CIS-DF Governance Practice Test 2 — 15 Questions

Question 1

A global financial services company runs its CMDB on ServiceNow. The governance board has mandated that any change to the 'Environment' attribute on a Business Application CI classified as 'Mission Critical' must be reviewed and approved by the application owner before the change is committed. The Change Management process already uses standard change models, but the CMDB team wants to enforce this control directly within the CMDB itself, independent of any change request. Which ServiceNow CMDB governance feature should the implementation specialist configure to meet this requirement?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

CMDB Governance attestation with a custom approval workflow triggered on CI update. The governance board requires that a specific attribute change on high-criticality CIs be reviewed and approved by the application owner before taking effect, independent of Change Management. CMDB Governance attestation is designed to enforce exactly this kind of pre-commit review and approval on CI records or attributes. Configuring an attestation policy scoped to the Environment attribute on Mission Critical Business Application CIs, with an approval workflow, meets the control without relying on external processes.

Answer

CMDB CI Class Manager attribute-level write ACL restricted to the application owner

Answer

CMDB Data Manager lifecycle policy

Answer

CMDB Health completeness rule on the Environment attribute

Question 2

A financial services company has a strict requirement that any change to a Configuration Item (CI) that is classified as 'High Business Impact' must be approved by the Data Owner. Which ServiceNow capability should be configured to meet this requirement?

Accepted Answer

CMDB Data Governance. CMDB Data Governance is the correct answer because it allows the creation of policies that enforce approval workflows based on CI attributes. Other options do not provide the necessary workflow enforcement. By configuring a governance policy, the company can ensure that changes to high-impact CIs require Data Owner approval.

Answer

CMDB Health Dashboard

Answer

CMDB CI Class Models

Answer

CMDB Data Manager

Question 3

A CMDB administrator needs to ensure that all CIs of class 'Application' have a valid 'Business Owner' assigned. The administrator wants to create a policy that checks this and, if violated, assigns a remediation task to the CIO. Which ServiceNow feature should be used?

Accepted Answer

CMDB Data Governance. CMDB Data Governance is the correct feature because it enables policy creation that checks for required fields and generates remediation tasks assigned to designated users. Other options lack the ability to create and assign tasks based on policy violations.

Answer

CMDB CI Class Models

Answer

CMDB Health Dashboard

Answer

CMDB Data Manager

Question 4

A team wants to exclude test and lab servers from being evaluated by strict production CMDB Health completeness rules. What is the best practice method to handle this in ServiceNow?

Accepted Answer

Configure CMDB Health Inclusion Rules. The best practice to exclude test and lab servers from strict production CMDB Health completeness rules is to configure CMDB Health Inclusion Rules. These rules allow administrators to define conditions that determine which CIs are included in health evaluations, so test servers can be filtered out based on attributes like environment or CI class. This avoids modifying global settings or deleting CIs.

Answer

Modify the baseline system properties to ignore completeness globally

Answer

Delete the test server CIs from the CMDB

Answer

Turn off Discovery for the test network

Question 5

An organization wants to configure CMDB Data Governance remediation tasks so that when a completeness policy fails for a high-priority server, a task is automatically assigned to the data owner. Where are these remediation workflows and task generation parameters configured?

Accepted Answer

CMDB Data Governance > Policies. CMDB Data Governance > Policies is where administrators define the health policies (completeness, correctness, compliance, duplicates) and configure the remediation workflow, task assignment rules, and task generation parameters such as the assignee (data owner), priority, and due date. The policy record itself contains the 'Remediation' related list and task generation settings that drive automatic task creation when a high-priority server fails the completeness check.

Answer

CMDB Health > Dashboard Settings

Answer

Data Certification > Definitions

Answer

System Policy > Rules > Data Policy

Question 6

A CMDB manager wants to review the overall health of the CMDB across Completeness, Correctness, and Compliance. Which ServiceNow module should they navigate to first?

Accepted Answer

Configuration > CMDB Health > Dashboard. The CMDB Health Dashboard is the dedicated ServiceNow module that aggregates the three health pillars — Completeness, Correctness, and Compliance — into a single view with scores, KPIs, and drill-downs. It is accessed via Configuration > CMDB Health > Dashboard, which is the standard navigation path in the CMDB Health plugin (com.snc.cmdb.health). This module is purpose-built for the exact review the manager needs.

Answer

Configuration > Data Governance > Dashboard

Answer

System Definition > CMDB Dashboard

Answer

Reports > View > CMDB Health

Question 7

An administrator needs to configure a Data Certification schedule to ensure that Application owners review their respective records quarterly. Which module is used to set up these recurring certification campaigns?

Accepted Answer

Data Certification > Certification Definitions. Data Certification campaigns are configured through the Data Certification module, where administrators create Certification Definitions that specify the target table, filter conditions, certification schedule (e.g., quarterly), and the certifier assignment (such as CI owner or application owner). The Certification Definition is the reusable template that drives each recurring campaign, so it is the correct place to set up quarterly reviews of Application owner records.

Answer

Configuration > Governance > Audits

Answer

CMDB Health > Certification Rules

Answer

Service Level Management > Certification

Question 8

Which CMDB Health metric category evaluates whether CIs have mandatory fields populated, such as Assigned to, Managed by, and Support Group?

Accepted Answer

Completeness. Completeness is the CMDB Health metric category that specifically checks whether mandatory fields on a CI are populated — such as Assigned to, Managed by, and Support Group. It measures the presence of required attribute values rather than their accuracy or timeliness. This is distinct from Correctness (which validates values against expected patterns) and Freshness (which checks update recency).

Answer

Freshness

Answer

Correctness

Answer

Compliance

Question 9

A company requires that all production Linux servers must have an assigned owner and a valid support group before being eligible for operational use. Which CMDB governance feature can automatically evaluate these specific data requirements and fail or flag non-compliant CI inserts?

Accepted Answer

CMDB Data Governance. CMDB Data Governance in ServiceNow allows administrators to define data policies that enforce specific requirements on CI records. These policies can include mandatory fields (like owner and support group) and can be configured to run on insert or update, automatically failing or flagging non-compliant CIs. This directly addresses the need to evaluate and enforce data requirements before operational use.

Answer

Discovery Schedule

Answer

Data Certification

Answer

CI Class Manager

Question 10

When setting up CMDB data ownership, which field on a CI record is typically used to designate the individual accountable for the physical or logical asset's data quality?

Accepted Answer

Managed by. The 'Managed by' field on a CI record designates the individual accountable for the physical or logical asset's data quality. It is used to assign ownership and responsibility for maintaining accurate information about the CI. This field is typically populated with a user reference and is distinct from fields like 'Caller ID' or 'Reported by', which are used in incident or request contexts.

Answer

Caller ID

Answer

Reported by

Answer

Opened by

Question 11

An enterprise wants to ensure that data stewards are automatically notified when duplicate CIs are detected by the Identification and Reconciliation Engine (IRE). How can this governance requirement be streamlined?

Accepted Answer

Configure CMDB Duplicate Remediation rules. Configuring CMDB Duplicate Remediation rules allows the system to automatically detect duplicate CIs and notify data stewards based on predefined conditions. These rules can trigger notifications, assign tasks, or even merge duplicates, streamlining governance. This approach leverages out-of-the-box functionality rather than custom scripting, ensuring maintainability and scalability.

Answer

Set up a scheduled data import transform map script

Answer

Modify the Identification Engine processor script directly

Answer

Write a custom Business Rule on the sys_object_source table

Question 12

An administrator is reviewing the Correctness score on the CMDB Health Dashboard and notices a low score caused by multiple CIs having no relationships to any business services. Which specific Correctness metric is flagging this issue?

Accepted Answer

Orphans. The Orphans metric under CMDB Health Correctness flags CIs that have no relationships to any business services or other CIs, indicating they are disconnected from the service model. A low Correctness score caused by CIs lacking business-service relationships is precisely what the Orphans KPI measures. This helps identify CIs that need to be related or retired.

Answer

Duplicate CIs

Answer

Unassigned CIs

Answer

Stale CIs

Question 13

Which role is typically required to manage and configure CMDB Data Governance policies and remediation definitions?

Accepted Answer

cmdb_datagovernance_admin. The cmdb_datagovernance_admin role is specifically designed to manage and configure CMDB Data Governance policies and remediation definitions. This role grants the necessary permissions to define governance rules, set up remediation workflows, and oversee data integrity within the CMDB. Unlike other roles, it is purpose-built for data governance tasks, ensuring that only authorized users can modify critical governance settings.

Answer

asset

Answer

itil

Answer

discovery_admin

Question 14

An organization notices that custom application CIs are failing compliance checks because the governance policy checks standard fields that do not apply to custom apps. How should an administrator resolve this while maintaining governance standards?

Accepted Answer

Create a class-specific governance policy targeting the custom application table. ServiceNow CMDB Data Governance policies are applied per CI class, so the correct fix is to create a class-specific governance policy that targets the custom application table (a child of cmdb_ci_appl) and defines only the fields relevant to that class. This preserves governance for standard CIs while allowing custom apps to be evaluated against appropriate rules. It maintains compliance standards rather than bypassing them.

Answer

Disable CMDB Data Governance globally

Answer

Add mandatory fields to the base configuration item table (cmdb_ci)

Answer

Ignore the failed tasks permanently

Question 15

An auditor requests evidence that all critical databases have an identified support group. Which built-in CMDB feature allows an administrator to quickly run an on-demand check for this specific completeness rule without waiting for scheduled dashboard refreshes?

Accepted Answer

Run Policy evaluation from CMDB Data Governance. The CMDB Data Governance module includes a Policy evaluation feature that allows administrators to run on-demand checks against defined policies, such as ensuring all critical databases have an identified support group. This bypasses the need to wait for scheduled dashboard refreshes, providing immediate compliance evidence.

Answer

Run a background script using GlideRecord

Answer

Export the cmdb_ci table to Excel and filter manually

Answer

Execute a Full Discovery Scan