Applying recommended Event Management best practice guidelines, which of the following alerts should be processed first?

When performing CI Binding, what fields does Event Management match to the Node?

The MID Server requires an outbound connection on which port?

In default configuration using baseline connectors, how often is event data collected from event sources?

A support agent resolves an incident associated with an alert, but the alert does automatically close even though the evt_mgmt.incident_closes_alert property is set appropriately to close the alert.
What is the most likely cause of this issue?