Incident Management Questions

Master ServiceNow Incident Management to restore normal service operation as quickly as possible. Learn incident states, priority, escalation, and resolution.

12 total questions4 free questions

About Incident Management

Incident Management is one of the core ITIL processes in ServiceNow. The goal is to restore normal service operation as quickly as possible while minimizing business impact. This involves managing the entire incident lifecycle from creation through resolution and closure.

Why This Matters for Your Exam

Incident Management accounts for approximately 12% of the CSA exam. This is a foundational ITSM process that most ServiceNow implementations use. Questions focus on the incident lifecycle, priority calculation, assignment, and SLA management.

Key Concepts to Master

Master the incident lifecycle states: New, In Progress, On Hold, Resolved, Closed. Understand how Priority is calculated from Impact and Urgency using the priority lookup matrix. Know how assignment rules automatically route incidents and how escalations work.

Exam Tips

Remember that Resolved is not the same as Closed - there's typically a waiting period for user confirmation. Understand that Priority drives SLA targets. Know the difference between functional and hierarchical escalation. Major Incident Management is a separate process for high-impact situations.

Practice Questions

12 questions available
1
easy

What is the primary goal of Incident Management in ServiceNow?

ATo identify the root cause of issues
BTo restore normal service operation as quickly as possible
CTo prevent incidents from occurring
DTo document all IT changes
2
easy

How is incident Priority calculated in ServiceNow by default?

AManually set by the caller
BBased on Impact and Urgency
CBased on the assignment group
DBased on the category selected
3
medium

Which incident state indicates that work has started but is not yet complete?

ANew
BIn Progress
COn Hold
DResolved
4
medium

What is the difference between closing and resolving an incident?

AThere is no difference; they are the same action
BResolved means a solution was applied; Closed means the caller confirmed resolution
CClosed is temporary; Resolved is permanent
DOnly managers can close; anyone can resolve
5
medium

What ServiceNow feature automatically assigns incidents to appropriate groups based on criteria?

AData Policies
BAssignment Rules
CBusiness Rules
DUI Policies
6
hard

In the context of Major Incident Management, what is the purpose of a Major Incident task?

ATo track individual work items during major incident resolution
BTo automatically escalate to management
CTo create a Problem record
DTo notify all users of the outage
7
easySelect all that apply

Which of the following are valid incident states in ServiceNow? (Select all that apply)

ANew
BIn Progress
CPending
DOn Hold
8
medium

What table stores incident records in ServiceNow?

Atask
Bincident
Csc_request
Dticket
9
hard

When an incident is reopened, which field is typically incremented to track this?

APriority
BReopen count
CEscalation level
DUrgency
10
medium

What is the purpose of the 'Configuration Item' field on an incident?

ATo track the cost of the incident
BTo identify the affected service or hardware
CTo assign the incident to a technician
DTo categorize the incident type
11
easy

Which role is typically required to resolve incidents in ServiceNow?

Aadmin
Bitil
Cincident_manager
Dapprover_user
12
hard

What is an SLA (Service Level Agreement) breach in the context of incidents?

AWhen a customer cancels their contract
BWhen an incident exceeds its agreed response or resolution time
CWhen too many incidents are created in a day
DWhen an incident is assigned to the wrong group