Incident Management Questions

Master ServiceNow Incident Management to restore normal service operation as quickly as possible. Learn incident states, priority, escalation, and resolution.

24 total questionsAll questions free

Last reviewed:

About Incident Management

Incident Management is one of the core ITIL processes in ServiceNow. The goal is to restore normal service operation as quickly as possible while minimizing business impact. This involves managing the entire incident lifecycle from creation through resolution and closure.

Why This Matters for Your Exam

Incident Management accounts for approximately 12% of the CSA exam. This is a foundational ITSM process that most ServiceNow implementations use. Questions focus on the incident lifecycle, priority calculation, assignment, and SLA management.

Key Concepts to Master

Master the incident lifecycle states: New, In Progress, On Hold, Resolved, Closed. Understand how Priority is calculated from Impact and Urgency using the priority lookup matrix. Know how assignment rules automatically route incidents and how escalations work.

Exam Tips

Remember that Resolved is not the same as Closed - there's typically a waiting period for user confirmation. Understand that Priority drives SLA targets. Know the difference between functional and hierarchical escalation. Major Incident Management is a separate process for high-impact situations.

Practice Questions

24 questions available
All CSA questions are free(24 questions, no login needed)
1
knowledge

What is the primary goal of Incident Management in ServiceNow?

ATo identify the root cause of issues
BTo restore normal service operation as quickly as possible
CTo prevent incidents from occurring
DTo document all IT changes

πŸ‘† Click an option above to select your answer

2
knowledge

How is incident Priority calculated in ServiceNow by default?

AManually set by the caller
BBased on Impact and Urgency
CBased on the assignment group
DBased on the category selected

πŸ‘† Click an option above to select your answer

3
understanding

Which incident state indicates that work has started but is not yet complete?

ANew
BIn Progress
COn Hold
DResolved

πŸ‘† Click an option above to select your answer

4
understanding

What is the difference between closing and resolving an incident?

AThere is no difference; they are the same action
BResolved means a solution was applied; Closed means the caller confirmed resolution
CClosed is temporary; Resolved is permanent
DOnly managers can close; anyone can resolve

πŸ‘† Click an option above to select your answer

5
understanding

What ServiceNow feature automatically assigns incidents to appropriate groups based on criteria?

AData Policies
BAssignment Rules
CBusiness Rules
DUI Policies

πŸ‘† Click an option above to select your answer

6
application

In the context of Major Incident Management, what is the purpose of a Major Incident task?

ATo track individual work items during major incident resolution
BTo automatically escalate to management
CTo create a Problem record
DTo notify all users of the outage

πŸ‘† Click an option above to select your answer

7
knowledgeSelect all that apply

Which of the following are valid incident states in ServiceNow? (Select all that apply)

ANew
BIn Progress
CPending
DOn Hold

πŸ‘† Click an option above to select your answer

8
understanding

What table stores incident records in ServiceNow?

Atask
Bincident
Csc_request
Dticket

πŸ‘† Click an option above to select your answer

9
application

When an incident is reopened, which field is typically incremented to track this?

APriority
BReopen count
CEscalation level
DUrgency

πŸ‘† Click an option above to select your answer

10
understanding

What is the purpose of the 'Configuration Item' field on an incident?

ATo track the cost of the incident
BTo identify the affected service or hardware
CTo assign the incident to a technician
DTo categorize the incident type

πŸ‘† Click an option above to select your answer

11
knowledge

Which role is typically required to resolve incidents in ServiceNow?

Aadmin
Bitil
Cincident_manager
Dapprover_user

πŸ‘† Click an option above to select your answer

12
application

What is an SLA (Service Level Agreement) breach in the context of incidents?

AWhen a customer cancels their contract
BWhen an incident exceeds its agreed response or resolution time
CWhen too many incidents are created in a day
DWhen an incident is assigned to the wrong group

πŸ‘† Click an option above to select your answer

13
application

A system administrator wants to automatically set the category, priority, and assignment group for incoming incidents based on their short description. Which feature should they configure?

ABusiness Rules
BPredictive Intelligence
CFlow Designer
DUI Policies

πŸ‘† Click an option above to select your answer

14
knowledge

Which ServiceNow feature allows agents to have real-time discussions about a specific incident record?

AActivity Stream comments
BSidebar discussions
CEmail notifications
DKnowledge base articles

πŸ‘† Click an option above to select your answer

15
comprehension

What is the primary purpose of the CMDB Dependency View in relation to incident management?

ATo automatically create incidents for failing CIs
BTo visualize relationships between configuration items and understand impact of issues
CTo assign incidents to the correct support group
DTo generate SLA reports for incident resolution

πŸ‘† Click an option above to select your answer

16
knowledge

What information does the Now Assist Admin Console provide?

AOnly incident management analytics
BAI features management and configuration across the ServiceNow platform
CUser administration and role management
DCMDB health monitoring only

πŸ‘† Click an option above to select your answer

17
application

An administrator needs to notify the IT Product Owner whenever a Priority 1 incident is created. Which module should they use?

ASystem Properties > Email
BSystem Notification > Email > Notifications
CSystem Policy > Events
DSystem Logs > Email Log

πŸ‘† Click an option above to select your answer

18
comprehension

Which workspace facilitates IT service management workflows for managing tasks like incidents and requests?

AEmployee Center Portal
BService Operations Workspace
CCMDB Workspace
DCustomer Service Portal

πŸ‘† Click an option above to select your answer

19
application

Multiple users report the same email service outage. An administrator has already created a Major Incident. What should be done with the individual incident tickets?

AAssociate them as child incidents to the Major Incident
BDelete all duplicate incidents
CMerge them into a single incident record
DClose them as 'Not Reproducible'

πŸ‘† Click an option above to select your answer

20
understanding

Which statements about SLA (Service Level Agreement) tracking on incidents are true? (Choose 2)

ASLAs can trigger notifications when approaching breach time
BSLA timers pause automatically when an incident is in a 'Pending' state
CSLAs can only measure resolution time, not response time
DSLA definitions cannot use conditions to match specific incident types

πŸ‘† Click an option above to select your answer

21
knowledge

What is the purpose of an 'Assignment Rule' in Incident Management?

ATo automatically assign incidents to specific groups or users based on defined conditions
BTo restrict which users can view incidents
CTo set the priority of incoming incidents
DTo define SLA targets for incident resolution

πŸ‘† Click an option above to select your answer

22
application

An incident has been resolved but the caller disagrees with the resolution and wants it reopened. What state should the incident be changed to?

AIn Progress
BNew
COn Hold
DActive β€” by creating a new incident referencing the original

πŸ‘† Click an option above to select your answer

23
understanding

How does ServiceNow calculate incident Priority by default?

AUsing a Priority Lookup matrix that combines Impact and Urgency values
BThe caller manually selects the priority when creating the incident
CBased solely on the assignment group's workload
DUsing AI to analyze the short description text

πŸ‘† Click an option above to select your answer

24
knowledge

What is the purpose of the 'Caller' field on an Incident record?

AIt identifies the user who reported or is affected by the incident
BIt shows which phone line the call came in on
CIt determines the assignment group for the incident
DIt sets the SLA target for the incident

πŸ‘† Click an option above to select your answer

CSA is free. Next step: CAD or a CIS exam.

That's every CSA question. When you're ready for the next certification, each one is $9 for lifetime access, or get all 19 paid certifications for $49 (CSA stays free).

Try CAD free questionsBrowse CIS exams