CIS-DF Practice Test 18 — 15 Questions

Question 1

Your team is troubleshooting a problem where discovery payloads for network gear are failing identification because multiple network devices share the same MAC address due to virtual routing and switching configurations. How can you resolve this in the CI Class Manager?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Modify the identification rule for the network gear class to include secondary unique identifiers like serial number or IP address in combination with MAC address.. When multiple network devices share the same MAC address (common in virtual routing/switching or VRF scenarios), the default identification rule that relies solely on MAC address will fail or create duplicate/incorrect CIs. The correct fix is to modify the identification rule for the network gear class to use a combination of attributes — such as serial number or IP address combined with MAC — so that each device is uniquely identified. This ensures the IRE (Identification and Reconciliation Engine) can distinguish between devices that appear to have the same MAC.

Answer

Create a Business Rule to merge duplicate records after discovery runs.

Answer

Change the discovery schedule interval to prevent overlapping scans.

Answer

Disable the MAC address attribute from the cmdb_ci table entirely.

Question 2

When implementing the CSDM framework, your project team must decide where to attach Business Service Offerings. According to CSDM specifications, what is the primary parent of a Service Offering?

Accepted Answer

Service [cmdb_ci_service]. According to CSDM, a Service Offering's primary parent is the Service [cmdb_ci_service] record. Service Offerings represent the consumable commitments (SLAs, pricing, availability) attached to a Service, and the Service is the top-level logical entity in the Sell/Consume domain.

Answer

Business Application [cmdb_ci_business_app]

Answer

Application Service [cmdb_ci_service_calculated]

Answer

User Group [sys_user_group]

Question 3

Your team is planning to introduce a new class of CIs that will store sensitive cryptographic keys. These CIs should only be accessible and modifiable by a specific security team. In ServiceNow CMDB architecture, how are class-level access controls typically managed?

Accepted Answer

By utilizing standard ServiceNow Access Control Lists (ACLs) targeting the specific custom table name created for the class.. In ServiceNow, class-level access controls are managed through standard Access Control Lists (ACLs) that target the specific table created for the custom CI class. Each CI class is backed by its own table (e.g., u_crypto_key), and ACLs on that table control read, write, create, and delete access for roles. This is the native ServiceNow security model for restricting access to a class of CIs.

Answer

By configuring Discovery source rules to encrypt payloads before they reach the cmdb_rel_ci table.

Answer

By writing a Business Rule on cmdb_rel_ci that strips read access during query execution.

Answer

By modifying the CI Class Manager security tab to lock out standard roles automatically.

Question 4

A reporting analyst wants to create a report showing the distribution of CIs across different operational statuses (e.g., In Use, Maintenance, Retired). Which table and field should be used as the primary grouping?

Accepted Answer

cmdb_ci table, Operational Status field. The correct table and field for grouping CIs by operational status is the cmdb_ci table with the Operational Status field. The Operational Status field (operational_status) indicates the current state of a CI, such as In Use, Maintenance, or Retired, and is designed for this purpose.

Answer

cmdb_rel_ci table, Status field

Answer

ast_config_item table, State field

Answer

cmdb_ci table, Install Status field

Question 5

When designing a custom class hierarchy in the CMDB, an architect must adhere to best practices to ensure optimal performance and maintainability. Which TWO of the following practices are recommended when creating and configuring custom CI classes? (Choose two.)

Accepted Answer

Extend from an existing appropriate child class (such as cmdb_ci_server) if the new CI shares those attributes.. Option A is correct because ServiceNow best practice is to extend a new custom CI class from the most specific existing class whose attributes it shares (for example, extending from cmdb_ci_server for a specialized server type), which inherits relevant fields, identifiers, and relationships instead of duplicating them. Option C is correct because reusing an existing class with customized attributes or identifiers avoids unnecessary class proliferation, keeping the CMDB model simpler, easier to maintain, and more performant. Option B is wrong because extending every new hardware type directly from the base cmdb table discards useful inherited attributes and relationships and creates a flat, hard-to-maintain hierarchy rather than clean isolation. Option D is wrong because disabling inheritance is not a supported performance-tuning practice and would break the class model, identifier inheritance, and dependent relationships. Option E is wrong because creating a separate relationship table per CI class fragments the relationship model; relationships should use the shared relationship tables (such as cmdb_rel_ci) with appropriate relationship types.

Answer

Extend from the cmdb table directly for every new hardware type to ensure clean table isolation.

Answer

Disable inheritance on all custom classes to improve database query execution speed.

Answer

Create a separate custom relationship table for each new custom CI class to maintain relationship integrity.

Question 6

A governance team wants to ensure that CIs without valid IP addresses or MAC addresses are flagged in network-connected classes. Where can this specific validation rule be configured?

Accepted Answer

CMDB Data Governance > Policies. CMDB Data Governance > Policies allows administrators to define validation rules that flag CIs with missing or invalid attributes, such as IP addresses or MAC addresses for network-connected classes. These policies can be configured to run on-demand or on schedule, providing governance over data quality.

Answer

Discovery Definition > Behaviors

Answer

CI Class Manager > Identifiers

Answer

System Properties > Network Settings

Question 7

An enterprise has implemented strict identification rules requiring serial numbers for all hardware. However, a batch of legacy network hubs has no serial numbers encoded in firmware. When ingested via import sets, the IRE rejects every record due to missing identification attributes. The business wants these records ingested into the CMDB anyway, using their MAC address as the unique identifier. What is the correct way to accommodate this?

Accepted Answer

Add a second identification rule entry for the hardware class in CI Class Manager where the identification criteria uses MAC address.. Adding a secondary identification rule entry using MAC address allows devices without serial numbers to be correctly identified and ingested.

Answer

Change the target table to cmdb_ci_appl.

Answer

Disable the identification rule entirely for the hardware class.

Answer

Write a Business Rule to insert fake serial numbers starting with 'UNKNOWN' into every record.

Question 8

What is the primary purpose of the 'Audit' functionality within ServiceNow Asset and CMDB management?

Accepted Answer

To verify physical or logical existence and accuracy of CI data through scheduled campaigns. The Audit functionality in ServiceNow Asset and CMDB management is designed to verify the physical or logical existence and accuracy of CI data through scheduled audit campaigns. Auditors are assigned CIs to confirm, and results feed back into the CMDB to correct discrepancies, mark missing assets, or validate data quality. This directly supports CMDB governance and compliance.

Answer

To scan network ports for security vulnerabilities

Answer

To automatically approve emergency change requests

Answer

To track user login attempts and password resets

Question 9

Which TWO methods can be used to add a custom attribute to a CI class in ServiceNow? (Choose two.)

Accepted Answer

Using the CI Class Manager by selecting the class and adding the attribute in the Attributes tab.. Option C is correct because the CI Class Manager is the purpose-built ServiceNow interface for extending the CMDB schema: after selecting the target CI class, the Attributes tab lets you add a new attribute (field) to that class, which creates the underlying column on the class table and inherits it to child classes. Option E is correct because adding a column directly to the target class table via System Definition > Tables (the sys_db_object/sys_dictionary mechanism) also creates a valid custom attribute on the CI class, and ServiceNow supports this as an alternative schema-editing method. Option A is not correct because Discovery patterns and Pattern Designer populate CI data during discovery; they do not define persistent custom attributes on a CI class. Option B is not correct because a Business Rule with a setDisplayValue script only manipulates how a value is displayed at runtime and does not add an attribute to the class schema. Option D is not correct because Form Designer only changes the layout of fields on a form; it cannot create a new attribute on the CI class.

Answer

Modifying Discovery patterns via Pattern Designer to store attributes in transient memory.

Answer

Creating a Business Rule with a setDisplayValue script.

Answer

Editing the Form Designer layout for the hardware form.

Question 10

An implementer is setting up a new integration using IntegrationHub to ingest network switch data into the CMDB. Which API should be utilized within the script or action to ensure that the payload passes through deduplication and reconciliation checks?

Accepted Answer

SNC.IdentificationEngine.createOrUpdate(). SNC.IdentificationEngine.createOrUpdate() is the JavaScript API that submits a payload to the Identification and Reconciliation Engine (IRE), which applies identification rules, deduplication, and reconciliation before inserting or updating CIs. This is the correct way to ensure ingested data respects CMDB governance. Direct inserts bypass IRE entirely.

Answer

RestMessageV2.execute()

Answer

CMDBAPI.ingest()

Answer

GlideRecord.insert()

Question 11

Which TWO of the following are characteristics of the 'Fly' maturity phase in CSDM?

Accepted Answer

Advanced optimization and business value realization.. In the CSDM (Common Service Data Model) maturity model, the 'Fly' phase represents the highest level of maturity, where organizations achieve advanced optimization and business value realization (option A) — meaning the data model is fully adopted, automated, and directly tied to measurable business outcomes. It also entails continuous enterprise transformation and innovation across domains (option C), because at this stage CSDM data is used to drive ongoing cross-domain improvement, not just operational stability. Options B, D, and E describe foundational or 'Crawl'-level activities — configuring standard Foundation company records, initial data cleansing of user and department tables, and setting up basic service portfolios for the first time — which belong to earlier maturity phases, not the advanced 'Fly' phase.

Answer

Configuring standard Foundation company records.

Answer

Initial data cleansing of user and department tables.

Answer

Setting up basic service portfolios for the first time.

Question 12

What is the primary purpose of the CMDB Query Builder when generating insights?

Accepted Answer

To visually build and execute complex multi-class CI relationship queries and export results.. CMDB Query Builder allows users to construct visual, multi-class queries to find specific CI relationships and subsets across the CMDB.

Answer

To configure CI class identification and reconciliation rules.

Answer

To manage CSDM lifecycle policies and archival rules.

Answer

To execute automated discovery scans across IP networks.

Question 13

An administrator is setting up a new technical service for internal server backup management. Where should this technical service be classified according to CSDM?

Accepted Answer

Manage Technical Services domain. In the Common Service Data Model (CSDM), a technical service represents a service that is delivered by technical components (e.g., servers, applications) and consumed by other technical services or business services, not directly by end-users. Internal server backup management is an infrastructure-level service that supports IT operations, so it belongs in the Manage Technical Services domain. This domain is specifically designed for services that are managed by IT and have a technical focus, such as backup, monitoring, or patching.

Answer

Design domain as a Business Application

Answer

Sell/Consume domain as a public Catalog Item

Answer

Foundation domain as a User Group

Question 14

Which TWO of the following methods can be used to view relationship-based insights for a configuration item in ServiceNow? (Choose two.)

Accepted Answer

Relationships related list on the CI form. Option A is correct because the Relationships related list on a CI form directly displays the CI's relationship records (parent/child, depends on, etc.), giving relationship-based insight into how that configuration item connects to other CIs. Option D is correct because Dependency Views map, accessible from the CI record, renders a graphical, relationship-based visualization of the CI and its connected infrastructure, letting you explore upstream and downstream dependencies. Option B is not correct because CI Class Manager identifier rules define how CIs are uniquely identified and reconciled, not how relationships are viewed. Option C is not correct because CMDB Health Dashboard completeness scorecards measure data completeness of CI attributes, not relationships. Option E is not correct because a Discovery Schedule execution log records discovery run activity and errors, not CI relationship insights.

Answer

CI Class Manager identifier rules

Answer

CMDB Health Dashboard completeness scorecards

Answer

Discovery Schedule execution log

Question 15

An auditor needs to verify when a critical business application CI was last updated by an authorized discovery source versus a manual update. Which CMDB feature tracks the provenance and history of attribute updates for governance review?

Accepted Answer

Audit Log and CI History. The Audit Log and CI History feature in the CMDB records every change made to a configuration item, including the source of the update (e.g., discovery, manual, import) and the timestamp. This provides the provenance and historical record needed for governance and audit reviews. It allows auditors to distinguish between authorized discovery updates and manual modifications.

Answer

CMDB Baseline

Answer

Reconciliation Engine Simulator

Answer

CMDB Data Manager