SERVICENOW-CIS-DISCOVERY Hard Questions — 25 Difficult Questions

Question 1

A customer requires that a specific Discovery Schedule only executes during maintenance windows on weekends. Which configuration setting should be modified?

Accepted Answer

Adjust the 'Run' field to 'Periodically' and select a custom Schedule record.. Discovery Schedules control when discovery runs, and the 'Run' field determines the execution pattern. Setting it to 'Periodically' and selecting a custom Schedule record allows the schedule to run only during defined maintenance windows, such as weekends. This is the correct configuration point for time-based execution constraints.

Answer

Change the discovery pattern logic.

Answer

Update the Discovery Behavior record.

Answer

Modify the MID Server cluster affinity.

Question 2

You have a custom CI class that is not appearing in the CMDB Health Dashboard reports. What is the first step to ensure it is included?

Accepted Answer

Add the class to the CMDB Health Dashboard 'Dashboard Configuration' settings.. To include a custom CI class in CMDB Health Dashboard reports, the class must be added to the Dashboard Configuration settings. This ensures that the health metrics and reports include the custom class.

Answer

Create an ACL for the CMDB Health table.

Answer

Restart the Discovery services.

Answer

Run a full Discovery of the entire environment.

Question 3

You are parsing a multi-line string containing key-value pairs separated by colons. Which tool is most appropriate for a single step extraction?

Accepted Answer

Parse Name-Value pair. The 'Parse Name-Value pair' step is designed to automatically extract multiple key-value pairs from a text block.

Answer

Regex

Answer

Parse Delimited

Answer

XPath

Question 4

When using 'Parse JSON' for a complex structure, how do you access a nested property named 'id' inside an array 'servers'?

Accepted Answer

servers[0].id. To access a nested property named 'id' inside an array 'servers' when using 'Parse JSON', you use the syntax servers[0].id. This is standard JSONPath-like notation where the array name is followed by the index in brackets, then a dot and the property name. This correctly retrieves the 'id' value from the first element of the 'servers' array.

Answer

servers->id

Answer

servers.id

Answer

id(servers)

Question 5

Which of the following correctly describes the use of the 'Pattern Designer's' 'Search' feature?

Accepted Answer

It allows locating specific steps or variables in the pattern.. The search feature allows you to find specific steps or configurations within a large, complex pattern.

Answer

It searches for available MID servers.

Answer

It searches for CIs in the CMDB.

Answer

It searches for patterns in the store.

Question 6

A MID Server is connected to the instance but 'Discovery' is not working. What is the most likely cause related to the MID Server configuration?

Accepted Answer

The MID Server lacks the 'Discovery' capability. The MID Server might not have the 'Discovery' capability assigned to it.

Answer

The MID Server is not validated

Answer

The MID Server is too old

Answer

The proxy is down

Question 7

If a MID Server's 'Service' is running but the MID Server is 'Down' in the instance, what should you inspect?

Accepted Answer

The network connectivity and agent.config settings. If the service is up but the record is down, there is likely a network communication block or a configuration mismatch in agent.config.

Answer

The user's password in the instance

Answer

The MID Server's local disk space

Answer

The number of Discovery Schedules

Question 8

You need to add a new port to be scanned by Discovery. Which record do you update?

Accepted Answer

The IP Service record.. To add a new port to be scanned by Discovery, you update the IP Service record. IP Service records define the ports and protocols that Discovery uses during port scanning. Each IP Service record corresponds to a specific service (e.g., HTTP, SSH) and includes the port number and other attributes.

Answer

The MID Server capabilities.

Answer

The Discovery Schedule.

Answer

The Discovery Classifier.

Question 9

Which THREE things occur during the MID Server startup process?

Accepted Answer

Checking for version updates. The startup process involves loading configurations, checking for updates, and establishing an initial heartbeat.

Answer

Scanning the entire network

Answer

Creating new user accounts

Question 10

An administrator opens a MID Server record and needs to force the instance to re-evaluate whether the MID Server is still reachable and healthy without waiting for the normal heartbeat interval. Which related link on the MID Server record performs this action?

Accepted Answer

Refresh Status. Refresh Status is the related link that prompts the instance to re-check the MID Server's health and update its status without waiting for the periodic heartbeat. Restart MID Server disrupts the running process, Test MID Server focuses on authentication and connectivity testing, and Validate is used during initial configuration. Only Refresh Status provides the immediate, non-disruptive status re-evaluation the administrator needs.

Answer

Validate

Answer

Test MID Server

Answer

Restart MID Server

Question 11

A new device type is not being discovered correctly. Where should you look to ensure the classification process is prepared to handle it?

Accepted Answer

The Discovery Classifiers table.. The 'Discovery Classifiers' table contains the rules used to identify and classify devices.

Answer

The Credential Alias list.

Answer

The IP Range definitions.

Answer

The MID Server configuration.

Question 12

You are troubleshooting a MID Server that is unable to process discovery tasks. After reviewing the MID Server logs, you suspect that the issue is related to the MID Server's user account permissions. Which two roles must be assigned to the MID Server user to allow it to perform discovery? (Choose two.)

Accepted Answer

discovery. The MID Server user must have the 'mid_server' role to interact with the instance and the 'discovery' role to perform Discovery tasks. These two roles provide the necessary permissions without granting excessive privileges. Other roles like 'admin' or 'discovery_admin' are not required and should be avoided for security reasons.

Answer

admin

Answer

discovery_admin

Answer

itil

Question 13

Which THREE of the following are key components for configuring a successful Discovery?

Accepted Answer

MID Server. Schedules, MID Servers, and Credentials are the foundational blocks for any discovery project.

Answer

Knowledge Base

Answer

Incident Management

Question 14

A MID Server is installed behind a proxy. Which file must be modified to ensure the MID Server can reach the instance?

Accepted Answer

agent.config. The agent/conf/agent.config file contains the network proxy settings required for the MID Server to tunnel traffic to the instance.

Answer

proxy.xml

Answer

mid_server.properties

Answer

wrapper.conf

Question 15

What is the effect of setting 'mid.log.level' to 'debug' in the agent.config file?

Accepted Answer

It provides more detailed troubleshooting information in the agent logs. Setting the log level to debug increases the granularity of the logs, useful for troubleshooting, but generates large files.

Answer

It increases the polling speed

Answer

It enables automatic error reporting

Answer

It forces the MID Server to re-validate

Question 16

You are migrating from legacy horizontal discovery to Service Mapping. How should you handle the transition of existing CMDB CI relationships?

Accepted Answer

Ensure existing CIs have stable identification attributes so Service Mapping can build on them.. Service Mapping relies on existing identification rules; existing relationships should be verified for consistency.

Answer

Create a new CMDB class for all Service Mapping CIs.

Answer

Force all CIs to be re-discovered by the same MID server.

Answer

Delete all existing relationships before starting.

Question 17

If a MID Server is configured to use an encrypted credential but it is failing, what is the most likely cause?

Accepted Answer

The credential alias is not associated with the MID Server or its policy. Encrypted credentials in ServiceNow Discovery rely on credential aliases that must be explicitly associated with the MID Server or its MID Server policy. If the alias is not linked, the MID Server cannot decrypt or use the credential, causing authentication failures. This is the most common configuration oversight when encrypted credentials fail.

Answer

The MID Server is running on Windows

Answer

The MID Server is not in a cluster

Answer

The MID Server needs to be restarted

Question 18

A MID Server reports 'Up' but is not processing any jobs. What is the most likely cause?

Accepted Answer

The MID Server is paused. If a MID Server is paused, it will remain up but will not poll for work from the ECC Queue.

Answer

The MID Server is in a cluster

Answer

The MID Server is not validated

Answer

The MID Server is missing the 'Discovery' capability

Question 19

If you need to ensure that a Discovery scan does not impact network traffic, what is a recommended best practice?

Accepted Answer

Distribute discovery scans across multiple schedules and MID servers.. Staggering discovery schedules and using IP ranges to distribute the load across time and MID servers is the standard practice.

Answer

Set the discovery to run at night.

Answer

Disable the Shazzam phase.

Answer

Limit the scan to one IP per hour.

Question 20

You are troubleshooting a scenario where Discovery is creating a new CI instead of updating an existing one. You have verified the serial number is correctly identified. What is the most likely cause within the Identification Rule?

Accepted Answer

The 'Required' checkbox is unchecked for the Serial Number attribute in the Identifier Entry.. If the identification rule has 'Required' fields that do not match the incoming payload, the IRE cannot successfully match the existing CI.

Answer

The CI Class is not in the Discovery Schedule.

Answer

The 'Sync' flag is disabled in the Discovery Schedule.

Answer

The Discovery Pattern is set to 'Create' mode.