SERVICENOW-CIS-DISCOVERY Practice Test 11 — 15 Questions

Question 1

When a discovery probe fails due to a timeout, what is the best way to increase the timeout value for that specific probe?

Accepted Answer

Update the probe's timeout parameter.. To increase the timeout value for a specific probe, you update the probe's timeout parameter. Each probe record in ServiceNow has a timeout field that specifies how long the probe should wait for a response before failing. Modifying this value directly on the probe record allows you to customize the timeout for that specific probe.

Answer

Increase the Shazzam port wait time.

Answer

Modify the Discovery Schedule.

Answer

Change the global MID Server timeout property.

Question 2

When debugging a pattern that fails during the identification phase, which TWO areas should you inspect in the Pattern Designer?

Accepted Answer

Identification section. In the Pattern Designer, the identification phase is driven by the Identification section (option C), which defines what data the pattern collects and how it maps to the application model, so inspecting it reveals whether the pattern is gathering the right attributes to recognize the target. The Identification rules (option D) are equally essential because they specify the exact conditions (e.g., process name, file path, registry key, or command-line arguments) that must match for the pattern to positively identify the application; a faulty or overly strict rule is a common cause of identification failure. Options A (Credentials) and B (Schedule) relate to authentication and execution timing, which affect discovery or execution phases rather than the identification logic itself. Option E (Discovery log) is an output artifact used for troubleshooting discovery runs, not a configuration area within the Pattern Designer that defines identification behavior.

Answer

Credentials

Answer

Schedule

Answer

Discovery log

Question 3

Which THREE common challenges arise when using Regex to extract data from command outputs in patterns?

Accepted Answer

Potential for catastrophic backtracking on large strings. Option A is correct because certain regex patterns with nested quantifiers can trigger catastrophic backtracking, causing exponential runtime on large command outputs. Option C is correct because command output formats can change across software versions or configurations, silently breaking patterns that were tightly coupled to the old layout. Option E is correct because long, complex regex strings are hard to read, document, and maintain, especially when they encode many assumptions about output structure. Option B is wrong because regex engines widely support capture groups (e.g., parentheses in PCRE, Python re, and .NET). Option D is wrong because regex is a pattern-matching language and is never automatically converted to JSON.

Answer

Regex does not support capture groups

Answer

Regex is automatically converted to JSON

Question 4

What is the benefit of using an Extension section in a pattern?

Accepted Answer

To allow for modularity and reuse of logic.. Extension sections promote code reusability across multiple patterns.

Answer

To bypass the need for identification.

Answer

To increase the execution speed.

Answer

To automatically update CMDB schemas.

Question 5

Which THREE of the following are common reasons for a Discovery scan to fail?

Accepted Answer

Network firewall blocking ports. A Discovery scan fails when a network firewall blocks the ports used for probing (for example SNMP 161, WMI 135/445, or SSH 22), so the scanner cannot reach the target and the scan returns no data. B is correct because if the IP range or subnet defined in the Discovery schedule is wrong, the scanner probes addresses where no managed devices exist, producing an empty or failed scan. D is correct because invalid or insufficient credentials (wrong SNMP community string, WMI/SSH username or password) prevent authentication and cause the scan to fail even when the network path is open. C is not a typical cause of a Discovery scan failure, since a full instance database affects data storage rather than the scanning process itself, and E is unrelated because Discovery scans run from the mid server or scanner engine, not from a browser.

Answer

The instance database is full

Answer

The browser is out of date

Question 6

Which TWO steps are essential for parsing a command output that contains key-value pairs formatted as 'key = value'?

Accepted Answer

Define the Line Delimiter. For key-value parsing, identifying the line delimiter and the key-value separator is essential.

Answer

Execute an external shell script

Answer

Convert the output to XML

Answer

Apply a JSON Path

Question 7

You notice that Discovery is creating duplicate CIs for Windows servers. Which CMDB feature should you investigate first to ensure Discovery correctly identifies existing CIs?

Accepted Answer

Identification Rules. Identification Rules define the attributes (such as serial number, MAC address, or name) that the Identification and Reconciliation Engine uses to match discovered data to existing CIs. If duplicates are being created, the identification rules are likely too narrow or missing key attributes, causing IRE to fail to match and instead create new CIs. Investigating Identification Rules is the correct first step.

Answer

Discovery Schedules

Answer

Transform Maps

Answer

Data Preserver

Question 8

Where can you find a summary of the total number of CIs discovered versus those updated, identifying potential efficiency issues in your Discovery infrastructure?

Accepted Answer

Discovery Dashboard. The Discovery Dashboard provides metrics on CIs discovered, updated, and failed during a discovery run.

Answer

Service Mapping dashboard

Answer

CMDB Health Dashboard

Answer

MID Server dashboard

Question 9

Which THREE conditions must be met for a MID Server to be considered 'Up'?

Accepted Answer

The MID Server is not paused. A MID Server is reported as 'Up' in ServiceNow when three conditions are satisfied: the MID Server is not paused (B), meaning an administrator has not manually set its status to Paused, which would suppress its availability; the MID Server service is running (C), i.e., the Windows service or Linux daemon process is active and executing; and the heartbeat is within the allowed interval (E), meaning the MID Server has checked in with the instance within the configured heartbeat threshold (typically around 60 seconds, with a missed-heartbeat tolerance) so the instance considers it reachable. Options A and D are not requirements: a MID Server does not need 100% free CPU (it only needs adequate resources to run), and it can run on either Windows or Linux, so the operating system is irrelevant to the 'Up' status.

Answer

The MID Server has 100% CPU free

Answer

The MID Server is running on Linux

Question 10

If a MID Server's memory usage is consistently high, what parameter should you tune?

Accepted Answer

The 'wrapper.java.maxmemory' setting in wrapper.conf. Increasing the Java heap size in the wrapper.conf file allows the MID server process more memory.

Answer

mid.thread.max

Answer

mid.poll.time

Answer

mid.cache.size

Question 11

Which TWO of the following are valid ways to trigger Discovery?

Accepted Answer

Manual 'Discover Now'. Discovery can be triggered by a schedule (recurring) or manually ('Discover Now').

Answer

Change Management

Answer

Incident Management

Answer

CMDB update rule

Question 12

What is the difference between 'Identification' and 'Connection' in terms of CI ownership?

Accepted Answer

Identification handles the primary CI; Connection links it to dependent CIs.. The Identification section identifies the 'primary' CI, while Connection links it to others.

Answer

There is no difference.

Answer

Connection creates the CI; Identification sets attributes.

Answer

They are the same.

Question 13

Which TWO of the following are valid ways to configure an IP range for a Discovery Schedule?

Accepted Answer

CIDR notation. Discovery supports both CIDR notation and start/end IP ranges.

Answer

Subnet mask

Answer

Wildcard ranges (e.g., 10.1.*.*)

Answer

Comma-separated list of Hostnames

Question 14

When a CI record is 'Orphaned' according to the CMDB Health Dashboard, what does this mean?

Accepted Answer

The CI has no relationships to other CIs.. An Orphan CI is a CI that has no incoming or outgoing relationships, which is often unexpected for core infrastructure components.

Answer

The CI has no identified owner.

Answer

The CI is not associated with an Asset.

Answer

The CI has not been scanned for over 30 days.

Question 15

What happens in the CMDB when a 'Reconciliation Rule' identifies a conflict between two data sources?

Accepted Answer

The data source with the higher priority value updates the CI attribute.. The rule determines which source 'wins' based on the priority value assigned to the data sources; the loser is ignored for that attribute.

Answer

The system automatically creates a new CI.

Answer

The system prompts the user to choose.

Answer

Both values are stored as an array.