CIS-DF Hard Questions — 25 Difficult Questions

Question 1

An administrator configures a CMDB Data Governance policy to check for missing support groups on business applications. When the policy runs, it creates remediation tasks. How can the administrator ensure these tasks are automatically closed when the data is corrected by a user?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Automatic re-evaluation and closure upon policy compliance restoration. CMDB Data Governance policies in ServiceNow create remediation tasks when policy violations are detected. When the underlying data is corrected and the policy is re-evaluated, the system can automatically mark the remediation task as closed because the compliance condition is now satisfied. This is the built-in lifecycle behavior of data governance remediation tasks, ensuring tasks do not remain open after the issue is resolved.

Answer

Requiring the user to manually email the data governance team

Answer

Deleting the remediation task manually from the task list

Answer

Writing a custom business rule on the incident table

Question 2

A company has implemented strict data governance where CIs that have not been discovered or updated in over 90 days are considered stale. Where should this threshold be configured in ServiceNow?

Accepted Answer

CMDB Health Dashboard Correctness settings. Stale CI thresholds are configured within the Correctness settings of the CMDB Dashboard / CI Class Manager audit rules.

Answer

CI Class Manager relationship rule definitions

Answer

Discovery Schedule properties

Answer

Data Archiving rule definitions

Question 3

Which THREE components are required when setting up a Data Certification schedule in ServiceNow? (Choose three.)

Accepted Answer

Assigned Reviewer or group mapping. Data certification setup requires defining the audit filter criteria, the schedule/frequency, and the user assignment mechanism.

Answer

Automatic MID Server selection rule

Question 4

When configuring Relationship Filters within Dependency Views, an administrator wants to ensure that only 'Runs on::Runs' and 'Hosted on::Hosts' relationships are rendered by default for all users. Where is this default view behavior configured?

Accepted Answer

System Properties prefixed with glide.ui.dependency_view. Default Relationship Filters for Dependency Views are controlled by system properties prefixed with glide.ui.dependency_view. These properties define which relationship types are rendered by default when users open a Dependency View, allowing administrators to set global defaults such as 'Runs on::Runs' and 'Hosted on::Hosts'.

Answer

CI Class Manager relationship definition tab

Answer

Service Mapping Properties table

Answer

CMDB Query Builder global settings

Question 5

An enterprise configuration manager needs to audit all manual relationship modifications made to production servers over the last 30 days to ensure compliance with automated discovery policies. Which native audit mechanism tracks this?

Accepted Answer

Audit history on the Configuration Item Relationship [cmdb_rel_ci] table. The Configuration Item Relationship [cmdb_rel_ci] table stores every parent-child relationship between CIs in the CMDB, and ServiceNow automatically maintains an audit history on this table. Any manual insert, update, or delete of a relationship record is captured with the user, timestamp, and old/new values. Auditing this table's history is therefore the native way to identify manual relationship modifications over a defined window such as 30 days.

Answer

CMDB Query Builder execution logs

Answer

Service Mapping traffic log table

Answer

Reconciliation Definition audit table

Question 6

Your organization implements a hybrid cloud strategy where an Application Service relies on both an on-premises Oracle database and an AWS RDS instance. How should both databases be linked to the Application Service in the CSDM framework?

Accepted Answer

Connect both database CIs directly to the Application Service using 'Depends on / Used by' relationships.. In the CSDM framework, an Application Service represents a logical grouping of application functionality that relies on underlying CIs. Both the on-premises Oracle database and the AWS RDS instance are separate database CIs that the Application Service depends on, regardless of their hosting location. The correct approach is to connect each database CI directly to the Application Service using the 'Depends on / Used by' relationship, which accurately models the dependency without merging distinct CIs or creating artificial hierarchies. This maintains data integrity and reflects the true operational dependency.

Answer

Merge the on-premises database and AWS RDS instance into a single physical CI record.

Answer

Link only the primary database to the Application Service and nest the secondary database inside the Business Application.

Answer

Create a separate Business Application for each database and link them together.

Question 7

A ServiceNow architect is designing a CMDB architecture where CIs from multiple disparate discovery tools need to be ingested. To prevent race conditions and conflicting updates between tools updating the same CIs simultaneously, what mechanism should be utilized?

Accepted Answer

The Identification and Reconciliation Engine (IRE) processing queue and source precedence rules. The Identification and Reconciliation Engine (IRE) processes incoming CI data through a queue and applies source precedence rules to resolve conflicts when multiple discovery sources update the same CI. This prevents race conditions by serializing updates and ensuring a deterministic winner based on configured precedence. It is the standard mechanism for multi-source CMDB ingestion.

Answer

Manual approval workflows for every inbound payload

Answer

Asynchronous business rules triggered on insert to pause payloads

Answer

Database locks enforced via Table Administration settings

Question 8

An administrator is configuring a Robust Transform Engine (RTE) integration to populate the CMDB from a third-party asset management system. Why is RTE recommended over a standard Transform Map for CMDB data loads?

Accepted Answer

RTE processes data through the Identification and Reconciliation Engine (IRE), preventing duplicates and enforcing data integrity.. RTE is recommended for CMDB loads because it routes incoming data through the Identification and Reconciliation Engine (IRE), which applies identification rules, reconciliation rules, and deduplication logic to ensure that only one authoritative CI record is created or updated. This prevents duplicate CIs and enforces data integrity across multiple data sources. A standard Transform Map writes directly to the target table without IRE, so it cannot guarantee deduplication or reconciliation.

Answer

RTE automatically translates foreign languages in source data payloads.

Answer

RTE eliminates the need for staging tables during data imports.

Answer

RTE bypasses all access control lists to accelerate import times.

Question 9

An organization wants to ensure that no duplicate CIs are ever inserted into the cmdb_ci table by API integrations or manual imports. Which ServiceNow engine natively enforces this governance rule?

Accepted Answer

Identification and Reconciliation Engine (IRE). The Identification and Reconciliation Engine (IRE) is a native ServiceNow engine that enforces data governance by identifying and reconciling duplicate CIs before they are inserted into the CMDB. It uses identification rules and reconciliation rules to ensure that only unique CIs are created, even from multiple sources.

Answer

Data Policy Enforcement Engine

Answer

CMDB Health Duplicate Engine

Answer

Transform Map Unique Key matching

Question 10

When configuring custom indicators in Dependency Views, an organization wants to display a warning badge on any server CI whose CPU utilization exceeds 90% based on recent Performance Analytics or metric data. Where are custom widget indicators and map decorators configured for Dependency Views?

Accepted Answer

Dependency View Indicators configuration. Dependency Views map indicators and status badges are configured via Dependency View Indicators [sys_dependency_indicator] or custom formatters.

Answer

CMDB Data Manager policy conditions

Answer

Service Mapping pattern extension script

Answer

CI Class Manager identifier rules

Question 11

Which THREE of the following maturity phases are recognized in the CSDM framework lifecycle?

Accepted Answer

Run. The CSDM (Common Service Data Model) framework lifecycle recognizes three maturity phases: Crawl (B), Walk (E), and Run (A). Crawl is the initial phase where organizations establish foundational data elements and basic relationships, Walk is the intermediate phase where the model is expanded and refined across domains, and Run is the mature phase where the CSDM is fully adopted, governed, and integrated into operational processes. These three phases describe progressive levels of data-model maturity and adoption, not project or delivery methodologies. Deploy (C) is not a CSDM maturity phase; it is a general ITIL/ITSM release or implementation activity. Sprint (D) is not a CSDM phase either; it is an Agile/Scrum time-boxed iteration term unrelated to the CSDM lifecycle.

Answer

Deploy

Answer

Sprint

Question 12

An administrator notices that a manual update made to a server's 'Asset tag' attribute by an IT agent is constantly overwritten during the nightly Discovery run, even though Discovery does not directly scan the asset tag. How is this behavior controlled and how should it be resolved?

Accepted Answer

Configure Data Source Precedence to give 'Manual' or a higher-ranking source precedence over 'ServiceNow' for the 'Asset tag' attribute.. Data Source Precedence in ServiceNow CMDB determines which data source wins when multiple sources update the same CI attribute. By default, 'ServiceNow' (Discovery) may have higher precedence than 'Manual' for certain attributes, causing manual edits to be overwritten. Configuring Data Source Precedence to rank 'Manual' higher than 'ServiceNow' for the 'Asset tag' attribute ensures manual updates persist.

Answer

Check the 'No-Delete' flag on the Discovery Schedule record.

Answer

Disable the 'Asset tag' field mapping in the IRE payload processor script.

Answer

Set the cmdb_ci table to read-only for the Discovery integration user via ACLs.

Question 13

An administrator notices that the CMDB Health background jobs are running during peak business hours and impacting performance. Where can the schedule for CMDB Health metric calculations be modified?

Accepted Answer

System Definition > Scheduled Jobs (searching for CMDB Health jobs). CMDB Health metric calculations are executed by scheduled jobs, which can be modified in the System Definition > Scheduled Jobs module. Administrators can search for CMDB Health-related jobs and adjust their schedules to run during off-peak hours, reducing performance impact.

Answer

Discovery Schedules > CMDB Health

Answer

CMDB Health Dashboard > Schedule Settings

Answer

Data Governance > Job Execution

Question 14

You are auditing a ServiceNow instance and notice that an Application Service record has been created directly on the Business Application table rather than the Application Service table. What corrective action must be taken?

Accepted Answer

Delete the incorrect record and create a new record on the Application Service table [cmdb_ci_service_calculated], linking it to the correct Business Application.. The correct action is to delete the misclassified record and recreate it on the Application Service table [cmdb_ci_service_calculated], linking it to the correct Business Application. Application Service and Business Application are distinct CSDM classes with different semantics; a record created on the wrong table breaks the model's integrity and reporting. Recreating on the correct table ensures proper relationships and downstream CSDM compliance.

Answer

Convert the record into a Technical Service Offering.

Answer

Leave the record as-is, because Business Application and Application Service tables are interchangeable in newer ServiceNow releases.

Answer

Change the table attribute in Dictionary Overrides so that Business Applications act as Application Services.

Question 15

An enterprise is audited for CSDM compliance. The CSDM Data Foundations Dashboard indicates that application services are not properly connected to technical services. What is the governance impact of this structural gap?

Accepted Answer

Inability to accurately perform impact analysis during outages and incorrect service portfolio visibility. In CSDM, application services must be connected to technical services to provide a complete service model. If this linkage is missing, the organization cannot accurately trace the impact of an outage from the business application down to the underlying technical components, and service portfolio visibility becomes fragmented. This directly undermines impact analysis and service health reporting, which are core governance outcomes of CSDM.

Answer

Hardware assets will automatically be marked as deprecated

Answer

Database replication lag will increase across MID servers

Answer

Discovery will fail to run network scans on IP subnets

Question 16

An organization is troubleshooting a Service Mapping map where a discovery pattern fails to populate attributes for a custom application server. Which diagnostic tool helps inspect the raw payload and intermediate variables during pattern execution?

Accepted Answer

Pattern Designer Debugger / Test feature. The Pattern Designer Debugger (also called the Test feature) executes a discovery pattern step by step and exposes the raw payload, intermediate variables, and step outputs. This lets engineers inspect exactly what data the pattern received and how it transformed it, which is essential when attributes fail to populate for a custom application server. It is the native diagnostic tool for pattern-level troubleshooting.

Answer

Discovery Log analyzer widget

Answer

CMDB Query Builder execution trace

Answer

Dependency Views inspector console

Question 17

An organization uses Service Mapping to visualize an e-commerce application. A user notices that a specific entry point shows a 'Partial' map status. What does this Insight indicator specifically communicate?

Accepted Answer

Service Mapping encountered errors, missing credentials, or unmapped traffic during discovery of the service topology.. A 'Partial' map status in Service Mapping indicates that the discovery of the service topology was incomplete — typically due to errors, missing credentials, or unmapped traffic that prevented Service Mapping from fully tracing all connections. This status signals that the map is usable but not complete, and administrators should investigate the discovery errors to resolve the gaps.

Answer

The Discovery schedule is currently paused by an administrator.

Answer

The underlying infrastructure has not been updated within the last 90 days.

Answer

The business service record lacks mandatory CSDM technical service offerings.

Question 18

A team is designing a custom CMDB class for virtual storage arrays. They need to ensure that when a physical host is deleted, the dependent virtual storage array records are also cleaned up. Where should this cascading delete behavior be defined?

Accepted Answer

CI Class Manager under the relationship rules section. Cascading delete behavior for CMDB CIs is defined in CI Class Manager under the relationship rules section, where administrators configure how dependent CIs are handled when a parent CI is deleted. This is the supported, upgrade-safe location for defining cascade rules, rather than writing custom business rules or scripts.

Answer

Business Rules on the cmdb_ci table

Answer

Data Dictionary [sys_dictionary] attribute settings

Answer

IRE payload processor scripts

Question 19

When analyzing CMDB data quality, you discover multiple records representing the exact same physical server, but they were created by different discovery tools with slightly different naming conventions. The IRE successfully merges them during updates, but initial creation still generates duplicates. What is the root cause?

Accepted Answer

Reconciliation definitions are set to allow multiple sources.. The root cause is twofold: the reconciliation definitions are configured to allow multiple sources (Option A), and the identification rules for the server class lack matching criteria that cover the unique attributes provided by both discovery tools (Option D). When reconciliation allows multiple sources, the IRE does not enforce a single authoritative source, so duplicates can persist if identification rules fail to uniquely match records. Additionally, if identification rules do not include attributes that are common to both tools (e.g., serial number, MAC address), the IRE cannot correlate the records during initial creation, resulting in duplicates. Both conditions together explain why merging occurs only during updates (when reconciliation runs) but not at creation.

Answer

The cmdb_rel_ci table is missing indexes.

Answer

The CMDB Health Dashboard needs to be restarted.

Question 20

A ServiceNow implementation specialist is configuring Data Certification to ensure that application owners regularly review the accuracy of their business-critical applications. Where must the filter criteria be specified to determine which CIs are included in the certification schedule?

Accepted Answer

In the Certification Filter related list of the audit definition. Data Certification schedules utilize a filter condition or a related Audit Definition to dynamically select the target CIs based on specified criteria.

Answer

Inside the CI Class Manager under Governance settings

Answer

On the CMDB Health Dashboard compliance settings tab

Answer

In the CMDB Data Manager policy definition