CCNA Incident Management Questions

A user's incident was closed, but they respond via email. The system creates a new incident instead of reopening the old one. What setting should be checked?

An incident is created via email. The system identifies a matching CI, but the 'Incident State' remains 'New' instead of 'In Progress' despite the assignment group being populated. What is the most likely cause?

If you need to ensure that an incident cannot be resolved unless the 'Work Notes' field is not empty, which method is most effective?

Which TWO fields are essential for the 'Incident - Resolve' business rule to function correctly?

An administrator needs to configure the system so that when an incident is created from an inbound email, a specific Assignment Group is automatically populated based on the email subject. Which feature should be used to achieve this?

Which table is the base table for the 'Incident' table?

You need to ensure that an incident automatically moves to 'Resolved' state when all associated tasks are closed. Which approach utilizes the native ServiceNow engine?

An organization wants to require a 'Resolution Code' when closing an incident. What is the standard configuration?

Which TWO components can be used to notify a user about an incident update?

What is the difference between 'Work Notes' and 'Comments' in an incident?

Which TWO fields are used in the default Incident Priority calculation?

Which tab on the Incident form is typically used to track communication with the caller?

An organization wants to require 'Work Notes' whenever an incident is set to 'Pending'. How do you configure this?

An administrator is configuring Service Level Agreements (SLAs) for the Incident table. Which THREE elements are required components of a standard SLA definition (contract_sla) record in ServiceNow? (Choose three.)

An administrator needs to modify the priority lookup rules to ensure that incidents created with an Impact of 2 (Medium) and Urgency of 2 (Medium) automatically result in a Priority of 3 (Moderate). Where should the administrator navigate to configure this matrix in ServiceNow?

Which THREE factors influence the Priority calculation in the default ITSM Incident Management?

An analyst opens an incident and needs to populate several fields quickly with predefined standard text for a VPN connectivity issue. Which ServiceNow feature should the analyst use?

An incident record has been closed, and a user calls in reporting the exact same issue is still occurring. What is the recommended ITIL and ServiceNow best practice?

An organization wants to ensure that when an incident is resolved, the Caller receives an email notification with a survey link. Which baseline module manages the triggering of this survey?

Which TWO of the following are true about 'Incident Tasks'?

What is the primary function of the 'Incident State' field choices?

Which field on an incident is used to indicate the severity of the business impact?

A service desk analyst wants to assign an unassigned incident to themselves with a single click. Which UI Action provides this functionality out of the box?

Which THREE components must be configured to use the Major Incident Management features?

What is the correct order of operations when an incident meets criteria for both a standard SLA and an SLA pause condition?

Which user role is required by default to create, manage, and close incident records within the standard ServiceNow IT Service Management application?

When resolving an incident, the system automatically checks for related resolved incidents. What feature provides this functionality?

An enterprise requires that when a Major Incident is declared, a dedicated Child Incident task is automatically created for each affected business service found in the Business Service CI relationship. Which out-of-the-box feature supports this specialized workflow?

Which THREE of the following are valid ways to trigger the Major Incident Management workflow?

Which field must be populated to allow the 'Resolution' tab to be visible or actionable?

Which module allows an administrator to define how incidents are escalated?

A Major Incident is declared. Which THREE of the following actions are automatically performed or enabled by the Major Incident Management plugin?

An incident is associated with a Parent incident. What behavior does ServiceNow exhibit regarding state changes between parent and child incidents out of the box?

You are designing an integration where incidents are created via an API. How do you ensure that 'Assignment Rules' are triggered?

Where do you configure the email notification that is sent to the 'Caller' when an incident is resolved?

Which form component is used to quickly search the Knowledge Base based on incident short description?

An incident has been inactive in the 'Resolved' state for a specific number of days defined by system properties. Which out-of-the-box scheduled job automatically moves it to 'Closed'?

You want to hide the 'Impact' field from all users except those with the 'admin' role. What is the most secure way to do this?

Which field on the Incident form indicates the urgency of the issue from the user's perspective?

An administrator needs to track how many times an incident has been reassigned between different assignment groups to measure process efficiency. Which feature or field type natively captures and displays this movement?

Which TWO options represent valid ways an end user (caller) can check the status of their submitted incident? (Choose two.)

Which role is the minimum required to read and update incident records?

When a Major Incident is created, what happens to the linked child incidents?

Which TWO methods are used to restrict visibility of Incident fields?

You want to hide the 'Impact' field for users who do not have the 'itil' role. Where is the most appropriate place to configure this?

An IT organization defines a Service Level Agreement (SLA) for Incident Resolution that must pause its timer whenever an incident moves to the 'Awaiting User Info' state. Where must this pause condition be configured within the SLA definition record?

You are tasked with configuring the Incident Priority Matrix. If an Incident has an Urgency of 2 and an Impact of 2, what is the default Priority?

When using the 'On-Hold' state, which sub-field is typically used to explain why the incident is waiting?

Which role is required to manage incident SLAs?

An enterprise organization requires that when a Major Incident Candidate is promoted to a Major Incident, a dedicated Major Incident workspace opens automatically, and specific child incidents are automatically associated. Which plugin must be activated to utilize the formal Major Incident Management workbench and associated workflows in ITSM?