SERVICENOW-CIS-DISCOVERY Practice Test 5 — 25 Questions

Question 1

When a discovery probe fails due to a timeout, what is the best way to increase the timeout value for that specific probe?

Accepted Answer

Update the probe's timeout parameter.. To increase the timeout value for a specific probe, you update the probe's timeout parameter. Each probe record in ServiceNow has a timeout field that specifies how long the probe should wait for a response before failing. Modifying this value directly on the probe record allows you to customize the timeout for that specific probe.

Answer

Increase the Shazzam port wait time.

Answer

Modify the Discovery Schedule.

Answer

Change the global MID Server timeout property.

Question 2

When debugging a pattern that fails during the identification phase, which TWO areas should you inspect in the Pattern Designer?

Accepted Answer

Identification section. In the Pattern Designer, the identification phase is driven by the Identification section (option C), which defines what data the pattern collects and how it maps to the application model, so inspecting it reveals whether the pattern is gathering the right attributes to recognize the target. The Identification rules (option D) are equally essential because they specify the exact conditions (e.g., process name, file path, registry key, or command-line arguments) that must match for the pattern to positively identify the application; a faulty or overly strict rule is a common cause of identification failure. Options A (Credentials) and B (Schedule) relate to authentication and execution timing, which affect discovery or execution phases rather than the identification logic itself. Option E (Discovery log) is an output artifact used for troubleshooting discovery runs, not a configuration area within the Pattern Designer that defines identification behavior.

Answer

Credentials

Answer

Schedule

Answer

Discovery log

Question 3

Which THREE common challenges arise when using Regex to extract data from command outputs in patterns?

Accepted Answer

Potential for catastrophic backtracking on large strings. Option A is correct because certain regex patterns with nested quantifiers can trigger catastrophic backtracking, causing exponential runtime on large command outputs. Option C is correct because command output formats can change across software versions or configurations, silently breaking patterns that were tightly coupled to the old layout. Option E is correct because long, complex regex strings are hard to read, document, and maintain, especially when they encode many assumptions about output structure. Option B is wrong because regex engines widely support capture groups (e.g., parentheses in PCRE, Python re, and .NET). Option D is wrong because regex is a pattern-matching language and is never automatically converted to JSON.

Answer

Regex does not support capture groups

Answer

Regex is automatically converted to JSON

Question 4

What is the benefit of using an Extension section in a pattern?

Accepted Answer

To allow for modularity and reuse of logic.. Extension sections promote code reusability across multiple patterns.

Answer

To bypass the need for identification.

Answer

To increase the execution speed.

Answer

To automatically update CMDB schemas.

Question 5

Which THREE of the following are common reasons for a Discovery scan to fail?

Accepted Answer

Network firewall blocking ports. A Discovery scan fails when a network firewall blocks the ports used for probing (for example SNMP 161, WMI 135/445, or SSH 22), so the scanner cannot reach the target and the scan returns no data. B is correct because if the IP range or subnet defined in the Discovery schedule is wrong, the scanner probes addresses where no managed devices exist, producing an empty or failed scan. D is correct because invalid or insufficient credentials (wrong SNMP community string, WMI/SSH username or password) prevent authentication and cause the scan to fail even when the network path is open. C is not a typical cause of a Discovery scan failure, since a full instance database affects data storage rather than the scanning process itself, and E is unrelated because Discovery scans run from the mid server or scanner engine, not from a browser.

Answer

The instance database is full

Answer

The browser is out of date

Question 6

Which TWO steps are essential for parsing a command output that contains key-value pairs formatted as 'key = value'?

Accepted Answer

Define the Line Delimiter. For key-value parsing, identifying the line delimiter and the key-value separator is essential.

Answer

Execute an external shell script

Answer

Convert the output to XML

Answer

Apply a JSON Path

Question 7

You notice that Discovery is creating duplicate CIs for Windows servers. Which CMDB feature should you investigate first to ensure Discovery correctly identifies existing CIs?

Accepted Answer

Identification Rules. Identification Rules define the attributes (such as serial number, MAC address, or name) that the Identification and Reconciliation Engine uses to match discovered data to existing CIs. If duplicates are being created, the identification rules are likely too narrow or missing key attributes, causing IRE to fail to match and instead create new CIs. Investigating Identification Rules is the correct first step.

Answer

Discovery Schedules

Answer

Transform Maps

Answer

Data Preserver

Question 8

Where can you find a summary of the total number of CIs discovered versus those updated, identifying potential efficiency issues in your Discovery infrastructure?

Accepted Answer

Discovery Dashboard. The Discovery Dashboard provides metrics on CIs discovered, updated, and failed during a discovery run.

Answer

Service Mapping dashboard

Answer

CMDB Health Dashboard

Answer

MID Server dashboard

Question 9

Which THREE conditions must be met for a MID Server to be considered 'Up'?

Accepted Answer

The MID Server is not paused. A MID Server is reported as 'Up' in ServiceNow when three conditions are satisfied: the MID Server is not paused (B), meaning an administrator has not manually set its status to Paused, which would suppress its availability; the MID Server service is running (C), i.e., the Windows service or Linux daemon process is active and executing; and the heartbeat is within the allowed interval (E), meaning the MID Server has checked in with the instance within the configured heartbeat threshold (typically around 60 seconds, with a missed-heartbeat tolerance) so the instance considers it reachable. Options A and D are not requirements: a MID Server does not need 100% free CPU (it only needs adequate resources to run), and it can run on either Windows or Linux, so the operating system is irrelevant to the 'Up' status.

Answer

The MID Server has 100% CPU free

Answer

The MID Server is running on Linux

Question 10

If a MID Server's memory usage is consistently high, what parameter should you tune?

Accepted Answer

The 'wrapper.java.maxmemory' setting in wrapper.conf. Increasing the Java heap size in the wrapper.conf file allows the MID server process more memory.

Answer

mid.thread.max

Answer

mid.poll.time

Answer

mid.cache.size

Question 11

Which TWO of the following are valid ways to trigger Discovery?

Accepted Answer

Manual 'Discover Now'. Discovery can be triggered by a schedule (recurring) or manually ('Discover Now').

Answer

Change Management

Answer

Incident Management

Answer

CMDB update rule

Question 12

What is the difference between 'Identification' and 'Connection' in terms of CI ownership?

Accepted Answer

Identification handles the primary CI; Connection links it to dependent CIs.. The Identification section identifies the 'primary' CI, while Connection links it to others.

Answer

There is no difference.

Answer

Connection creates the CI; Identification sets attributes.

Answer

They are the same.

Question 13

Which TWO of the following are valid ways to configure an IP range for a Discovery Schedule?

Accepted Answer

CIDR notation. Discovery supports both CIDR notation and start/end IP ranges.

Answer

Subnet mask

Answer

Wildcard ranges (e.g., 10.1.*.*)

Answer

Comma-separated list of Hostnames

Question 14

When a CI record is 'Orphaned' according to the CMDB Health Dashboard, what does this mean?

Accepted Answer

The CI has no relationships to other CIs.. An Orphan CI is a CI that has no incoming or outgoing relationships, which is often unexpected for core infrastructure components.

Answer

The CI has no identified owner.

Answer

The CI is not associated with an Asset.

Answer

The CI has not been scanned for over 30 days.

Question 15

What happens in the CMDB when a 'Reconciliation Rule' identifies a conflict between two data sources?

Accepted Answer

The data source with the higher priority value updates the CI attribute.. The rule determines which source 'wins' based on the priority value assigned to the data sources; the loser is ignored for that attribute.

Answer

The system automatically creates a new CI.

Answer

The system prompts the user to choose.

Answer

Both values are stored as an array.

Question 16

If you have a pattern that identifies a CI but fails to update its attribute, which log should you check first?

Accepted Answer

Discovery Pattern Log. The Discovery Pattern Log provides the most detail regarding step execution and attribute assignment failures.

Answer

System Log

Answer

CMDB Health Dashboard

Answer

MID Server Log

Answer

Node Log

Question 17

When reviewing the CMDB Health Dashboard, you notice a high 'Staleness' score for several Windows servers. What is the primary cause of high staleness?

Accepted Answer

The CIs have not been updated by Discovery within the configured staleness threshold.. The Staleness score in the CMDB Health Dashboard measures how long it has been since a CI was last updated by Discovery or another authoritative source. A high staleness score means the CI's 'last discovered' or 'updated' timestamp exceeds the configured staleness threshold, indicating the CI data is outdated. This is the direct definition of staleness in ServiceNow CMDB Health.

Answer

The CIs are not being reconciled correctly.

Answer

The Discovery credentials failed during the last scan.

Answer

The CIs have invalid relationship types.

Question 18

What is the primary benefit of using a MID Server?

Accepted Answer

It allows discovery behind firewalls. MID Servers allow for secure, firewalled data collection without exposing the instance directly to the internal network.

Answer

It replaces the need for a database

Answer

It increases the number of users

Answer

It makes discovery faster

Question 19

Which TWO actions should you perform if a MID Server is not showing 'Up' in the instance?

Accepted Answer

Verify the MID Server service is running on the host. Checking the service status on the host and the ECC Queue for connectivity errors are the two initial troubleshooting steps.

Answer

Change the proxy server settings

Answer

Create a new discovery schedule

Answer

Update the MID Server version

Question 20

What happens to the MID Server service if the host machine reboots?

Accepted Answer

It will start automatically if configured as a system service. If the MID Server is configured as a system service (e.g., Windows Service or Linux daemon), it will automatically start when the host machine reboots. This is the recommended configuration for production environments to ensure continuous discovery and integration. The MID Server service is designed to be resilient and restart automatically if set up correctly.

Answer

It will stay down until manually started

Answer

It will be uninstalled

Answer

It will require a re-validation