You must be able to configure MID Servers, Discovery schedules, IP ranges, ports, and behaviors. The single most important thing is knowing that Discovery populates the CMDB with CIs, and you verify MID Server communication via the ECC Queue.
Start practicing
Discovery Configuration — choose a session length
Free · No account required
Domain overview
This domain covers configuring ServiceNow Discovery to find and identify IT infrastructure. It tests your ability to set up MID Servers, Discovery schedules, IP ranges, ports, and behaviors. You must know which records to update, how probes and sensors work, and how to verify that the MID Server is communicating with the instance.
Exam objectives
Verifying MID Server communication via ECC Queue and MID Server status
Adding new ports by updating the Discovery Port Probe record
Defining Probes within a Discovery Behavior to control scanning steps
Understanding that Discovery populates the CMDB with Configuration Items
Thinking Discovery populates the ServiceNow CMDB with only network devices, ignoring servers, applications, and other CIs.
Confusing Discovery Behaviors with Discovery Schedules; behaviors define what probes run, not when discovery runs.
Assuming a MID Server is communicating correctly just because the service is running, without checking the ECC Queue or MID Server status.
Click any question to see the full explanation and answer options, or start a focused practice session above.
When configuring a Discovery Behavior, what is the primary purpose of defining 'Probes' within the behavior?
2If you are troubleshooting a Discovery issue where the device is correctly classified but no data is being populated in the CMDB, which phase should you investigate first?
3You need to ensure that Discovery ignores a specific range of IP addresses within a larger CIDR block that is already configured. What is the most efficient configuration approach?
4During the Shazzam phase, Discovery identifies that a port is open. If the port corresponds to a configured classifier but no trigger probe is defined, what is the default behavior?
5An administrator needs to restrict a Discovery Schedule to only scan specific IP addresses within a subnet during off-peak hours. Which configuration fulfills this requirement?
6What is the purpose of the 'Shazzam' phase in the Discovery process?
7You have multiple MID Servers in a cluster. Where do you define the capability that restricts a specific MID Server to only perform 'Windows' discovery?
8If you want to ensure that a Discovery Schedule runs exactly once every 24 hours starting at a specific time, which setting do you use?
9You notice that Discovery is failing to detect devices in a new subnet. What is the first thing you should verify in the Discovery configuration?
10When a discovery probe fails due to a timeout, what is the best way to increase the timeout value for that specific probe?
11How does Discovery handle the identification of a device that has had its IP address changed since the last discovery?
12When configuring an IP Range for a Discovery Schedule, what format must be used for a block of IPs?
13What is the primary function of a MID Server in the ServiceNow environment?
14Which record type stores the credentials used by Discovery to log into target devices?
15During discovery, a device is identified as 'Linux'. Which component is responsible for triggering the specific pattern to gather Linux-specific data?
16Why would you choose to use a 'Discovery Behavior' instead of the default behavior?
17When a Discovery scan completes, how can you view the status of all individual IP addresses scanned by that schedule?
18What is the role of the 'ECC Queue' in Discovery?
19If a MID Server is 'Down', what happens to Discovery schedules assigned to it?
20What is the purpose of the 'Classification' phase?
21How do you associate a specific MID Server with a Discovery Schedule?
22Which of the following would be the best reason to create a custom Discovery Behavior?
23You are performing Discovery and notice that the 'Discovery Status' shows 'Success', but the CI record was not updated. What is the most likely cause?
24When troubleshooting a specific device, how can you see exactly what was returned by the probes?
25What is the maximum number of times a Discovery Schedule can run?
26What does the 'Discovery Status' field 'Completed' mean?
27A customer needs to discover devices across a firewall. What is the standard configuration to allow this?
28What is the purpose of an 'IP Service' in Discovery?
29When a discovery scan is running very slowly, which configuration adjustment might improve performance?
30What is the consequence of deleting a Discovery Schedule?
31What is the primary way to check if a MID Server is communicating correctly with the ServiceNow instance?
32If you need to ensure that a Discovery scan does not impact network traffic, what is a recommended best practice?
33What is the purpose of the 'Identification' phase in Discovery?
34A new device type is not being discovered correctly. Where should you look to ensure the classification process is prepared to handle it?
35Which of these is a valid way to organize discovery when dealing with a very large network?
36What does 'Discovery' in ServiceNow primarily populate?
37How can you identify which MID Server performed a specific discovery task?
38You need to add a new port to be scanned by Discovery. Which record do you update?
39What is the primary function of the Discovery 'Exploration' phase?
40Which of the following is NOT a required part of a Discovery Schedule?
41Which TWO of the following are valid ways to configure an IP range for a Discovery Schedule?
42Which TWO of the following are components of the Discovery process?
43Which TWO of the following are true about the 'Discovery Status' module?
44Which THREE of the following are valid ways to improve discovery performance?
45Which THREE of the following are key components for configuring a successful Discovery?
46Which TWO of the following can be used to troubleshoot a MID Server that is not responding?
47Which THREE of the following items are stored in the Credential record?
48Which THREE of the following are necessary to successfully discover a Windows server?
49Which THREE of the following are true about the MID Server?
50Which TWO of the following are valid ways to trigger Discovery?
51Which THREE of the following are common reasons for a Discovery scan to fail?
52Which THREE of the following are true about the Identification phase?
53Which TWO of the following are true about Discovery Credentials?
54During the Identification phase, you notice that multiple CI records are being created for the same physical server. Which component should you verify to ensure the Identification engine correctly merges these attributes?
55You are setting up a new Discovery schedule to scan a large, segmented network. Which feature would you use to ensure the scan is distributed across multiple MID Servers?
56Which TWO of the following are valid ways to define the scope of a Discovery scan?
57You have a custom application that Discovery is currently ignoring. You want to trigger a specific pattern when the device is classified as a 'Linux Server'. Where do you configure this relationship?
58A discovery scan is failing during the Exploration phase because the credentials are insufficient. Where should you look to find the specific error logs related to this credential failure?
59When configuring a Discovery Schedule, what happens if the 'Active' checkbox is unchecked?
60Which THREE components are involved in the Discovery process flow?
61A discovery administrator needs to prevent the MID Server from scanning a set of production database servers on the 10.10.0.0/24 subnet, while still allowing discovery of all other devices on that same subnet. The MID Server is already configured and the discovery schedule uses a single IP range that includes 10.10.0.0/24. Which configuration should the administrator use to exclude only the database servers?
62A discovery administrator is troubleshooting why a Windows server is not being classified correctly during discovery. The server responds to pings and the MID Server successfully runs probes, but the Classification record is not being matched. The administrator verifies that the correct Windows pattern is being triggered. Which configuration should the administrator check to ensure the classification is applied based on the correct criteria?
63During a discovery run, a Windows server is correctly identified and classified, but the discovery administrator notices that the 'Serial number' attribute is not populated on the resulting CI. The administrator verifies that the Windows credentials are correct and that the server is reachable. Which component should the administrator investigate to ensure the serial number is collected?
64An implementation specialist is reviewing the discovery logs and notices that a network device is being classified as a 'Printer' instead of a 'Router'. The device responds to SNMP but the classification is incorrect. Which Discovery configuration element should be adjusted to correct the classification?
65A discovery administrator is troubleshooting a server that was discovered but shows no installed software in the CMDB. The horizontal discovery status shows the device completed successfully and the classification matched the correct Linux Server class. Which configuration element should the administrator verify to ensure application and package data is collected for this device?
66A discovery administrator needs to ensure that a MID Server can discover devices in a remote subnet that is not directly routable from the ServiceNow instance. The MID Server is already installed and validated in the remote network. What is the next step to enable discovery of that subnet?
67A discovery administrator is troubleshooting a Linux server that is not being discovered despite correct credentials and network connectivity. The administrator runs a horizontal discovery and notices that the 'SSH' probe fails with a 'Command not found' error. Which step should the administrator take to resolve this?
68A discovery administrator is reviewing the Discovery Logs to troubleshoot why a Windows server was not properly discovered. The administrator notices that the Shazzam phase completed successfully, but the Classification phase did not identify the device. Which two actions should the administrator take to resolve the issue? (Choose two.)
69A discovery administrator is configuring a new Discovery Schedule for a subnet that contains both Linux and Windows servers. The administrator wants to minimize the load on the MID Server and ensure that only necessary probes are run. Which configuration should the administrator use?
70A discovery administrator has created a new Discovery Schedule for a data center subnet and wants the MID Server to begin scanning immediately without waiting for the next scheduled interval. Which action should the administrator take on the Discovery Schedule record?
71A discovery administrator notices that a Windows server is discovered and classified correctly, but its serial number and manufacturer fields remain empty in the CMDB. The MID Server is up, the credentials are validated, and other Windows servers on the same schedule populate these fields. Which configuration should the administrator review first?
You must be able to configure MID Servers, Discovery schedules, IP ranges, ports, and behaviors. The single most important thing is knowing that Discovery populates the CMDB with CIs, and you verify MID Server communication via the ECC Queue.
The Courseiva SERVICENOW-CIS-DISCOVERY question bank contains 71 questions in the Discovery Configuration domain. Click any question to see the full explanation and answer breakdown.
Start with a 10-question focused session to identify your baseline accuracy in this domain. Read every explanation — even for questions you answer correctly — to understand the reasoning. Once you score consistently above 80%, move to a 20–30 question session to confirm depth before moving to the next domain.
Yes — the session launcher on this page draws questions exclusively from the Discovery Configuration domain. Choose 10, 20, 30, or 50 questions for a focused session, or click individual questions to review them one by one.
Save your results, see per-domain analytics, and get readiness scores — free, for every certification.
Sign Up FreeFree forever · Every certification included