ServiceNow Certified Implementation Specialist – Event Management — Question 16

A support agent resolves an incident associated with an alert, but the alert does automatically close even though the evt_mgmt.incident_closes_alert property is set appropriately to close the alert.
What is the most likely cause of this issue?

Answer options

• A. The support agent does not have the evt_mgmt_user role.
• B. The support agent only has the evt_mgmt_admin role.
• C. The support agent has the evt_mgmt_operator role, but not the evt_mgmt_user role.
• D. The support agent has the evt_mgmt_user role, but not the evt_mgmt_operator role.

Correct answer: A

Explanation

The correct answer is A because the evt_mgmt_user role is necessary for the support agent to close alerts automatically. Options B and C are incorrect as they either grant too much access or lack the required role, while option D suggests the agent has the correct user role but lacks operator access, which does not directly relate to the closing of alerts.