CIS-DF Governance Practice Test 4 — 15 Questions

Question 1

A company implements a policy where department heads must review their server assets every six months. Which module supports scheduling this periodic verification campaign?

Accepted Answer

Data Certification > Certification Schedules. Data Certification > Certification Schedules is the ServiceNow module that lets administrators define recurring certification campaigns, including the frequency (e.g., every six months), the CI scope, and the reviewers (department heads). When the schedule fires, certification tasks are generated and assigned to the designated reviewers for attestation.

Answer

Service Portfolio > Reviews

Answer

Governance, Risk, and Compliance > Periodic Audits

Answer

CMDB Health > Review Schedules

Question 2

An enterprise requires that all newly discovered servers must have a valid cost center before being classified as operational. How can this requirement be automated without writing custom scripts?

Accepted Answer

CMDB Data Governance Completeness Policy. The CMDB Data Governance Completeness Policy is the correct answer because it allows administrators to define policies that enforce data completeness requirements — such as requiring a valid cost center — on newly discovered CIs before they can be classified as operational. These policies are configured through the CMDB Data Governance module without writing custom scripts, and they can block or flag CIs that fail the completeness check.

Answer

Asset management depreciation rule

Answer

Discovery cost center transform script

Answer

CI Class Manager attribute mandatory toggle

Question 3

Which THREE actions occur when a Data Certification task is assigned to a CI owner? (Choose three.)

Accepted Answer

The reviewer can update incorrect attribute values directly from the task interface. Option B is correct because the Data Certification task interface lets the assigned CI owner (reviewer) correct inaccurate attribute values directly on the CI record while performing the certification. Option D is correct because the reviewer must submit a certification response (for example, certified or not certified), and that submission completes the task. Option E is correct because the core purpose of assigning a Data Certification task to a CI owner is to have that reviewer verify whether the CI's data is accurate and up to date. Option A is incorrect because certification does not automatically retire a CI; retirement is a separate lifecycle action. Option C is incorrect because Data Certification does not automatically generate a high-priority incident for the service desk.

Answer

The CI is automatically retired from the database immediately

Answer

A high-priority incident is automatically created for the IT service desk

Question 4

Which TWO core benefits does the CSDM Data Foundations Dashboard provide to an organization? (Choose two.)

Accepted Answer

Identification of orphaned relationships and missing foundational CIs. Option B is correct because the CSDM Data Foundations Dashboard surfaces data-quality gaps in the CMDB, specifically orphaned relationships (CIs whose relationships point to missing or decommissioned records) and missing foundational CIs that the CSDM framework requires as prerequisites for higher-level modeling. Option C is correct because the dashboard reports on CSDM compliance and shows which maturity stages (e.g., Foundation, Crawl, Walk, Run, Fly) the organization has achieved, letting teams track adoption progress against the CSDM framework. The remaining options do not belong: A (firewall security policy control) is a network security management function, D (automated network switch configuration backups) is a network configuration/backup tool capability, and E (real-time patch management compliance scoring) is a vulnerability/patch management function — none of these are provided by the CSDM Data Foundations Dashboard, which is focused on CMDB data quality and CSDM adoption.

Answer

Direct control over firewall security policies

Answer

Automated network switch configuration backups

Answer

Real-time patch management compliance scoring

Question 5

Which TWO configurations can be adjusted within CMDB Health Dashboard metric settings? (Choose two.)

Accepted Answer

Adjusting metric weightings to influence overall health scoring. Option A is correct because the CMDB Health Dashboard metric settings allow administrators to adjust metric weightings, which determine how much each health metric (such as completeness, correctness, or compliance) contributes to the overall CMDB health score. Option C is correct because these settings also let you enable or disable individual metric evaluations, for example toggling the Stale CIs metric on or off, so you can control which checks run and affect the dashboard results. Options B, D, and E are not part of CMDB Health Dashboard metric configuration: SMTP relay settings belong to email/notification configuration, firewall zone routing rules are network security settings, and CPU core clock speeds are hardware/firmware parameters, none of which are adjustable within the CMDB Health metric settings.

Answer

Configuring SMTP email server relay settings

Answer

Defining firewall zone routing rules

Answer

Modifying underlying hardware CPU core clock speeds

Question 6

When setting up CMDB Data Governance, which THREE elements must be defined for a custom data policy or rule? (Choose three.)

Accepted Answer

Evaluation Criteria (the condition or completeness check). In ServiceNow CMDB Data Governance, a custom data policy or rule requires three core elements: the Target CI Class (option E, e.g., cmdb_ci_appl), which scopes the rule to the specific class of CIs it governs; the Evaluation Criteria (option A), which defines the condition or completeness check that determines whether a CI passes or fails the policy; and the Remediation Configuration (option D), which specifies the task creation and assignment rules that fire when a CI violates the policy. These three together form the complete policy definition — what to check, against which CIs, and what to do when the check fails. Option B (MID Server IP address binding range) is unrelated, as MID Server binding is a discovery/connectivity concern, not a data governance policy element. Option C (SLA response time threshold for incident escalation) belongs to SLA and incident management configuration, not CMDB data governance.

Answer

MID Server IP address binding range

Answer

Service-Level Agreement response time threshold for incident escalation

Question 7

What is the primary role of a 'Data Owner' in the context of ServiceNow CMDB governance?

Accepted Answer

Accountability for the accuracy, completeness, and quality of data within their assigned CI domain. A Data Owner in ServiceNow CMDB governance is accountable for the accuracy, completeness, and quality of data within their assigned CI domain. They are responsible for validating CIs, approving remediation, and ensuring data meets governance standards. This role is central to the CMDB data governance framework.

Answer

Approving financial balance sheets for the enterprise

Answer

Configuring network switch routing tables

Answer

Writing custom Java code for MID server extensions

Question 8

An administrator needs to ensure that historical changes to data governance remediation tasks are easily tracked. Which platform feature automatically tracks changes to task work notes, state transitions, and assignments?

Accepted Answer

Task Activity Stream and Audit Log. The Task Activity Stream and Audit Log is the platform feature that automatically records field-level changes, work note additions, state transitions, and assignment changes on task records, including governance remediation tasks. It provides a chronological, filterable history without any custom configuration. This is the native mechanism for tracking who changed what and when on a task.

Answer

CMDB Health Audit Table

Answer

Discovery History Table

Answer

Data Certification Log

Question 9

An auditor requires proof that all discovered Linux servers have a validated business justification attribute. The team uses CMDB Data Governance to enforce this. How can the administrator prove to the auditor that the policy is actively running and enforcing this rule?

Accepted Answer

Show the CMDB Data Governance Policy execution history and generated remediation task metrics. CMDB Data Governance policies maintain execution history and generate remediation task metrics that serve as auditable evidence. By showing the policy's execution history (when it ran, what it evaluated) and the generated remediation tasks (with timestamps, assignees, and statuses), the administrator can prove the policy is actively running and enforcing the business justification rule. This is the direct, purpose-built evidence an auditor needs.

Answer

Provide a screenshot of the Discovery Schedule configuration

Answer

Export the entire sys_audit table to CSV

Answer

Display the baseline CI Class Manager JSON payload definition

Question 10

A company notices that hundreds of stale server records are polluting the CMDB, negatively affecting health scores. Rather than deleting them manually, what is the best practice governance workflow to handle stale CIs?

Accepted Answer

Initiate a review campaign or automated retirement workflow via CMDB health remediation. The best-practice governance workflow for stale CIs is to initiate a review campaign or automated retirement workflow through CMDB Health remediation, which routes stale CIs to data owners for validation before retirement. This preserves auditability, respects data ownership, and prevents accidental deletion of CIs that may still be relevant. It also feeds back into the health score legitimately rather than masking the problem.

Answer

Delete all records where sys_updated_on is older than 90 days using a background script

Answer

Run Discovery against the entire IP range daily to force updates

Answer

Turn off the Stale CI metric so the score improves without action

Question 11

An administrator configures a CMDB Data Governance policy to check for missing support groups on business applications. When the policy runs, it creates remediation tasks. How can the administrator ensure these tasks are automatically closed when the data is corrected by a user?

Accepted Answer

Automatic re-evaluation and closure upon policy compliance restoration. CMDB Data Governance policies in ServiceNow create remediation tasks when policy violations are detected. When the underlying data is corrected and the policy is re-evaluated, the system can automatically mark the remediation task as closed because the compliance condition is now satisfied. This is the built-in lifecycle behavior of data governance remediation tasks, ensuring tasks do not remain open after the issue is resolved.

Answer

Requiring the user to manually email the data governance team

Answer

Deleting the remediation task manually from the task list

Answer

Writing a custom business rule on the incident table

Question 12

Which ServiceNow application houses the CMDB Health Dashboard, Data Certification, and CMDB Data Governance features?

Accepted Answer

Configuration (CMDB). The CMDB Health Dashboard, Data Certification, and CMDB Data Governance features all live within the Configuration (CMDB) application in ServiceNow. This application is the central workspace for managing configuration items, health metrics, and governance policies.

Answer

HR Service Delivery

Answer

Project Portfolio Management

Answer

Customer Service Management

Question 13

An enterprise is audited for CSDM compliance. The CSDM Data Foundations Dashboard indicates that application services are not properly connected to technical services. What is the governance impact of this structural gap?

Accepted Answer

Inability to accurately perform impact analysis during outages and incorrect service portfolio visibility. In CSDM, application services must be connected to technical services to provide a complete service model. If this linkage is missing, the organization cannot accurately trace the impact of an outage from the business application down to the underlying technical components, and service portfolio visibility becomes fragmented. This directly undermines impact analysis and service health reporting, which are core governance outcomes of CSDM.

Answer

Hardware assets will automatically be marked as deprecated

Answer

Database replication lag will increase across MID servers

Answer

Discovery will fail to run network scans on IP subnets

Question 14

A governance team wants to ensure that CIs without valid IP addresses or MAC addresses are flagged in network-connected classes. Where can this specific validation rule be configured?

Accepted Answer

CMDB Data Governance > Policies. CMDB Data Governance > Policies allows administrators to define validation rules that flag CIs with missing or invalid attributes, such as IP addresses or MAC addresses for network-connected classes. These policies can be configured to run on-demand or on schedule, providing governance over data quality.

Answer

Discovery Definition > Behaviors

Answer

CI Class Manager > Identifiers

Answer

System Properties > Network Settings

Question 15

Which TWO benefits are gained by scheduling regular Data Certification campaigns in a mature CMDB? (Choose two.)

Accepted Answer

Maintaining audit readiness and proving data governance compliance. Option B is correct because scheduling regular Data Certification campaigns creates a documented, repeatable record of who attested to which CIs and when, which is exactly the evidence auditors and governance frameworks (e.g., COBIT, ISO 20000, SOX controls) require to demonstrate data governance compliance and audit readiness. Option E is correct because a Data Certification campaign in ServiceNow CMDB assigns certification tasks to CI owners, forcing those owners to review and attest to the accuracy of the records they are responsible for, which keeps the CMDB trustworthy over time. Option A is wrong because the Identification and Reconciliation Engine (IRE) is the service that detects and reconciles duplicate or conflicting CI data from discovery and other sources; certification validates existing records and does not replace IRE's deduplication and reconciliation functions. Option C is wrong because generating physical router configurations is a network automation/tooling task, not a CMDB data governance activity. Option D is wrong because resolving P1 incidents is an incident management process performed by support teams; certification campaigns validate data accuracy and do not automatically resolve incidents.

Answer

Replacing the need for the Identification and Reconciliation Engine (IRE)

Answer

Automatically generating physical network router configurations

Answer

Automatically resolving all IT service desk P1 incidents