CIS-DF Practice Test 21 — 15 Questions

Question 1

A company is preparing for an ISO compliance audit of its IT infrastructure. The auditor asks to see historical records of who approved changes to critical server ownership attributes over the past year. Which ServiceNow feature provides this verifiable evidence?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

CI Class History / Audit Trails on CI records. CI Class History / Audit Trails on CI records capture every field-level change to a CI, including who made the change, when, and the before/after values. This provides the verifiable, timestamped evidence an ISO auditor needs to trace approvals of server ownership attribute changes over the past year.

Answer

Data Certification campaign results from three years ago

Answer

Discovery schedule run logs

Answer

CMDB Health Compliance Dashboard score widget

Question 2

An enterprise wants to schedule a CMDB Query Builder query to automatically run weekly and export the resulting CI dataset to an external SFTP server. Which feature enables this automation?

Accepted Answer

Scheduled Data Export referencing the saved Query Builder result set / export definition. Scheduled Data Export allows administrators to schedule the export of data from a saved CMDB Query Builder query to an external location, such as an SFTP server. This feature automates the weekly export of CI datasets.

Answer

Service Mapping scheduled sync job

Answer

CMDB Data Manager archival schedule

Answer

CMDB Health automated remediation workflow

Question 3

An enterprise requires that all newly discovered servers must have a valid cost center before being classified as operational. How can this requirement be automated without writing custom scripts?

Accepted Answer

CMDB Data Governance Completeness Policy. The CMDB Data Governance Completeness Policy is the correct answer because it allows administrators to define policies that enforce data completeness requirements — such as requiring a valid cost center — on newly discovered CIs before they can be classified as operational. These policies are configured through the CMDB Data Governance module without writing custom scripts, and they can block or flag CIs that fail the completeness check.

Answer

Asset management depreciation rule

Answer

Discovery cost center transform script

Answer

CI Class Manager attribute mandatory toggle

Question 4

Which TWO benefits are gained by scheduling regular Data Certification campaigns in a mature CMDB? (Choose two.)

Accepted Answer

Maintaining audit readiness and proving data governance compliance. Option B is correct because scheduling regular Data Certification campaigns creates a documented, repeatable record of who attested to which CIs and when, which is exactly the evidence auditors and governance frameworks (e.g., COBIT, ISO 20000, SOX controls) require to demonstrate data governance compliance and audit readiness. Option E is correct because a Data Certification campaign in ServiceNow CMDB assigns certification tasks to CI owners, forcing those owners to review and attest to the accuracy of the records they are responsible for, which keeps the CMDB trustworthy over time. Option A is wrong because the Identification and Reconciliation Engine (IRE) is the service that detects and reconciles duplicate or conflicting CI data from discovery and other sources; certification validates existing records and does not replace IRE's deduplication and reconciliation functions. Option C is wrong because generating physical router configurations is a network automation/tooling task, not a CMDB data governance activity. Option D is wrong because resolving P1 incidents is an incident management process performed by support teams; certification campaigns validate data accuracy and do not automatically resolve incidents.

Answer

Replacing the need for the Identification and Reconciliation Engine (IRE)

Answer

Automatically generating physical network router configurations

Answer

Automatically resolving all IT service desk P1 incidents

Question 5

An administrator wants to check which identification rules are active for the `cmdb_ci_computer` class. Where in the ServiceNow user interface should they navigate?

Accepted Answer

CI Class Manager -> Select cmdb_ci_computer -> Identification Rule. The CI Class Manager is the central place to view and manage identification rules for a specific CI class. Navigating to CI Class Manager, selecting the cmdb_ci_computer class, and then viewing the Identification Rule tab shows the active rules. This is the correct path in the ServiceNow UI.

Answer

Discovery -> Identification -> Classes

Answer

Configuration -> CMDB Properties -> Rules

Answer

System Definition -> Identification Rules

Question 6

An organization is preparing to ingest data from an external asset tracking system into the ServiceNow CMDB using a custom REST API integration. Which THREE architectural components must be considered to ensure data integrity and prevent duplication? (Choose three.)

Accepted Answer

Establishing and verifying CI identification rules in CI Class Manager for all target classes.. Option A is correct because CI identification rules defined in CI Class Manager determine which attributes (e.g., serial number, name, IP address) uniquely identify a CI within each class; without verified, class-specific identification rules, incoming records cannot be reliably matched to existing CIs and duplicates will proliferate. Option C is correct because the Identification and Reconciliation Engine (IRE) is the ServiceNow mechanism that applies those identification rules, reconciles duplicates, and enforces data-source precedence; bypassing it with direct GlideRecord inserts into cmdb_ci tables skips deduplication and reconciliation entirely. Option E is correct because every payload must carry a consistent, standardized discovery source value so IRE can apply the correct data source precedence and track record provenance; inconsistent or missing discovery source strings cause IRE to treat records as unrelated and create duplicates. Option B is not correct because Client Scripts run in the browser on form load/change/submit and have no role in validating inbound REST payloads; server-side validation belongs in Scripted REST APIs, business rules, or IRE data source rules. Option D is not correct because Cascade Delete on reference fields controls deletion behavior of related records and does nothing to ensure data integrity or prevent duplication during ingestion; in fact, it can cause unintended mass deletions of related CIs.

Answer

Writing custom Client Scripts to validate JSON payloads on form load.

Answer

Enabling 'Cascade Delete' on all reference fields in the target CMDB tables.

Question 7

An architect is reviewing data ingestion methods for the CMDB. Which THREE integration mechanisms natively support or integrate with the Identification and Reconciliation Engine (IRE)? (Choose three.)

Accepted Answer

ServiceNow Discovery. ServiceNow Discovery (A) is correct because it is one of the primary native data sources that feeds the CMDB through the Identification and Reconciliation Engine, sending discovered CIs to IRE for identification and reconciliation. ServiceGraph Connectors (B) are correct because they are built specifically to push third-party data into the CMDB via IRE, using the IRE API to identify and reconcile records. IntegrationHub ETL (C) is correct because it is the recommended ETL framework for CMDB data ingestion and natively invokes IRE to identify and reconcile incoming records. Manual CSV import via standard System Import Sets (D) is not correct because it relies on transform maps and does not natively invoke IRE unless specifically configured with an IRE-based transform, so it is not a native IRE integration mechanism. Standard Legacy Transform Maps without RTE (E) are not correct because they bypass the Robust Transform Engine and IRE, writing directly to CMDB tables without identification and reconciliation processing.

Answer

Manual CSV file import via standard System Import Sets

Answer

Standard Legacy Transform Maps without RTE

Question 8

When configuring identification rules for a custom CI class via the CI Class Manager, an administrator includes multiple criteria attributes. How does the Identification and Reconciliation Engine (IRE) process these criteria?

Accepted Answer

The IRE evaluates criteria attributes as an AND condition within the criterion, requiring all specified attributes to match.. In ServiceNow's Identification and Reconciliation Engine (IRE), a criterion within an identification rule contains multiple attributes that are evaluated together as an AND condition — all specified attributes must match the incoming payload for the CI to be identified. This ensures precise matching and prevents false positives from partial attribute matches.

Answer

Criteria attributes are ignored unless a Discovery source is explicitly named in the payload.

Answer

The IRE randomly selects one attribute to perform the lookup based on payload weight.

Answer

The IRE evaluates attributes as an OR condition, matching on any single attribute present in the payload.

Question 9

An administrator needs to identify Configuration Items that have not been updated by any discovery source or integration for more than 90 days. Which tool in ServiceNow should be used to isolate these stale records for review?

Accepted Answer

CMDB Health Dashboard - Correctness KPI. Stale CIs are tracked natively using the CMDB Health Dashboard under the Correctness KPI, which includes metrics for identifying records not updated within a threshold.

Answer

Dependency Views map filter

Answer

Report Designer tree map

Answer

CSDM Life Cycle Stage dashboard

Question 10

A CMDB administrator is building an IntegrationHub ETL import that ingests Linux servers from an external discovery tool. The source payload contains a field named 'host_name', but the CMDB CI Class Manager mapping must populate the 'Name' attribute, and the source also provides 'os_version' that must land in 'OS Version'. After running the import, the administrator sees that the CI records are created but the 'Name' field is blank while 'OS Version' is populated correctly. Which action should the administrator take to resolve the blank 'Name' field?

Accepted Answer

Verify in the IntegrationHub ETL transform mapping that the 'host_name' source field is mapped to the 'Name' target attribute and that the mapping is not marked as a coalesce-only field.. The blank 'Name' attribute combined with a correctly populated 'OS Version' points to a transform mapping gap rather than an identification or precedence issue. In IntegrationHub ETL, each source column must be explicitly mapped to the desired target attribute; unmapped columns are simply not written. Coalesce settings and IRE identification rules affect matching, not field population, so the mapping must be corrected.

Answer

Configure an Identification and Reconciliation Engine (IRE) identification rule that uses the 'host_name' field as a search criterion for the Linux server class.

Answer

Enable the 'Coalesce' option on the import set and set 'host_name' as the coalesce field so the value is copied automatically into the 'Name' attribute.

Answer

Add a Data Source Precedence rule that ranks the discovery source above all other sources for the Linux server class, then rerun the import.

Question 11

A CMDB administrator for a large enterprise notices that the CMDB Health Dashboard's Completeness KPI for the 'Business Application' class has been degrading over the past quarter, even though discovery and integrations are running successfully. The administrator needs to identify which specific CI attributes are most frequently left blank so that data stewards can be tasked with remediation. Which action should the administrator take to obtain this insight?

Accepted Answer

Open the CMDB Health Dashboard and drill into the Completeness KPI for Business Application, then review the attribute-level breakdown showing the percentage of CIs missing each required attribute.. The CMDB Health Dashboard's Completeness KPI tracks required attributes per class and provides a drill-down that breaks down missing data by attribute. This attribute-level view is the only mechanism listed that aggregates blanks across all Business Application CIs, allowing the administrator to see which fields are most often empty and assign remediation to data stewards.

Answer

Open the Configuration Item form for a sample Business Application and use the related 'Audit' history to identify which fields have never been populated since the CI was created.

Answer

Navigate to the CMDB Data Manager and create a new expiration policy for the Business Application class that retires records with missing attributes, then monitor the policy results.

Answer

Run a CMDB Query Builder query joining Business Application to the cmdb_ci table and filter for records where the 'owned_by' field is empty, then export the results for review.

Question 12

A CMDB administrator is mapping the CSDM Service Delivery domain for a bank. The bank offers 'Mobile Banking' as a service to retail customers, and internally the IT group also provides 'Database Administration' to application teams. Which statement correctly distinguishes how these two offerings are modeled in CSDM?

Accepted Answer

Mobile Banking is modeled as a Business Service, while Database Administration is modeled as a Technical Service.. The CSDM Service Delivery domain separates services based on who consumes them. Mobile Banking is consumed by retail customers, so it is modeled as a Business Service. Database Administration is consumed by internal application teams, so it is modeled as a Technical Service. Keeping these categories distinct preserves accurate dependency mapping and service portfolio reporting across business-facing and IT-facing offerings.

Answer

Both are modeled as Technical Services, because CSDM classifies all services by the technology that delivers them.

Answer

Mobile Banking is modeled as a Technical Service, while Database Administration is modeled as a Business Service.

Answer

Both are modeled as Business Services, because CSDM treats every service consumed by a user group as a Business Service.

Question 13

A CMDB administrator needs to allow discovery sources to automatically create relationships between a server CI and its network adapter CI, but only when the network adapter's 'Installed on' relationship is explicitly provided by the discovery source. The administrator wants to enforce that a specific relationship type is used only for this class pair and that the relationship is not created if the parent CI is missing. Which feature in the CMDB Identification and Reconciliation Engine (IRE) should be configured to meet these requirements?

Accepted Answer

CMDB Relationship Rules. CMDB Relationship Rules are specifically designed to govern the creation of relationships during the identification and reconciliation process. They allow administrators to define which relationship types are permitted between certain CI class pairs and to enforce conditions such as requiring both parent and child CIs to be resolved before the relationship is created. This ensures that only valid relationships are added to the CMDB, preventing orphans and maintaining data integrity. The other options either focus on identification, monitoring, or class definition without controlling relationship creation logic.

Answer

CMDB CI Class Manager

Answer

CMDB Health Dashboard relationship KPIs

Answer

CMDB Identification and Reconciliation Engine (IRE) identification rules

Question 14

A CMDB administrator needs to ensure that all Configuration Items (CIs) of class 'Server' have a value in the 'Environment' field. The administrator wants to prevent CIs from being marked as 'Operational' if this field is empty. Which ServiceNow feature should be used to enforce this requirement?

Accepted Answer

CMDB Data Governance. CMDB Data Governance is the correct feature because it enables the creation of policies that enforce data completeness and can block CI operational status until requirements are met. Other options lack enforcement capabilities; they either monitor, manage lifecycle, or define schema. Thus, only Data Governance can satisfy the requirement to prevent operational status for non-compliant CIs.

Answer

CMDB CI Class Models

Answer

CMDB Health Dashboard

Answer

CMDB Data Manager

Question 15

A CSDM implementation team is defining the foundational elements of the framework. They need to identify which domain is responsible for representing the logical design of business applications and application services, including their relationships and dependencies. Which CSDM domain fulfills this purpose?

Accepted Answer

Design domain. The CSDM Design domain is dedicated to the logical design of services and applications. It includes entities such as business applications, application services, and their relationships, which are essential for understanding how services are structured and how they depend on one another. This domain provides the architectural blueprint that informs other domains, making it the correct choice for representing logical design.

Answer

Service Delivery domain

Answer

Service Consumption domain

Answer

Service Management domain