Incident Management

A service desk manager reports that priority is not updating automatically when Impact and Urgency are changed on an incident form. Where is the mapping between Impact, Urgency, and Priority configured?

A service desk analyst wants to assign an unassigned incident to themselves with a single click. Which UI Action provides this functionality out of the box?

A support agent needs to create a Problem record directly from an existing Incident while preserving the correlation between the two. Which related link or UI action should the agent use on the Incident form?

An incident has been inactive in the 'Resolved' state for a specific number of days defined by system properties. Which out-of-the-box scheduled job automatically moves it to 'Closed'?

An organization wants to ensure that when an incident is resolved, the Caller receives an email notification with a survey link. Which baseline module manages the triggering of this survey?

An administrator needs to configure the system so that when an incident is created from an inbound email, a specific Assignment Group is automatically populated based on the email subject. Which feature should be used to achieve this?

An administrator is configuring SLA Definitions for Incident Management. They need the SLA timer to pause whenever an incident is placed in the 'Awaiting Vendor' state. How should this be configured?

An enterprise requires that when a Major Incident is declared, a dedicated Child Incident task is automatically created for each affected business service found in the Business Service CI relationship. Which out-of-the-box feature supports this specialized workflow?

An incident record has been closed, and a user calls in reporting the exact same issue is still occurring. What is the recommended ITIL and ServiceNow best practice?

An administrator needs to track how many times an incident has been reassigned between different assignment groups to measure process efficiency. Which feature or field type natively captures and displays this movement?

Which user role is required by default to create, manage, and close incident records within the standard ServiceNow IT Service Management application?

An IT team wants to prevent agents from closing an incident unless the 'Resolution code' and 'Resolution notes' fields are populated. Which configuration tool is best suited to enforce this requirement upon clicking 'Resolve'?

An incident is associated with a Parent incident. What behavior does ServiceNow exhibit regarding state changes between parent and child incidents out of the box?

When configuring Assignment Rules for incidents, what occurs if multiple assignment rules match the criteria of an incoming or updated incident record?

A problem has been investigated, and a permanent fix has been identified. When the problem coordinator creates a known error article from the problem record, how does this workflow assist Incident Management?

An analyst opens an incident and needs to populate several fields quickly with predefined standard text for a VPN connectivity issue. Which ServiceNow feature should the analyst use?

Which TWO methods can be used to escalate an incident to a Major Incident in ServiceNow? (Choose two.)

Which THREE components are configured when setting up a Service Level Agreement (SLA) Definition for Incident Management? (Choose three.)

Which TWO fields are mandatory on the Incident form out of the box when creating a new incident manually? (Choose two.)

Which THREE actions can be performed when utilizing the incident-to-problem workflow in ITSM? (Choose three.)

When viewing an Incident record, where can an agent see a chronological audit trail of all field updates, comments, and work notes added by users and system processes?

Which TWO states are typically included in the baseline Incident lifecycle state model? (Choose two.)

Which TWO options represent valid ways an end user (caller) can check the status of their submitted incident? (Choose two.)

Which TWO considerations are important when designing Assignment Rules for Incident Management? (Choose two.)

An administrator needs to modify the priority lookup rules to ensure that incidents created with an Impact of 2 (Medium) and Urgency of 2 (Medium) automatically result in a Priority of 3 (Moderate). Where should the administrator navigate to configure this matrix in ServiceNow?

A service desk manager wants to ensure that when an incident is assigned to the Hardware group, the Assignment group field automatically populates the Assigned to field with a specific default handler if left empty, or dynamically limits the list of assignees. Which core ServiceNow feature should be configured to automatically populate or route incident assignment within a specific group?

An enterprise organization requires that when a Major Incident Candidate is promoted to a Major Incident, a dedicated Major Incident workspace opens automatically, and specific child incidents are automatically associated. Which plugin must be activated to utilize the formal Major Incident Management workbench and associated workflows in ITSM?

Which THREE types of metrics can be tracked using the baseline Incident Management SLA and Metric definitions? (Choose three.)

A service desk technician attempts to close an incident, but the system prevents the closure and displays a mandatory error message requiring the 'Close code' and 'Close notes' fields to be populated. Which component of the Incident Management application enforces these fields upon state change to Closed?

An IT organization defines a Service Level Agreement (SLA) for Incident Resolution that must pause its timer whenever an incident moves to the 'Awaiting User Info' state. Where must this pause condition be configured within the SLA definition record?

A problem coordinator wants to create a new Problem record directly from an existing major Incident while retaining a bi-directional link so that updates to the Incident's workaround are automatically copied to the related Problem. How should the administrator achieve this relationship natively?

An IT support team member needs to quickly communicate a known workaround to all active incidents related to a specific active Problem record. Which related link or related list on the Problem form enables the propagation of the workaround to all associated incidents?

An administrator is configuring Service Level Agreements (SLAs) for the Incident table. Which THREE elements are required components of a standard SLA definition (contract_sla) record in ServiceNow? (Choose three.)

Which TWO actions occur automatically when a Major Incident Candidate is promoted to a Major Incident using the Major Incident Management workbench? (Choose two.)

A Major Incident is declared. Which THREE of the following actions are automatically performed or enabled by the Major Incident Management plugin?

A company requires that when an incident is assigned to a specific group, the 'Assigned to' field must be mandatory. Which configuration change accomplishes this using the most efficient ServiceNow best practice?

An incident is created via email. The system identifies a matching CI, but the 'Incident State' remains 'New' instead of 'In Progress' despite the assignment group being populated. What is the most likely cause?

When configuring Incident Management properties (Incident > Administration > Properties), which TWO behaviors can an administrator control globally? (Choose two.)

You need to ensure that an incident automatically moves to 'Resolved' state when all associated tasks are closed. Which approach utilizes the native ServiceNow engine?

Which THREE of the following are valid ways to trigger the Major Incident Management workflow?

A service desk manager needs to ensure that Incidents assigned to the 'Hardware' group are automatically routed to a specific sub-group based on the 'Category' field. Which configuration should be used?

An organization requires that when an Incident priority is set to '1 - Critical', a 'Major Incident' candidate record is created. What is the best practice approach?

Which field on the Incident form is calculated automatically based on the 'Impact' and 'Urgency' fields using the Priority Lookup Rules?

You are troubleshooting a scenario where an Incident SLA is not attaching to a ticket. What is the first place you should investigate?

An ITIL user complains they cannot see the 'Major Incident' tab on an incident record. What is the most likely cause?

An Incident is related to a Problem record. When the Problem is resolved, the related Incidents should be updated automatically. How is this typically managed?

Which role is specifically required to create or modify 'SLA Definitions'?

When configuring an 'Incident Record Producer', what is the purpose of the 'Script' field?

What is the primary function of the 'Incident State' field choices?

Which tab on the Incident form is typically used to track communication with the caller?

What is the purpose of the 'Incident Task' table?

When using the 'On-Hold' state, which sub-field is typically used to explain why the incident is waiting?

If an organization wants to prevent an Incident from being closed unless certain fields are populated, which feature should be used?

When a Major Incident is created, what happens to the linked child incidents?

How can an agent escalate an incident that is currently 'In Progress'?

Which form component is used to quickly search the Knowledge Base based on incident short description?

Which field must be populated to allow the 'Resolution' tab to be visible or actionable?

What is the correct order of operations when an incident meets criteria for both a standard SLA and an SLA pause condition?

What does the 'Caller' field on the Incident form reference?

Where do you configure the email notification that is sent to the 'Caller' when an incident is resolved?

When an incident is moved to 'Resolved', what happens to the SLA timer?

What is the difference between 'Work Notes' and 'Comments' in an incident?

An organization wants to capture 'Resolution Code' values that are specific to the 'Network' category. How is this achieved?

What is the purpose of the 'Parent Incident' field?

What is the 'Service Desk' group's primary role in Incident Management?

When creating an Incident from a Service Portal, which component defines the fields displayed to the user?

Which feature allows an agent to create a knowledge article directly from an Incident?

If you need to ensure that an incident cannot be resolved unless the 'Work Notes' field is not empty, which method is most effective?

Which role is the minimum required to read and update incident records?

What is the purpose of the 'Configuration Item' (CI) field on the Incident form?

When an incident is set to 'On Hold', the 'On Hold' timer should begin. How is this configured?

What happens when an incident 'Priority' is changed from 3 to 1?

Which field on the Incident form indicates the urgency of the issue from the user's perspective?

Which THREE are valid stages in the standard Incident lifecycle?

Which mechanism ensures that if an Incident is not updated for 24 hours, an email is sent to the manager?

You want to hide the 'Impact' field for users who do not have the 'itil' role. Where is the most appropriate place to configure this?

Which TWO components can be used to notify a user about an incident update?

Which THREE factors influence the Priority calculation in the default ITSM Incident Management?

Which THREE items are required to properly define an SLA?

Which TWO fields are commonly used to categorize an incident?

Which THREE actions can be performed via the Incident 'Related Links'?

Which THREE are standard 'Resolution Codes' in ServiceNow?

Which THREE fields are auto-populated when an incident is created via email?

Which THREE settings can be modified in an SLA Definition to control the SLA timer?

Which TWO are common 'On Hold' reasons in the standard Incident process?

Which TWO methods are used to restrict visibility of Incident fields?

Which TWO fields are essential for the 'Incident - Resolve' business rule to function correctly?

Which TWO of the following can trigger the creation of a 'Problem' record from an 'Incident'?

An organization wants to ensure that when an incident is assigned to a specific assignment group, the 'Assigned to' field automatically populates with the manager of that group. Which configuration is best for this requirement?

You are tasked with configuring the Incident Priority Matrix. If an Incident has an Urgency of 2 and an Impact of 2, what is the default Priority?

Which role is required to manage incident SLAs?

A Major Incident has been promoted. The Incident manager needs to ensure that all child incidents are updated when the parent incident state changes to Resolved. How should this be achieved?

You are configuring a new Incident Record Producer. You want to map the 'Urgency' variable to the Incident 'Urgency' field. How do you map this dynamically?

A user reports that they cannot see the 'Create Problem' UI Action on the Incident form. What is the most likely cause?

When migrating incidents from a legacy system, you need to ensure that the SLA duration is calculated based on the Business Calendar. Where is this configured?

When a Major Incident is created, a 'Major Incident Workbench' is available. What is its primary function?

Which module allows an administrator to define how incidents are escalated?

A customer wants to make the 'Short Description' field mandatory only when the Incident state changes to 'Resolved'. Which approach is best?

What is the purpose of the 'Incident Task' table?

You are investigating why an incident was not auto-assigned. You check the Assignment Rules but notice the 'Match Conditions' are met. What is another common reason?

You are designing an integration where incidents are created via an API. How do you ensure that 'Assignment Rules' are triggered?

Which tool is best for visualizing the relationship between an Incident and the affected Configuration Item?

An organization wants to require a 'Resolution Code' when closing an incident. What is the standard configuration?

Which field on an incident is used to indicate the severity of the business impact?

A user complains that they can see 'Incident' but not 'Problem'. What is the most likely reason?

An organization requires that incidents created from a specific catalog item are automatically assigned to the 'Service Desk' group. What is the best way to implement this?

When resolving an incident, the system automatically checks for related resolved incidents. What feature provides this functionality?

You need to ensure that only members of the 'Major Incident Management' group can promote an incident to a Major Incident. How do you restrict this?

A user's incident was closed, but they respond via email. The system creates a new incident instead of reopening the old one. What setting should be checked?

What is the primary function of the 'Knowledge' icon on an incident form?

You want to hide the 'Impact' field from all users except those with the 'admin' role. What is the most secure way to do this?

Which table is the base table for the 'Incident' table?

Which TWO of the following are valid ways to escalate an incident?

An organization wants to require 'Work Notes' whenever an incident is set to 'Pending'. How do you configure this?

When using 'Incident Communication Plans', what happens when a major incident is updated?

Which TWO fields are used in the default Incident Priority calculation?

Which THREE items can be added to an incident using the 'Related Records' section?

Which TWO ways can you restrict who can resolve an incident?

Which THREE fields are mandatory by default in the Incident module?

Which THREE components must be configured to use the Major Incident Management features?

Which TWO of the following are true about 'Incident Tasks'?

Which THREE aspects must be considered when creating an SLA Definition for Incidents?

Which THREE items are included in the Major Incident Workbench?

Which TWO of the following are common methods to populate the 'Affected CI' on an incident?

Which TWO steps are involved in the Incident-to-Problem workflow?