CIS-DF Governance — Timed 15 Questions

Question 1

During an internal audit, an enterprise needs to prove that all changes to server ownership are tracked and verified. Which feature provides a historical log of attribute changes specifically for governance and auditing purposes?

15 minute time limit — choose an answer to begin.

Accepted Answer

CI Class History. The CI Class History feature in ServiceNow CMDB records a historical log of changes to CI attributes, including server ownership, specifically for governance and auditing. It captures before-and-after values, the user who made the change, and the timestamp, providing a verifiable audit trail. This directly satisfies the requirement to prove that all changes to server ownership are tracked and verified.

Answer

CMDB Data Governance > Audit Trail

Answer

Data Certification Results

Answer

System Logs > Audit (sys_audit)

Question 2

An administrator needs to track adherence to CSDM data standards across business services. Which ServiceNow workspace or dashboard natively provides out-of-the-box visibility into CSDM compliance scores and orphaned relationships?

Accepted Answer

CSDM Data Foundations Dashboard. The CSDM Data Foundations Dashboard is the native ServiceNow dashboard that provides out-of-the-box visibility into CSDM compliance scores, orphaned relationships, and adherence to CSDM data standards across business services. It is purpose-built for tracking CSDM adoption and identifying gaps like missing relationships or non-compliant CI configurations. This dashboard directly addresses the administrator's need to monitor CSDM compliance.

Answer

Data Certification Dashboard

Answer

CMDB Health Dashboard

Answer

Service Portfolio Management Workspace

Question 3

A company implements a policy stating that any server CI not updated in over 90 days should be flagged as stale. Where are the thresholds for stale CIs configured in ServiceNow?

Accepted Answer

CMDB Health Dashboard > Settings > Metric Thresholds. CMDB Health metric thresholds — including the staleness threshold that flags CIs not updated within a defined window (e.g., 90 days) — are configured from the CMDB Health Dashboard under Settings > Metric Thresholds. This is where administrators define the pass/fail thresholds for each health metric (completeness, correctness, compliance, and relationship health), and staleness is evaluated as part of the correctness metric. The threshold value is stored against the metric definition, not in a system property or discovery property, which is why the health dashboard is the correct location.

Answer

Discovery Definition > Properties > Stale CIs

Answer

Data Governance > Thresholds

Answer

System Properties > UI Properties

Question 4

Which user role is typically granted to business users so they can participate in Data Certification campaigns by reviewing records assigned to them?

Accepted Answer

data_certification. The data_certification role is the standard ServiceNow role granted to business users so they can participate in Data Certification campaigns by reviewing and certifying records assigned to them. It provides the necessary access to certification tasks without granting broader CMDB administrative privileges. This is the role typically assigned to certifiers.

Answer

data_certification员 (data_certification)

Answer

itil

Answer

cmdb_read

Question 5

Which THREE components are required when setting up a Data Certification schedule in ServiceNow? (Choose three.)

Accepted Answer

Assigned Reviewer or group mapping. Data certification setup requires defining the audit filter criteria, the schedule/frequency, and the user assignment mechanism.

Answer

Automatic MID Server selection rule

Question 6

Which TWO user roles are typically associated with managing and reviewing CMDB Health and Governance dashboards? (Choose two.)

Accepted Answer

sn_cmdb_admin. Option D (sn_cmdb_admin) is correct because the CMDB Admin role is the primary administrative role responsible for configuring and maintaining CMDB Health and Governance dashboards, including the health metrics, KPIs, and governance rules that drive those dashboards. Option E (cmdb_health_dashboard_admin) is correct because it is a dedicated role specifically scoped to managing and reviewing the CMDB Health Dashboard, granting the necessary access to view and administer health-related dashboard content. The other options do not fit: A (itil) is a general ITIL process role for incident, problem, and change tasks, not CMDB health administration; B (survey_admin) manages survey definitions and responses; and C (approval_user) is used for approving records in approval workflows, none of which govern CMDB Health and Governance dashboards.

Answer

itil

Answer

survey_admin

Answer

approval_user

Question 7

An administrator needs to report on how many CIs were successfully certified during the latest Data Certification campaign. Where can this certification campaign result data be viewed?

Accepted Answer

Data Certification > Certification Results. Data Certification results and audit outcomes are stored within the Data Certification reporting tables and modules.

Answer

System Logs > Certification Trail

Answer

CMDB Health > Audit Reports

Answer

Configuration > Compliance Logs

Question 8

Which THREE methods can be used to resolve duplicate CIs identified by the CMDB Health Dashboard? (Choose three.)

Accepted Answer

Manually reviewing and deleting or retiring the redundant CI record. Option C is correct because manually reviewing the duplicate CIs surfaced by the CMDB Health Dashboard and then deleting or retiring the redundant record is a valid remediation path — retiring preserves the audit trail while removing the CI from active use, and deletion removes the offending record entirely. Option D is correct because the CI Merge tool (part of the CMDB CI Class Manager / duplicate remediation tooling) lets you merge two duplicate CIs into a single surviving record and automatically remap the relationships, tasks, and references from the losing record to the winner. Option E is correct because you can configure automated duplicate remediation rules that either auto-merge duplicates or generate remediation tasks for the appropriate CI owners, which is the scalable way to handle duplicates flagged by CMDB Health. Option A is not correct because restarting MID servers only affects discovery/collection processing and does not remediate duplicate CI records in the CMDB. Option B is not correct because inbound email actions govern how incoming email creates or updates records (e.g., incidents), not how duplicate CIs are resolved.

Answer

Restarting all running MID servers in the cluster

Answer

Modifying inbound email actions

Question 9

A company has strict compliance mandates requiring that any modification to a Business Service relationship must be authorized by the Service Owner. Which ServiceNow feature can be configured to audit and require approval for relationship changes in the CMDB?

Accepted Answer

CMDB Data Governance Relationship Policies. CMDB Data Governance Relationship Policies are purpose-built to enforce approval and audit requirements on CI relationship changes. They allow administrators to define policies that require approval before a relationship is created, updated, or deleted, and they log the change for audit purposes. This directly satisfies the compliance mandate that the Service Owner must authorize any modification to a Business Service relationship.

Answer

Data Certification schedules for relationships

Answer

Workflow editor on the task table

Answer

Service Level Agreements (SLAs) on the cmdb_rel_ci table

Question 10

An organization wants to configure CMDB health score targets (e.g., maintaining an overall score above 85%). Where are health score targets and thresholds managed?

Accepted Answer

CMDB Health Dashboard > Settings > Score Thresholds. CMDB Health score targets and thresholds are configured from the CMDB Health Dashboard under Settings > Score Thresholds. This is where administrators define target percentages (e.g., overall score above 85%) and the thresholds that determine pass/warn/fail states for each health metric. Other locations listed do not host CMDB Health scoring configuration.

Answer

Data Governance > Scorecards

Answer

System Properties > Performance Analytics

Answer

CI Class Manager > Scoring

Question 11

An enterprise wants to ensure that when a Data Certification campaign task is overdue, an escalation notification is automatically sent to the reviewer's manager. Where are task escalation rules or notifications typically configured for Data Certification?

Accepted Answer

System Notification > Notifications (targeting certification task tables). Data Certification campaign tasks are stored in tables such as cert_task and its extensions, and escalation notifications for overdue tasks are configured through the standard System Notification > Notifications module by creating a notification that targets those certification task tables. This leverages the platform's native notification engine, including conditions like 'task is overdue' and 'escalation' flags, to route messages to the reviewer's manager.

Answer

CI Class Manager > Notifications

Answer

Data Governance > Escalation Workflows

Answer

CMDB Health > Escalation Properties

Question 12

An organization requires that all database CIs have their assigned support group populated before being marked as operational, failing which a compliance task should be generated. Which feature should be configured to enforce this policy?

Accepted Answer

CMDB Audit Rules. Audit Results and CMDB Data Manager or CMDB Data Policies (Audit Rules/CMDB Audit) can evaluate compliance against defined criteria and generate tasks or surface them on the CMDB Health Dashboard under the Compliance metric.

Answer

Reconciliation Definition

Answer

CMDB Data Manager

Answer

Data Certification

Question 13

A ServiceNow implementation specialist is configuring Data Certification to ensure that application owners regularly review the accuracy of their business-critical applications. Where must the filter criteria be specified to determine which CIs are included in the certification schedule?

Accepted Answer

In the Certification Filter related list of the audit definition. Data Certification schedules utilize a filter condition or a related Audit Definition to dynamically select the target CIs based on specified criteria.

Answer

Inside the CI Class Manager under Governance settings

Answer

On the CMDB Health Dashboard compliance settings tab

Answer

In the CMDB Data Manager policy definition

Question 14

An administrator is setting up CMDB Data Manager policies to govern the lifecycle of server CIs. Which THREE lifecycle stages are natively supported by CMDB Data Manager out of the box? (Choose three.)

Accepted Answer

Attestation. CMDB Data Manager natively supports three lifecycle stages out of the box: Attestation (A), Archive (B), and Retire (D). Attestation (A) is correct because CMDB Data Manager policies can require CI owners to periodically certify that their CIs are still accurate and valid, triggering attestation tasks. Archive (B) is correct because Data Manager can move stale or inactive CIs into an archived state to reduce active CMDB clutter while preserving records. Retire (D) is correct because Data Manager supports retiring CIs that are no longer in use, marking them as retired rather than deleting them outright. Discovery (C) is not a Data Manager lifecycle stage; it is the process (via Discovery/Service Graph Connectors) that populates and updates CIs. Provision (E) is not a Data Manager lifecycle stage either; provisioning is an operational activity typically handled by orchestration or request workflows, not by CMDB Data Manager policies.

Answer

Discovery

Answer

Provision

Question 15

Which TWO of the following metrics are included in the standard out-of-the-box CMDB Health Dashboard? (Choose two.)

Accepted Answer

Freshness. The CMDB Health Dashboard in ServiceNow ships with three standard out-of-the-box health metrics: Completeness, Correctness, and Compliance, along with the related metric of Freshness, which tracks how recently CIs have been updated or discovered. Option A (Freshness) is correct because the dashboard includes a Freshness KPI that measures whether CI records have been updated within expected timeframes, flagging stale CIs. Option B (Completeness) is correct because Completeness is one of the core built-in CMDB Health KPIs, evaluating whether required CI attributes and related records are populated. Options C (Performance), D (Availability), and E (Security) are not part of the standard CMDB Health Dashboard; those are operational or security metrics tracked by other tools (e.g., monitoring or security systems), not by the CMDB Health KPIs.

Answer

Performance

Answer

Availability

Answer

Security