SERVICENOW-CIS-DISCOVERY Discovery Configuration Practice Test 3 — 15 Questions

Question 1

You need to ensure that Discovery ignores a specific range of IP addresses within a larger CIDR block that is already configured. What is the most efficient configuration approach?

Accepted Answer

Add the ranges to the Excluded IP Ranges related list.. ServiceNow Discovery provides an Excluded IP Ranges related list on the Discovery Schedule (and on IP Range records) specifically to carve out addresses from a larger CIDR block without altering the parent range. Adding the target IPs to this list is the least disruptive and most efficient approach because it preserves the existing schedule and range configuration while preventing Shazzam from scanning those addresses.

Answer

Configure a Discovery Behavior to exclude the IPs.

Answer

Delete the original schedule and recreate two smaller schedules.

Answer

Create an ACL to block the IP addresses.

Question 2

During the Shazzam phase, Discovery identifies that a port is open. If the port corresponds to a configured classifier but no trigger probe is defined, what is the default behavior?

Accepted Answer

The classification phase initiates, but exploration cannot trigger.. During the Shazzam phase, if a port is open and matches a classifier but no trigger probe is defined, the classification phase will still run (to classify the CI based on the classifier), but exploration cannot be triggered because exploration relies on trigger probes to launch additional probes. Thus, the CI may be classified but not fully explored.

Answer

The CI is ignored, and the scan continues.

Answer

Discovery automatically guesses the OS type.

Answer

The scan for that IP is immediately aborted.

Question 3

An administrator needs to restrict a Discovery Schedule to only scan specific IP addresses within a subnet during off-peak hours. Which configuration fulfills this requirement?

Accepted Answer

Create a Discovery Range in the Discovery Range Sets table and link it to the Discovery Schedule.. A Discovery Range Set is the correct mechanism to define specific IP ranges (or individual IPs) that Discovery should scan. By creating a Discovery Range within a Range Set and linking it to the Discovery Schedule, the administrator can restrict scanning to only the desired IP addresses. The schedule then uses this range set to determine which IPs to target, and off-peak hours are controlled via the schedule's run time.

Answer

Configure the 'Exclude IP' field directly on the Discovery Schedule record.

Answer

Use the Shazzam probe parameters in the behavior definition.

Answer

Modify the MID Server cluster properties to filter IP addresses.

Question 4

What is the purpose of the 'Shazzam' phase in the Discovery process?

Accepted Answer

To determine which ports are open on the target devices.. The Shazzam phase in ServiceNow Discovery is responsible for port scanning. It probes the target IP addresses to determine which TCP/UDP ports are open and listening, and it also attempts to identify the basic type of service running on those ports (e.g., SSH, WMI, SNMP). This information is then used by later phases to decide which probes and patterns to run. Therefore, the correct answer is that Shazzam determines which ports are open on the target devices.

Answer

To run patterns.

Answer

To classify the device type.

Answer

To update the CMDB.

Question 5

You have multiple MID Servers in a cluster. Where do you define the capability that restricts a specific MID Server to only perform 'Windows' discovery?

Accepted Answer

MID Server record. MID Server Capabilities are used to filter which MID Servers handle specific types of discovery tasks.

Answer

Discovery Schedule

Answer

Discovery Behavior

Answer

Credential Alias

Question 6

If you want to ensure that a Discovery Schedule runs exactly once every 24 hours starting at a specific time, which setting do you use?

Accepted Answer

Run: Daily. Setting the 'Run' field to 'Daily' allows you to define the start time and frequency.

Answer

Run: On Demand

Answer

Run: Periodically

Answer

Run: Weekly

Question 7

You notice that Discovery is failing to detect devices in a new subnet. What is the first thing you should verify in the Discovery configuration?

Accepted Answer

The Discovery IP Range.. Ensuring the IP range is defined in the Discovery Schedule is essential for the scan to target the subnet.

Answer

The MID Server status.

Answer

The Credentials.

Answer

The Classifier record.

Question 8

When a discovery probe fails due to a timeout, what is the best way to increase the timeout value for that specific probe?

Accepted Answer

Update the probe's timeout parameter.. To increase the timeout value for a specific probe, you update the probe's timeout parameter. Each probe record in ServiceNow has a timeout field that specifies how long the probe should wait for a response before failing. Modifying this value directly on the probe record allows you to customize the timeout for that specific probe.

Answer

Increase the Shazzam port wait time.

Answer

Modify the Discovery Schedule.

Answer

Change the global MID Server timeout property.

Question 9

How does Discovery handle the identification of a device that has had its IP address changed since the last discovery?

Accepted Answer

It uses Identification Rules to match the device based on hardware attributes.. Discovery uses Identification rules based on unique hardware attributes (like serial numbers) to reconcile the CI, regardless of IP changes.

Answer

It deletes the old CI and creates a new one.

Answer

It requires a manual merge in the CI list.

Answer

It fails because the IP address does not match.

Question 10

When configuring an IP Range for a Discovery Schedule, what format must be used for a block of IPs?

Accepted Answer

CIDR notation or start and end IP addresses.. ServiceNow Discovery IP Range records accept either CIDR notation (e.g., 10.10.0.0/24) or an explicit start and end IP address pair. Both formats define the contiguous block Shazzam will scan, and they are the only supported input formats for a range of IPs.

Answer

Wildcard characters like 10.10.*.*.

Answer

Subnet mask in decimal format.

Answer

A list of individual IP addresses separated by commas.

Question 11

What is the primary function of a MID Server in the ServiceNow environment?

Accepted Answer

To facilitate communication between the instance and the internal network.. The MID Server acts as a bridge between the ServiceNow instance and the internal network/devices.

Answer

To manage user authentication.

Answer

To host the ServiceNow application code.

Answer

To store the entire CMDB database.

Question 12

Which record type stores the credentials used by Discovery to log into target devices?

Accepted Answer

Credential record. Credentials are stored in the 'Discovery Credentials' table and referenced via Aliases.

Answer

MID Server record

Answer

Discovery Behavior

Answer

Discovery Schedule

Question 13

During discovery, a device is identified as 'Linux'. Which component is responsible for triggering the specific pattern to gather Linux-specific data?

Accepted Answer

The Discovery Pattern.. Discovery triggers a pattern based on the classification result, which matches the Linux classifier.

Answer

The CMDB Identification rule.

Answer

The Shazzam probe.

Answer

The Classification probe.

Question 14

Why would you choose to use a 'Discovery Behavior' instead of the default behavior?

Accepted Answer

To limit or extend the probes used for specific discovery scenarios.. A Discovery Behavior is a configuration record that defines which probes and patterns run during discovery, allowing you to tailor the discovery process to specific device types or scenarios. By creating a custom Discovery Behavior, you can limit or extend the probes used, overriding the default behavior that applies to all devices. This is useful when certain devices require specialized probes or when you want to avoid unnecessary probes that could cause issues.

Answer

To update the CMDB identification rules.

Answer

To define the IP range for the discovery.

Answer

To change the schedule of the discovery.

Question 15

When a Discovery scan completes, how can you view the status of all individual IP addresses scanned by that schedule?

Accepted Answer

View the Discovery Status record.. The Discovery Status record is the central log for a Discovery run. It contains a related list called 'Discovery Device History' (or 'Devices') that lists every IP address targeted by the schedule, along with its individual status (e.g., Completed, Unreachable, Timed Out, Skipped). This provides a per-IP view of the scan outcome without needing to dig into raw queues or logs.

Answer

Look at the ECC Queue directly.

Answer

Check the CMDB list.

Answer

Check the MID Server logs.