Incident Management

A service desk manager reports that priority is not updating automatically when Impact and Urgency are changed on an incident form. Where is the mapping between Impact, Urgency, and Priority configured?

A service desk analyst wants to assign an unassigned incident to themselves with a single click. Which UI Action provides this functionality out of the box?

A support agent needs to create a Problem record directly from an existing Incident while preserving the correlation between the two. Which related link or UI action should the agent use on the Incident form?

An incident has been inactive in the 'Resolved' state for a specific number of days defined by system properties. Which out-of-the-box scheduled job automatically moves it to 'Closed'?

An organization wants to ensure that when an incident is resolved, the Caller receives an email notification with a survey link. Which baseline module manages the triggering of this survey?

An administrator needs to configure the system so that when an incident is created from an inbound email, a specific Assignment Group is automatically populated based on the email subject. Which feature should be used to achieve this?

An administrator is configuring SLA Definitions for Incident Management. They need the SLA timer to pause whenever an incident is placed in the 'Awaiting Vendor' state. How should this be configured?

An incident record has been closed, and a user calls in reporting the exact same issue is still occurring. What is the recommended ITIL and ServiceNow best practice?

Which user role is required by default to create, manage, and close incident records within the standard ServiceNow IT Service Management application?

When configuring Assignment Rules for incidents, what occurs if multiple assignment rules match the criteria of an incoming or updated incident record?

An analyst opens an incident and needs to populate several fields quickly with predefined standard text for a VPN connectivity issue. Which ServiceNow feature should the analyst use?

Which THREE components are configured when setting up a Service Level Agreement (SLA) Definition for Incident Management? (Choose three.)

Which THREE actions can be performed when utilizing the incident-to-problem workflow in ITSM? (Choose three.)

When viewing an Incident record, where can an agent see a chronological audit trail of all field updates, comments, and work notes added by users and system processes?

Which TWO states are typically included in the baseline Incident lifecycle state model? (Choose two.)

Which TWO options represent valid ways an end user (caller) can check the status of their submitted incident? (Choose two.)

Which TWO considerations are important when designing Assignment Rules for Incident Management? (Choose two.)

An enterprise organization requires that when a Major Incident Candidate is promoted to a Major Incident, a dedicated Major Incident workspace opens automatically, and specific child incidents are automatically associated. Which plugin must be activated to utilize the formal Major Incident Management workbench and associated workflows in ITSM?

Which THREE types of metrics can be tracked using the baseline Incident Management SLA and Metric definitions? (Choose three.)

An IT organization defines a Service Level Agreement (SLA) for Incident Resolution that must pause its timer whenever an incident moves to the 'Awaiting User Info' state. Where must this pause condition be configured within the SLA definition record?

A company requires that when an incident is assigned to a specific group, the 'Assigned to' field must be mandatory. Which configuration change accomplishes this using the most efficient ServiceNow best practice?

When configuring Incident Management properties (Incident > Administration > Properties), which TWO behaviors can an administrator control globally? (Choose two.)

A service desk manager needs to ensure that Incidents assigned to the 'Hardware' group are automatically routed to a specific sub-group based on the 'Category' field. Which configuration should be used?

An organization requires that when an Incident priority is set to '1 - Critical', a 'Major Incident' candidate record is created. What is the best practice approach?

Which field on the Incident form is calculated automatically based on the 'Impact' and 'Urgency' fields using the Priority Lookup Rules?

You are troubleshooting a scenario where an Incident SLA is not attaching to a ticket. What is the first place you should investigate?

An ITIL user complains they cannot see the 'Major Incident' tab on an incident record. What is the most likely cause?

Which role is specifically required to create or modify 'SLA Definitions'?

What is the primary function of the 'Incident State' field choices?

Which tab on the Incident form is typically used to track communication with the caller?

What is the purpose of the 'Incident Task' table?

When using the 'On-Hold' state, which sub-field is typically used to explain why the incident is waiting?

If an organization wants to prevent an Incident from being closed unless certain fields are populated, which feature should be used?

When a Major Incident is created, what happens to the linked child incidents?

Which form component is used to quickly search the Knowledge Base based on incident short description?

Which field must be populated to allow the 'Resolution' tab to be visible or actionable?

What is the correct order of operations when an incident meets criteria for both a standard SLA and an SLA pause condition?

What does the 'Caller' field on the Incident form reference?

Where do you configure the email notification that is sent to the 'Caller' when an incident is resolved?

When an incident is moved to 'Resolved', what happens to the SLA timer?

What is the difference between 'Work Notes' and 'Comments' in an incident?

An organization wants to capture 'Resolution Code' values that are specific to the 'Network' category. How is this achieved?

What is the purpose of the 'Parent Incident' field?

What is the 'Service Desk' group's primary role in Incident Management?

When creating an Incident from a Service Portal, which component defines the fields displayed to the user?

Which feature allows an agent to create a knowledge article directly from an Incident?

Which role is the minimum required to read and update incident records?

What is the purpose of the 'Configuration Item' (CI) field on the Incident form?

What happens when an incident 'Priority' is changed from 3 to 1?

Which field on the Incident form indicates the urgency of the issue from the user's perspective?

Which mechanism ensures that if an Incident is not updated for 24 hours, an email is sent to the manager?

You want to hide the 'Impact' field for users who do not have the 'itil' role. Where is the most appropriate place to configure this?

Which TWO components can be used to notify a user about an incident update?

Which TWO fields are commonly used to categorize an incident?

Which THREE fields are auto-populated when an incident is created via email?

Which THREE settings can be modified in an SLA Definition to control the SLA timer?

Which TWO are common 'On Hold' reasons in the standard Incident process?

You are tasked with configuring the Incident Priority Matrix. If an Incident has an Urgency of 2 and an Impact of 2, what is the default Priority?

A user reports that they cannot see the 'Create Problem' UI Action on the Incident form. What is the most likely cause?

When migrating incidents from a legacy system, you need to ensure that the SLA duration is calculated based on the Business Calendar. Where is this configured?

When a Major Incident is created, a 'Major Incident Workbench' is available. What is its primary function?

A customer wants to make the 'Short Description' field mandatory only when the Incident state changes to 'Resolved'. Which approach is best?

You are investigating why an incident was not auto-assigned. You check the Assignment Rules but notice the 'Match Conditions' are met. What is another common reason?

You are designing an integration where incidents are created via an API. How do you ensure that 'Assignment Rules' are triggered?

Which tool is best for visualizing the relationship between an Incident and the affected Configuration Item?

An organization wants to require a 'Resolution Code' when closing an incident. What is the standard configuration?

Which field on an incident is used to indicate the severity of the business impact?

You need to ensure that only members of the 'Major Incident Management' group can promote an incident to a Major Incident. How do you restrict this?

A user's incident was closed, but they respond via email. The system creates a new incident instead of reopening the old one. What setting should be checked?

What is the primary function of the 'Knowledge' icon on an incident form?

You want to hide the 'Impact' field from all users except those with the 'admin' role. What is the most secure way to do this?

Which table is the base table for the 'Incident' table?

Which TWO of the following are valid ways to escalate an incident?

An organization wants to require 'Work Notes' whenever an incident is set to 'Pending'. How do you configure this?

When using 'Incident Communication Plans', what happens when a major incident is updated?

Which TWO fields are used in the default Incident Priority calculation?

Which TWO of the following are true about 'Incident Tasks'?

Which THREE aspects must be considered when creating an SLA Definition for Incidents?

Which THREE items are included in the Major Incident Workbench?

While working on a high-priority incident, an agent navigates away from the incident record without saving. The agent had changed the State to 'In Progress' and entered work notes. What happens to those unsaved changes?

A service desk manager wants to ensure that when an incident is reassigned to a different assignment group, the previous assignee is automatically cleared. Which feature should be configured to achieve this?

An incident is currently in the 'Resolved' state. A user calls the service desk to report that the issue is still occurring. The agent needs to reopen the incident. Which action should the agent take?

An incident has been resolved and the caller confirms the fix. The incident is now in the 'Resolved' state. After a predefined period, the incident should automatically move to 'Closed'. Which feature controls this automatic closure?

An incident manager wants to ensure that when an incident is escalated to a major incident, the 'Major Incident' field is set to true and a notification is sent to the major incident management team. The escalation can happen via a UI Action or automatically via a business rule. Which configuration should be used to meet this requirement?