CIS-DF Governance — 40 Questions

Question 1

During an internal audit, an enterprise needs to prove that all changes to server ownership are tracked and verified. Which feature provides a historical log of attribute changes specifically for governance and auditing purposes?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

CI Class History. The CI Class History feature in ServiceNow CMDB records a historical log of changes to CI attributes, including server ownership, specifically for governance and auditing. It captures before-and-after values, the user who made the change, and the timestamp, providing a verifiable audit trail. This directly satisfies the requirement to prove that all changes to server ownership are tracked and verified.

Answer

CMDB Data Governance > Audit Trail

Answer

Data Certification Results

Answer

System Logs > Audit (sys_audit)

Question 2

An administrator needs to track adherence to CSDM data standards across business services. Which ServiceNow workspace or dashboard natively provides out-of-the-box visibility into CSDM compliance scores and orphaned relationships?

Accepted Answer

CSDM Data Foundations Dashboard. The CSDM Data Foundations Dashboard is the native ServiceNow dashboard that provides out-of-the-box visibility into CSDM compliance scores, orphaned relationships, and adherence to CSDM data standards across business services. It is purpose-built for tracking CSDM adoption and identifying gaps like missing relationships or non-compliant CI configurations. This dashboard directly addresses the administrator's need to monitor CSDM compliance.

Answer

Data Certification Dashboard

Answer

CMDB Health Dashboard

Answer

Service Portfolio Management Workspace

Question 3

A company implements a policy stating that any server CI not updated in over 90 days should be flagged as stale. Where are the thresholds for stale CIs configured in ServiceNow?

Accepted Answer

CMDB Health Dashboard > Settings > Metric Thresholds. CMDB Health metric thresholds — including the staleness threshold that flags CIs not updated within a defined window (e.g., 90 days) — are configured from the CMDB Health Dashboard under Settings > Metric Thresholds. This is where administrators define the pass/fail thresholds for each health metric (completeness, correctness, compliance, and relationship health), and staleness is evaluated as part of the correctness metric. The threshold value is stored against the metric definition, not in a system property or discovery property, which is why the health dashboard is the correct location.

Answer

Discovery Definition > Properties > Stale CIs

Answer

Data Governance > Thresholds

Answer

System Properties > UI Properties

Question 4

Which user role is typically granted to business users so they can participate in Data Certification campaigns by reviewing records assigned to them?

Accepted Answer

data_certification. The data_certification role is the standard ServiceNow role granted to business users so they can participate in Data Certification campaigns by reviewing and certifying records assigned to them. It provides the necessary access to certification tasks without granting broader CMDB administrative privileges. This is the role typically assigned to certifiers.

Answer

data_certification员 (data_certification)

Answer

itil

Answer

cmdb_read

Question 5

Which THREE components are required when setting up a Data Certification schedule in ServiceNow? (Choose three.)

Accepted Answer

Assigned Reviewer or group mapping. Data certification setup requires defining the audit filter criteria, the schedule/frequency, and the user assignment mechanism.

Answer

Automatic MID Server selection rule

Question 6

Which TWO user roles are typically associated with managing and reviewing CMDB Health and Governance dashboards? (Choose two.)

Accepted Answer

sn_cmdb_admin. Option D (sn_cmdb_admin) is correct because the CMDB Admin role is the primary administrative role responsible for configuring and maintaining CMDB Health and Governance dashboards, including the health metrics, KPIs, and governance rules that drive those dashboards. Option E (cmdb_health_dashboard_admin) is correct because it is a dedicated role specifically scoped to managing and reviewing the CMDB Health Dashboard, granting the necessary access to view and administer health-related dashboard content. The other options do not fit: A (itil) is a general ITIL process role for incident, problem, and change tasks, not CMDB health administration; B (survey_admin) manages survey definitions and responses; and C (approval_user) is used for approving records in approval workflows, none of which govern CMDB Health and Governance dashboards.

Answer

itil

Answer

survey_admin

Answer

approval_user

Question 7

An administrator needs to report on how many CIs were successfully certified during the latest Data Certification campaign. Where can this certification campaign result data be viewed?

Accepted Answer

Data Certification > Certification Results. Data Certification results and audit outcomes are stored within the Data Certification reporting tables and modules.

Answer

System Logs > Certification Trail

Answer

CMDB Health > Audit Reports

Answer

Configuration > Compliance Logs

Question 8

Which THREE methods can be used to resolve duplicate CIs identified by the CMDB Health Dashboard? (Choose three.)

Accepted Answer

Manually reviewing and deleting or retiring the redundant CI record. Option C is correct because manually reviewing the duplicate CIs surfaced by the CMDB Health Dashboard and then deleting or retiring the redundant record is a valid remediation path — retiring preserves the audit trail while removing the CI from active use, and deletion removes the offending record entirely. Option D is correct because the CI Merge tool (part of the CMDB CI Class Manager / duplicate remediation tooling) lets you merge two duplicate CIs into a single surviving record and automatically remap the relationships, tasks, and references from the losing record to the winner. Option E is correct because you can configure automated duplicate remediation rules that either auto-merge duplicates or generate remediation tasks for the appropriate CI owners, which is the scalable way to handle duplicates flagged by CMDB Health. Option A is not correct because restarting MID servers only affects discovery/collection processing and does not remediate duplicate CI records in the CMDB. Option B is not correct because inbound email actions govern how incoming email creates or updates records (e.g., incidents), not how duplicate CIs are resolved.

Answer

Restarting all running MID servers in the cluster

Answer

Modifying inbound email actions

Question 9

A company has strict compliance mandates requiring that any modification to a Business Service relationship must be authorized by the Service Owner. Which ServiceNow feature can be configured to audit and require approval for relationship changes in the CMDB?

Accepted Answer

CMDB Data Governance Relationship Policies. CMDB Data Governance Relationship Policies are purpose-built to enforce approval and audit requirements on CI relationship changes. They allow administrators to define policies that require approval before a relationship is created, updated, or deleted, and they log the change for audit purposes. This directly satisfies the compliance mandate that the Service Owner must authorize any modification to a Business Service relationship.

Answer

Data Certification schedules for relationships

Answer

Workflow editor on the task table

Answer

Service Level Agreements (SLAs) on the cmdb_rel_ci table

Question 10

An organization wants to configure CMDB health score targets (e.g., maintaining an overall score above 85%). Where are health score targets and thresholds managed?

Accepted Answer

CMDB Health Dashboard > Settings > Score Thresholds. CMDB Health score targets and thresholds are configured from the CMDB Health Dashboard under Settings > Score Thresholds. This is where administrators define target percentages (e.g., overall score above 85%) and the thresholds that determine pass/warn/fail states for each health metric. Other locations listed do not host CMDB Health scoring configuration.

Answer

Data Governance > Scorecards

Answer

System Properties > Performance Analytics

Answer

CI Class Manager > Scoring

Question 11

An enterprise wants to ensure that when a Data Certification campaign task is overdue, an escalation notification is automatically sent to the reviewer's manager. Where are task escalation rules or notifications typically configured for Data Certification?

Accepted Answer

System Notification > Notifications (targeting certification task tables). Data Certification campaign tasks are stored in tables such as cert_task and its extensions, and escalation notifications for overdue tasks are configured through the standard System Notification > Notifications module by creating a notification that targets those certification task tables. This leverages the platform's native notification engine, including conditions like 'task is overdue' and 'escalation' flags, to route messages to the reviewer's manager.

Answer

CI Class Manager > Notifications

Answer

Data Governance > Escalation Workflows

Answer

CMDB Health > Escalation Properties

Question 12

An organization requires that all database CIs have their assigned support group populated before being marked as operational, failing which a compliance task should be generated. Which feature should be configured to enforce this policy?

Accepted Answer

CMDB Audit Rules. Audit Results and CMDB Data Manager or CMDB Data Policies (Audit Rules/CMDB Audit) can evaluate compliance against defined criteria and generate tasks or surface them on the CMDB Health Dashboard under the Compliance metric.

Answer

Reconciliation Definition

Answer

CMDB Data Manager

Answer

Data Certification

Question 13

A ServiceNow implementation specialist is configuring Data Certification to ensure that application owners regularly review the accuracy of their business-critical applications. Where must the filter criteria be specified to determine which CIs are included in the certification schedule?

Accepted Answer

In the Certification Filter related list of the audit definition. Data Certification schedules utilize a filter condition or a related Audit Definition to dynamically select the target CIs based on specified criteria.

Answer

Inside the CI Class Manager under Governance settings

Answer

On the CMDB Health Dashboard compliance settings tab

Answer

In the CMDB Data Manager policy definition

Question 14

An administrator is setting up CMDB Data Manager policies to govern the lifecycle of server CIs. Which THREE lifecycle stages are natively supported by CMDB Data Manager out of the box? (Choose three.)

Accepted Answer

Attestation. CMDB Data Manager natively supports three lifecycle stages out of the box: Attestation (A), Archive (B), and Retire (D). Attestation (A) is correct because CMDB Data Manager policies can require CI owners to periodically certify that their CIs are still accurate and valid, triggering attestation tasks. Archive (B) is correct because Data Manager can move stale or inactive CIs into an archived state to reduce active CMDB clutter while preserving records. Retire (D) is correct because Data Manager supports retiring CIs that are no longer in use, marking them as retired rather than deleting them outright. Discovery (C) is not a Data Manager lifecycle stage; it is the process (via Discovery/Service Graph Connectors) that populates and updates CIs. Provision (E) is not a Data Manager lifecycle stage either; provisioning is an operational activity typically handled by orchestration or request workflows, not by CMDB Data Manager policies.

Answer

Discovery

Answer

Provision

Question 15

Which TWO of the following metrics are included in the standard out-of-the-box CMDB Health Dashboard? (Choose two.)

Accepted Answer

Freshness. The CMDB Health Dashboard in ServiceNow ships with three standard out-of-the-box health metrics: Completeness, Correctness, and Compliance, along with the related metric of Freshness, which tracks how recently CIs have been updated or discovered. Option A (Freshness) is correct because the dashboard includes a Freshness KPI that measures whether CI records have been updated within expected timeframes, flagging stale CIs. Option B (Completeness) is correct because Completeness is one of the core built-in CMDB Health KPIs, evaluating whether required CI attributes and related records are populated. Options C (Performance), D (Availability), and E (Security) are not part of the standard CMDB Health Dashboard; those are operational or security metrics tracked by other tools (e.g., monitoring or security systems), not by the CMDB Health KPIs.

Answer

Performance

Answer

Availability

Answer

Security

Question 16

A global financial services company runs its CMDB on ServiceNow. The governance board has mandated that any change to the 'Environment' attribute on a Business Application CI classified as 'Mission Critical' must be reviewed and approved by the application owner before the change is committed. The Change Management process already uses standard change models, but the CMDB team wants to enforce this control directly within the CMDB itself, independent of any change request. Which ServiceNow CMDB governance feature should the implementation specialist configure to meet this requirement?

Accepted Answer

CMDB Governance attestation with a custom approval workflow triggered on CI update. The governance board requires that a specific attribute change on high-criticality CIs be reviewed and approved by the application owner before taking effect, independent of Change Management. CMDB Governance attestation is designed to enforce exactly this kind of pre-commit review and approval on CI records or attributes. Configuring an attestation policy scoped to the Environment attribute on Mission Critical Business Application CIs, with an approval workflow, meets the control without relying on external processes.

Answer

CMDB CI Class Manager attribute-level write ACL restricted to the application owner

Answer

CMDB Data Manager lifecycle policy

Answer

CMDB Health completeness rule on the Environment attribute

Question 17

A financial services company has a strict requirement that any change to a Configuration Item (CI) that is classified as 'High Business Impact' must be approved by the Data Owner. Which ServiceNow capability should be configured to meet this requirement?

Accepted Answer

CMDB Data Governance. CMDB Data Governance is the correct answer because it allows the creation of policies that enforce approval workflows based on CI attributes. Other options do not provide the necessary workflow enforcement. By configuring a governance policy, the company can ensure that changes to high-impact CIs require Data Owner approval.

Answer

CMDB Health Dashboard

Answer

CMDB CI Class Models

Answer

CMDB Data Manager

Question 18

A CMDB administrator needs to ensure that all CIs of class 'Application' have a valid 'Business Owner' assigned. The administrator wants to create a policy that checks this and, if violated, assigns a remediation task to the CIO. Which ServiceNow feature should be used?

Accepted Answer

CMDB Data Governance. CMDB Data Governance is the correct feature because it enables policy creation that checks for required fields and generates remediation tasks assigned to designated users. Other options lack the ability to create and assign tasks based on policy violations.

Answer

CMDB CI Class Models

Answer

CMDB Health Dashboard

Answer

CMDB Data Manager

Question 19

A team wants to exclude test and lab servers from being evaluated by strict production CMDB Health completeness rules. What is the best practice method to handle this in ServiceNow?

Accepted Answer

Configure CMDB Health Inclusion Rules. The best practice to exclude test and lab servers from strict production CMDB Health completeness rules is to configure CMDB Health Inclusion Rules. These rules allow administrators to define conditions that determine which CIs are included in health evaluations, so test servers can be filtered out based on attributes like environment or CI class. This avoids modifying global settings or deleting CIs.

Answer

Modify the baseline system properties to ignore completeness globally

Answer

Delete the test server CIs from the CMDB

Answer

Turn off Discovery for the test network

Question 20

An organization wants to configure CMDB Data Governance remediation tasks so that when a completeness policy fails for a high-priority server, a task is automatically assigned to the data owner. Where are these remediation workflows and task generation parameters configured?

Accepted Answer

CMDB Data Governance > Policies. CMDB Data Governance > Policies is where administrators define the health policies (completeness, correctness, compliance, duplicates) and configure the remediation workflow, task assignment rules, and task generation parameters such as the assignee (data owner), priority, and due date. The policy record itself contains the 'Remediation' related list and task generation settings that drive automatic task creation when a high-priority server fails the completeness check.

Answer

CMDB Health > Dashboard Settings

Answer

Data Certification > Definitions

Answer

System Policy > Rules > Data Policy