SERVICENOW-CIS-DISCOVERY Discovery Configuration — 40 Questions

Question 1

When configuring a Discovery Behavior, what is the primary purpose of defining 'Probes' within the behavior?

Accepted Answer

To control which probes are launched for specific device types.. Behaviors are collections of probes that dictate the scope of the discovery execution.

Answer

To define the IP address range.

Answer

To define the credential to be used.

Answer

To define which MID Server to use.

Question 2

Which phase of Discovery is responsible for matching the fingerprint of a device to a specific Classification record?

Accepted Answer

Classification. Classification is the phase where the device is identified based on the fingerprints returned by probes.

Answer

Identification

Answer

Shazzam

Answer

Exploration

Question 3

During the Classification phase, Discovery identifies a device as a Linux server but fails to populate the serial number. Which troubleshooting step is most effective?

Accepted Answer

Check the ECC Queue for 'Input' records related to the SNMP probes and review the pattern logs.. If classification succeeds but specific data is missing, the issue is typically in the Exploration phase probes or identifiers.

Answer

Change the MID Server user to an admin account.

Answer

Delete the Discovery Schedule and recreate it.

Answer

Re-run the Shazzam probe for that specific IP.

Question 4

If you are troubleshooting a Discovery issue where the device is correctly classified but no data is being populated in the CMDB, which phase should you investigate first?

Accepted Answer

Exploration. Exploration is the phase where probes run to gather attributes to populate the CMDB.

Answer

Shazzam

Answer

Schedule

Answer

Classification

Answer

Identification

Question 5

You need to ensure that Discovery ignores a specific range of IP addresses within a larger CIDR block that is already configured. What is the most efficient configuration approach?

Accepted Answer

Add the ranges to the Excluded IP Ranges related list.. The Excluded IP Ranges related list on the Discovery Schedule record allows you to explicitly ignore specific IPs.

Answer

Configure a Discovery Behavior to exclude the IPs.

Answer

Delete the original schedule and recreate two smaller schedules.

Answer

Create an ACL to block the IP addresses.

Question 6

During the Shazzam phase, Discovery identifies that a port is open. If the port corresponds to a configured classifier but no trigger probe is defined, what is the default behavior?

Accepted Answer

The classification phase initiates, but exploration cannot trigger.. The classification phase will proceed, but without a trigger probe, the classification will likely fail to move to the exploration phase.

Answer

The CI is ignored, and the scan continues.

Answer

Discovery automatically guesses the OS type.

Answer

The scan for that IP is immediately aborted.

Question 7

A customer requires that a specific Discovery Schedule only executes during maintenance windows on weekends. Which configuration setting should be modified?

Accepted Answer

Adjust the 'Run' field to 'Periodically' and select a custom Schedule record.. The Schedule field on the Discovery Schedule record defines the execution frequency using standard system schedules.

Answer

Change the discovery pattern logic.

Answer

Update the Discovery Behavior record.

Answer

Modify the MID Server cluster affinity.

Question 8

An administrator needs to restrict a Discovery Schedule to only scan specific IP addresses within a subnet during off-peak hours. Which configuration fulfills this requirement?

Accepted Answer

Create a Discovery Range in the Discovery Range Sets table and link it to the Discovery Schedule.. Discovery Ranges allow the definition of specific IP ranges, and the Schedule provides the timing mechanism.

Answer

Configure the 'Exclude IP' field directly on the Discovery Schedule record.

Answer

Use the Shazzam probe parameters in the behavior definition.

Answer

Modify the MID Server cluster properties to filter IP addresses.

Question 9

What is the purpose of the 'Shazzam' phase in the Discovery process?

Accepted Answer

To determine which ports are open on the target devices.. Shazzam is the scanning phase that detects which ports are open on the target IPs.

Answer

To run patterns.

Answer

To classify the device type.

Answer

To update the CMDB.

Question 10

Which of the following is NOT a phase of the Discovery process?

Accepted Answer

Verification. The four phases are Shazzam, Classification, Identification, and Exploration. 'Verification' is not one of them.

Answer

Identification

Answer

Shazzam

Answer

Exploration

Question 11

You have multiple MID Servers in a cluster. Where do you define the capability that restricts a specific MID Server to only perform 'Windows' discovery?

Accepted Answer

MID Server record. MID Server Capabilities are used to filter which MID Servers handle specific types of discovery tasks.

Answer

Discovery Schedule

Answer

Discovery Behavior

Answer

Credential Alias

Question 12

If you want to ensure that a Discovery Schedule runs exactly once every 24 hours starting at a specific time, which setting do you use?

Accepted Answer

Run: Daily. Setting the 'Run' field to 'Daily' allows you to define the start time and frequency.

Answer

Run: On Demand

Answer

Run: Periodically

Answer

Run: Weekly

Question 13

Which record type is used to associate a credential with a specific Discovery Schedule, allowing for secure and automated credential selection?

Accepted Answer

Credential Alias. Credential Aliases allow for a decoupled way to reference credentials in schedules and behaviors.

Answer

Discovery Range

Answer

Discovery Behavior

Answer

MID Server Cluster

Question 14

You notice that Discovery is failing to detect devices in a new subnet. What is the first thing you should verify in the Discovery configuration?

Accepted Answer

The Discovery IP Range.. Ensuring the IP range is defined in the Discovery Schedule is essential for the scan to target the subnet.

Answer

The MID Server status.

Answer

The Credentials.

Answer

The Classifier record.

Question 15

When a discovery probe fails due to a timeout, what is the best way to increase the timeout value for that specific probe?

Accepted Answer

Update the probe's timeout parameter.. The 'Ecc_queue_timeout' parameter can be adjusted on the specific probe or sensor configuration.

Answer

Increase the Shazzam port wait time.

Answer

Modify the Discovery Schedule.

Answer

Change the global MID Server timeout property.

Question 16

How does Discovery handle the identification of a device that has had its IP address changed since the last discovery?

Accepted Answer

It uses Identification Rules to match the device based on hardware attributes.. Discovery uses Identification rules based on unique hardware attributes (like serial numbers) to reconcile the CI, regardless of IP changes.

Answer

It deletes the old CI and creates a new one.

Answer

It requires a manual merge in the CI list.

Answer

It fails because the IP address does not match.

Question 17

When configuring an IP Range for a Discovery Schedule, what format must be used for a block of IPs?

Accepted Answer

CIDR notation or start and end IP addresses.. Discovery supports CIDR notation (e.g., 10.10.10.0/24) or range start/end formats.

Answer

Wildcard characters like 10.10.*.*.

Answer

Subnet mask in decimal format.

Answer

A list of individual IP addresses separated by commas.

Question 18

A Discovery Schedule is configured but not running. Where is the first place you should look for errors?

Accepted Answer

Discovery Log. The Discovery Log and the ECC Queue are the primary sources for troubleshooting discovery issues.

Answer

System Logs

Answer

MID Server Logs

Answer

CMDB Health Dashboard

Question 19

What is the primary function of a MID Server in the ServiceNow environment?

Accepted Answer

To facilitate communication between the instance and the internal network.. The MID Server acts as a bridge between the ServiceNow instance and the internal network/devices.

Answer

To manage user authentication.

Answer

To host the ServiceNow application code.

Answer

To store the entire CMDB database.

Question 20

Which record type stores the credentials used by Discovery to log into target devices?

Accepted Answer

Credential record. Credentials are stored in the 'Discovery Credentials' table and referenced via Aliases.

Answer

MID Server record

Answer

Discovery Behavior

Answer

Discovery Schedule