice (30 questions)