CIS-DF Hard Questions — 25 Difficult Questions

Question 1

An integration script is passing a complex payload containing multiple related CIs to the Identification and Reconciliation Engine (IRE) via the script include 'JSONUtils' or 'CmdbUtil'. Which payload structure is required for the IRE to correctly process related CIs in a single transaction?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

A root object containing an 'items' array for the CIs and a 'relations' array specifying parent, child, and relationship type references.. The IRE payload requires a structured JSON object containing an 'items' array for the CIs and a 'relations' array to define relationships between items in the payload.

Answer

Separate REST API calls for each CI followed by a manual relationship creation call.

Answer

A CSV file attached to a Data Source record processed exclusively by a Transform Map.

Answer

A flat array of CI records with parent and child reference ID fields embedded directly in each CI record.

Question 2

A company has implemented strict data governance where CIs that have not been discovered or updated in over 90 days are considered stale. Where should this threshold be configured in ServiceNow?

Accepted Answer

CMDB Health Dashboard Correctness settings. Stale CI thresholds are configured within the Correctness settings of the CMDB Dashboard / CI Class Manager audit rules.

Answer

CI Class Manager relationship rule definitions

Answer

Discovery Schedule properties

Answer

Data Archiving rule definitions

Question 3

Which THREE actions occur when a Data Certification task is assigned to a CI owner? (Choose three.)

Accepted Answer

The reviewer can update incorrect attribute values directly from the task interface. Data certification tasks prompt owners to verify record accuracy, update invalid details, and submit their certification response.

Answer

The CI is automatically retired from the database immediately

Answer

A high-priority incident is automatically created for the IT service desk

Question 4

Your company is preparing for an IT audit and needs to demonstrate which user groups are responsible for supporting specific Application Services. Where should the support group be specified on the Application Service record according to CSDM guidelines?

Accepted Answer

Support group field on the Application Service record.. The 'Support group' field on the Application Service record designates the operational team responsible for supporting that specific service deployment.

Answer

Assignment group field on all incoming Incident records automatically.

Answer

Managed by group field on the underlying Linux server CIs.

Answer

Assigned group field on the parent Business Application record.

Question 5

An administrator is configuring a Robust Transform Engine (RTE) integration to populate the CMDB from a third-party asset management system. Why is RTE recommended over a standard Transform Map for CMDB data loads?

Accepted Answer

RTE processes data through the Identification and Reconciliation Engine (IRE), preventing duplicates and enforcing data integrity.. Robust Transform Engine integrates natively with the Identification and Reconciliation Engine (IRE), ensuring data is properly reconciled and duplicate CIs are prevented.

Answer

RTE automatically translates foreign languages in source data payloads.

Answer

RTE eliminates the need for staging tables during data imports.

Answer

RTE bypasses all access control lists to accelerate import times.

Question 6

An enterprise uses Service Graph connectors to automatically populate infrastructure CIs. They want to ensure that these dynamically discovered CIs are automatically associated with the correct Application Service without manual mapping for every server addition. Which Application Service type should be deployed?

Accepted Answer

Dynamic CI Group Application Service. A Dynamic CI Group uses query criteria (such as tag-based or CMDB group rules) to automatically populate and maintain the CIs associated with the Application Service.

Answer

Static Business Application Service

Answer

Manual Application Service

Answer

Portfolio-linked Application Service

Question 7

When configuring the Identification and Reconciliation Engine (IRE) for a complex multi-source data environment, which THREE components or concepts are critical to understand and configure properly? (Choose three.)

Accepted Answer

Identification Rules. IRE relies on Identification Rules for matching, Reconciliation Definitions for precedence, and Payload structure for processing. Dependency views and Transform maps are separate components.

Answer

Standard Legacy Transform Maps without RTE

Answer

Dependency View graphical layout settings

Question 8

Your team is troubleshooting a business service mapping issue where incident impact analysis fails to show downstream application outages. Upon reviewing the CMDB, you discover that the Application Service was created as a 'Manual' type, but its supporting infrastructure CIs were deleted during a data purge. What is the recommended way to restore the mapping?

Accepted Answer

Re-establish the infrastructure CIs and manually re-add them to the Application Service via the Application Service Workbench.. For a manual Application Service, you must manually re-add the appropriate infrastructure CIs or recreate the relationships using the Application Service workbench.

Answer

Run a quick discovery scan to automatically regenerate the manual application service relationships.

Answer

Convert the manual Application Service into a Business Application record.

Answer

Delete the Business Application and recreate it as a Technical Service.

Question 9

Your company uses Service Graph connectors and Discovery to populate CIs. A database administrator complains that their production database instance appears under multiple different Application Services in the CMDB. According to CSDM best practices, what does this multi-mapping indicate?

Accepted Answer

It is a valid architectural scenario if the database is genuinely shared, but requires correct 'Depends on / Used by' relationships to each Application Service.. A single database instance supporting multiple Application Services is valid if it is a shared database cluster, but improper mapping can cause false positive impact analysis if not structured with correct relationship types.

Answer

It is a critical CSDM violation; a database CI can never be associated with more than one Application Service.

Answer

It means the database must be converted into a Service Offering immediately.

Answer

It indicates that Discovery has duplicated the database CI into the Business Application table.

Question 10

During an internal audit, an enterprise needs to prove that all changes to server ownership are tracked and verified. Which feature provides a historical log of attribute changes specifically for governance and auditing purposes?

Accepted Answer

CI Class History. CI Class History tracks attribute changes on CIs, supporting auditing and governance investigations into data modifications.

Answer

CMDB Data Governance > Audit Trail

Answer

Data Certification Results

Answer

System Logs > Audit (sys_audit)

Question 11

An enterprise is designing a complex class hierarchy for IoT devices. They decide to create a multi-level extension: cmdb_ci > cmdb_ci_hardware > cmdb_ci_compute > cmdb_ci_iot. What happens to the table inheritance and record storage when a new record is inserted into cmdb_ci_iot?

Accepted Answer

The record is stored in the cmdb_ci_iot table, and database views or UNION queries allow parent tables to display the record.. ServiceNow extends tables using database extension, meaning records are stored in the specific leaf table (cmdb_ci_iot) while parent tables hold corresponding records for polymorphic queries.

Answer

All attributes are stored in a single flat cmdb_ci table with discriminator columns.

Answer

The platform throws an error because more than two levels of extension are prohibited in the CMDB.

Answer

Records are stored exclusively in the cmdb_ci table, and child tables only store metadata.

Question 12

An organization wants to configure remediation rules so that when a CMDB Health Correctness anomaly (such as a duplicate CI) is identified, a remediation task is automatically generated and assigned to the correct data owner. Where are these remediation rules configured?

Accepted Answer

In the CMDB Health Dashboard configuration settings. Remediation rules for CMDB Health metrics are configured within the CMDB Health Dashboard configuration settings, mapping anomalies to specific workflow actions or task creation rules.

Answer

Inside Data Certification definition forms

Answer

Through Data Policies on the cmdb_ci table

Answer

In the CI Class Manager under the Remediation tab

Question 13

Which THREE components are required when setting up a Data Certification schedule in ServiceNow? (Choose three.)

Accepted Answer

Assigned Reviewer or group mapping. Data certification setup requires defining the audit filter criteria, the schedule/frequency, and the user assignment mechanism.

Answer

Automatic MID Server selection rule

Question 14

An administrator is reviewing the Correctness score on the CMDB Health Dashboard and notices a low score caused by multiple CIs having no relationships to any business services. Which specific Correctness metric is flagging this issue?

Accepted Answer

Orphans. The Orphan metric under CMDB Health Correctness identifies CIs that lack required relationships (e.g., servers not related to applications or services).

Answer

Duplicate CIs

Answer

Unassigned CIs

Answer

Stale CIs

Question 15

An enterprise has multiple disjointed data sources feeding network gear into the CMDB. Source A provides high-accuracy IP data, while Source B provides high-accuracy serial numbers. However, their discovery source names differ slightly in casing and format across jobs. How does the IRE handle discovery source strings during reconciliation?

Accepted Answer

Discovery source strings are case-sensitive and must be standardized; inconsistent naming causes the IRE to treat them as distinct data sources, bypassing intended precedence rules.. Discovery source names must be registered in the sys_object_source or cmdb_sync_v2 framework properly, and matching is case-sensitive or managed through standardized discovery source entries.

Answer

The IRE maps discovery sources based on IP address ranges rather than the discovery source string.

Answer

The IRE automatically normalizes all discovery source strings to lowercase and strips special characters.

Answer

Discovery source names only affect reporting and have no impact on IRE reconciliation behavior.

Question 16

An organization wants to configure CMDB Data Governance remediation tasks so that when a completeness policy fails for a high-priority server, a task is automatically assigned to the data owner. Where are these remediation workflows and task generation parameters configured?

Accepted Answer

CMDB Data Governance > Policies. CMDB Data Governance policies are tied to remediation rules that dictate how remediation tasks are created, assigned, and managed upon policy violation.

Answer

CMDB Health > Dashboard Settings

Answer

Data Certification > Definitions

Answer

System Policy > Rules > Data Policy

Question 17

Your organization wants to map a complex application architecture where three distinct Business Applications feed data into a central data warehouse Application Service. According to CSDM best practices, how should Business Applications relate to Application Services in data-sharing pipelines?

Accepted Answer

Business Applications represent the portfolio software, while Application Services represent the deployed data pipeline instances connected via integration relationships.. Business Applications represent portfolio software entries, and Application Services represent the deployed instances that consume or share data via integration relationships.

Answer

Data pipelines must be modeled as Business Capabilities in the Foundation domain.

Answer

Business Applications must be deleted and replaced entirely by Incident records.

Answer

Application Services cannot participate in data integration mapping.

Question 18

An auditor requires proof that all discovered Linux servers have a validated business justification attribute. The team uses CMDB Data Governance to enforce this. How can the administrator prove to the auditor that the policy is actively running and enforcing this rule?

Accepted Answer

Show the CMDB Data Governance Policy execution history and generated remediation task metrics. Compliance reports and execution logs within CMDB Data Governance show the history of policy runs, pass/fail counts, and generated tasks.

Answer

Provide a screenshot of the Discovery Schedule configuration

Answer

Export the entire sys_audit table to CSV

Answer

Display the baseline CI Class Manager JSON payload definition

Question 19

An administrator notices that the CMDB Health background jobs are running during peak business hours and impacting performance. Where can the schedule for CMDB Health metric calculations be modified?

Accepted Answer

System Definition > Scheduled Jobs (searching for CMDB Health jobs). CMDB Health scheduled jobs (such as CMDB Health - Correctness, Completeness, Compliance) are managed via System Scheduler scheduled jobs.

Answer

Discovery Schedules > CMDB Health

Answer

CMDB Health Dashboard > Schedule Settings

Answer

Data Governance > Job Execution

Question 20

An organization wants to ensure that no duplicate CIs are ever inserted into the cmdb_ci table by API integrations or manual imports. Which ServiceNow engine natively enforces this governance rule?

Accepted Answer

Identification and Reconciliation Engine (IRE). The Identification and Reconciliation Engine (IRE) enforces uniqueness and identification rules to prevent duplicates.

Answer

Data Policy Enforcement Engine

Answer

CMDB Health Duplicate Engine

Answer

Transform Map Unique Key matching