SERVICENOW-CIS-DISCOVERY Practice Test 13 — 15 Questions

Question 1

In the context of the CMDB, what does 'Orphan' refer to?

Accepted Answer

A CI with no relationships to other CIs.. An 'Orphan' CI is a CI that lacks any relationships to other CIs, which is often an indication of an incomplete CMDB model.

Answer

A CI with no owner.

Answer

A CI that has not been scanned.

Answer

A CI created by a guest user.

Question 2

You need to troubleshoot why a specific WMI probe is failing. Which log should you check on the MID Server host?

Accepted Answer

The agent log. The agent log captures the execution of probes and any errors encountered during the process.

Answer

The MID Server configuration log

Answer

The System Event Log

Answer

The wrapper log

Question 3

Which TWO of the following can be configured in a Pattern step?

Accepted Answer

Run as (user privilege). In a Pattern step, option A "Run as (user privilege)" is correct because each step can be configured with a Run as value that specifies the user account or privilege under which the step's operation executes, which is essential for controlling access to the target systems during discovery. Option C "Continue on error" is also correct because Pattern steps include an error-handling setting that allows the pattern to continue processing subsequent steps even if the current step fails, which is useful for robust discovery when some data may be unavailable. Option B "User password rotation" is not a Pattern step setting; password rotation is handled through credential management and password policies, not within individual pattern steps. Option D "MID Server selection" is not configured per Pattern step; MID Server assignment is determined at the discovery schedule or configuration level, not inside a step. Option E "CI Class Manager update" is unrelated to Pattern step configuration, as CI Class Manager is used to manage class definitions and hierarchies, not step-level execution behavior.

Answer

User password rotation

Answer

MID Server selection

Answer

CI Class Manager update

Question 4

You need to store the result of a WMI query in a variable that can be accessed across different sections of the pattern. Which step type should you use?

Accepted Answer

Set Variable. The 'Set Variable' step type is used to store a value, such as the result of a WMI query, into a variable that can be accessed across different sections of the pattern.

Answer

Parse JSON

Answer

Table Transformation

Answer

Registry Extraction

Question 5

Which component is responsible for orchestrating the flow of CI data from the discovery source to the CMDB, ensuring data quality?

Accepted Answer

Identification and Reconciliation Engine (IRE). The Identification and Reconciliation Engine (IRE) orchestrates all incoming CI data to ensure it adheres to CMDB rules.

Answer

MID Server

Answer

Discovery Pattern

Answer

CMDB Health Dashboard

Question 6

What is the primary function of an 'Identification Rule'?

Accepted Answer

To define the attributes used to match incoming CI data to existing CIs.. An identification rule defines which attributes are used to uniquely identify a CI and match it against existing records.

Answer

To specify which MID server is used.

Answer

To define the scan frequency.

Answer

To map IP ranges.

Question 7

During discovery, a device is identified as 'Linux'. Which component is responsible for triggering the specific pattern to gather Linux-specific data?

Accepted Answer

The Discovery Pattern.. Discovery triggers a pattern based on the classification result, which matches the Linux classifier.

Answer

The CMDB Identification rule.

Answer

The Shazzam probe.

Answer

The Classification probe.

Question 8

Which THREE of the following are valid ways to improve discovery performance?

Accepted Answer

Using a MID Server cluster for load balancing. Option B is correct because a MID Server cluster distributes discovery probes and schedules across multiple MID Servers, providing load balancing and horizontal scaling so no single MID Server becomes a bottleneck. Option C is correct because raising the number of concurrent discovery tasks (via the MID Server's max concurrent tasks/probes settings) lets more discovery work run in parallel, increasing throughput. Option D is correct because splitting large IP ranges into smaller, separate schedules reduces the scope and duration of each discovery run, avoids timeouts, and lets discoveries complete faster and more reliably. Option A is not valid because disabling all classifiers removes the classification step that identifies device types and CI classes, which does not improve performance and breaks discovery results. Option E is not valid because running all discoveries simultaneously overloads MID Servers and the instance, causing contention and slower, not faster, discovery.

Answer

Disabling all classifiers

Answer

Running all discoveries at once

Question 9

Which THREE of the following are components or features that are part of the 'Discovery' to 'CMDB' data pipeline?

Accepted Answer

Discovery Patterns. Discovery Patterns (A) are the reusable, content-based definitions that tell Discovery how to classify and map data from a CI (e.g., by parsing commands, SNMP OIDs, or WMI queries) into the correct CMDB class and attributes, making them a core part of the Discovery-to-CMDB pipeline. Reconciliation Rules (B) are the configurable rules that determine how incoming discovered data is merged with existing CMDB records, including which fields to update, ignore, or prioritize, so they directly govern how Discovery results are written into the CMDB. The Identification and Reconciliation Engine (IRE) (C) is the ServiceNow engine that processes discovery payloads, applies identification and reconciliation logic, and creates or updates CIs in the CMDB, making it the central component of this pipeline. Incident Management (D) is an ITIL process for handling service disruptions and is not part of the Discovery-to-CMDB data flow, and Knowledge Management (E) is a separate module for storing articles and knowledge bases, unrelated to populating the CMDB from Discovery.

Answer

Incident Management

Answer

Knowledge Management

Question 10

During the Identification phase, you notice that multiple CI records are being created for the same physical server. Which component should you verify to ensure the Identification engine correctly merges these attributes?

Accepted Answer

Identification Rules. Identification Rules are the component that determines how CIs are uniquely identified and merged during the Identification phase. They define the attributes that must match for two CI records to be considered the same, ensuring that multiple records for the same physical server are merged correctly.

Answer

Classification Criteria

Answer

Discovery Patterns

Answer

Discovery Probes

Question 11

What is the purpose of the 'mid.snmp.port' parameter?

Accepted Answer

To set the default port for SNMP discovery. The 'mid.snmp.port' parameter sets the default UDP port that the MID Server uses for SNMP discovery, overriding the standard SNMP port of 161 when a non-default port is required. This allows discovery of SNMP-enabled devices that listen on a custom port. It is configured as a MID Server property and applies to SNMP probes and sensors during discovery.

Answer

To secure the connection

Answer

To set the heartbeat port

Answer

To configure the MID Server's web interface

Question 12

You need to upgrade a large number of MID Servers. Which feature should you use to avoid manual updates?

Accepted Answer

MID Server Auto-Upgrade. MID Server Auto-Upgrade is the built-in feature that automatically upgrades MID Servers to match the instance version, eliminating manual patching across a large fleet. When enabled, the instance pushes the upgrade package to each MID Server, which then updates itself and restarts. This is the standard approach for managing many MID Servers at scale.

Answer

MID Server Update Sets

Answer

MID Server Cluster Overrides

Answer

Scheduled Jobs to restart services

Question 13

A MID Server is failing to upgrade. What should you check first?

Accepted Answer

The upgrade log files on the MID Server host. When a MID Server upgrade fails, the first diagnostic step is to review the upgrade log files on the MID Server host itself. These logs (typically found under the agent's log directory, e.g., agent.log and wrapper.log) capture the exact failure point — whether it's a Java version mismatch, connectivity issue to the instance, or a failed file extraction. The MID Server record status in the instance only shows the current state (Up, Down, Upgrading) and won't reveal the underlying cause of the upgrade failure.

Answer

The Discovery Schedule

Answer

The System Property list

Answer

The MID Server record status

Question 14

You are troubleshooting a MID Server that is stuck in the 'Validated' state but not picking up jobs. You notice the 'MID Server Issues' list reports a 'Clock drift' error. What is the recommended resolution?

Accepted Answer

Synchronize the MID Server host time with an NTP server. Clock drift indicates that the MID Server host's time is not synchronized with the ServiceNow instance's time, causing authentication and job processing failures. The recommended resolution is to synchronize the host time with an NTP server to ensure accurate time alignment.

Answer

Update the 'MID Server' record to 'Down' and back to 'Up'

Answer

Increase the 'ECC Queue' processing timeout

Answer

Restart the MID Server service

Question 15

What is the purpose of the 'Shazzam' phase in the Discovery process?

Accepted Answer

To determine which ports are open on the target devices.. The Shazzam phase in ServiceNow Discovery is responsible for port scanning. It probes the target IP addresses to determine which TCP/UDP ports are open and listening, and it also attempts to identify the basic type of service running on those ports (e.g., SSH, WMI, SNMP). This information is then used by later phases to decide which probes and patterns to run. Therefore, the correct answer is that Shazzam determines which ports are open on the target devices.

Answer

To run patterns.

Answer

To classify the device type.

Answer

To update the CMDB.