When interviewing for a position as an incident manager, you can expect to be asked about your experience with different IT frameworks, personal incident management methods, and basic managerial skills. The interviewer may provide you with scenarios where different incidents occur within the service desk department to observe the processes you would use to categorize, prioritize, and respond to the incidents.
The question was; What explains this drop in Events/Incidents?1 Answer
My answer was a Patch or upgrade was made which turned out to be bad. And that upgrade was removed thereby reducing the number of Alerts. The answer turned out to be a change in monitoring. Later, I learned it was a bad change. When they started monitoring, they initially turned on everything. The change was when they decided to monitor only failures. You don't need a monitoring tool to monitor failures. Customers will do that for free. Cisco, did not know what they were doing. They, still don't.