CIS-ITSM Hard Questions — 25 Difficult Questions

Question 1

An organization defines a multi-attribute identification rule for the Linux Server class using 'serial_number' and 'ip_address'. During a payload execution, the IRE finds an existing CI matching the serial number, but the IP address has changed. How does the IRE process this payload?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

It updates the existing CI's IP address and any other payload attributes, treating it as the same physical asset based on the matching rule entry.. Multi-attribute identification rules evaluate criteria as an ordered set or rule criteria group. If the primary attributes match or if the rule specifies matching behavior, the existing CI is updated rather than creating a duplicate.

Answer

It flags the payload in the IRE Error Dashboard as an identification conflict requiring manual resolution.

Answer

It creates a new CI record because the IP address attribute does not match the historical value.

Answer

It deletes the existing CI and inserts a new one with the updated attributes.

Question 2

An administrator needs to evaluate the overall health of the CMDB, specifically measuring the percentage of CIs that have not been updated or verified within the last 90 days. Which CMDB Health metric addresses this?

Accepted Answer

Staleness (Compliance metric). CMDB Health consists of Completeness, Correctness, and Compliance. Compliance measures metrics such as audits and freshness/staleness based on last update times.

Answer

Orphans (Correctness metric)

Answer

Audit (Completeness metric)

Answer

Duplicate CIs (Correctness metric)

Question 3

Which THREE of the following are benefits of using CI Class Manager? (Choose three.)

Accepted Answer

Centralized viewing and editing of class-specific identification rules.. CI Class Manager provides a centralized console to manage classes, view class hierarchies, and configure identification/reconciliation rules.

Answer

Automatic execution of incident management triage workflows for failed discoveries.

Answer

Direct editing of system-level Java source code for Discovery patterns.

Question 4

Which THREE of the following statements are true regarding Identification and Reconciliation Engine (IRE) processing? (Choose three.)

Accepted Answer

IRE processing can be invoked via script using the CMDBEngine API or JSON payloads.. IRE uses identification rules to find CIs, applies reconciliation rules to govern attribute updates, and processes payloads through APIs or Discovery.

Answer

IRE relies solely on the sys_id attribute to match and update existing Configuration Items.

Answer

IRE automatically deletes any CI that has not been updated within 30 days.

Question 5

An enterprise wants to track availability metrics across different geographies for a global email service offering. Each region has a different uptime target and maintenance window. How should the implementation specialist configure this in ServiceNow SPM?

Accepted Answer

Create separate Service Offerings under the parent email service for each region. Different geographic commitments for the same service require separate Service Offerings, each with its own SLA and availability definitions.

Answer

Attach multiple SLA definitions to a single Business Service record

Answer

Create multiple Service Portfolios with domain separation enabled

Answer

Modify the base system SLA workflow using dynamic script includes

Question 6

A multinational enterprise uses Service Portfolio Management and needs to ensure that service commitments reflect underlying vendor Operational Level Agreements (OLAs). Where should an administrator link vendor OLAs to ensure compliance tracking within ServiceNow?

Accepted Answer

On the Service Offering record via related lists for commitments or SLAs. OLAs underpin SLAs and service offerings by defining internal or vendor commitments required to meet the service offering goals.

Answer

Inside the CSDM Relationship builder as a dynamic CI link

Answer

Within the Catalog Item workflow definition

Answer

Directly on the Service Portfolio record as child attachments

Question 7

A Problem Coordinator wants to create a Problem record from an existing Incident. By default, which UI Action on the Incident form initiates this relationship and populates related fields?

Accepted Answer

Create Problem. The 'Create Problem' UI Action on the Incident form creates a new Problem record and maps relevant fields such as Short Description and Configuration Item.

Answer

Associate to Problem

Answer

Create Major Incident

Answer

Promote to Problem

Question 8

During an import of server CIs, duplicate records are being created because different data sources send serial numbers in different cases (uppercase vs lowercase). Which configuration in Identification and Reconciliation Engine (IRE) will prevent this issue?

Accepted Answer

Enable case-insensitive matching on the identifier entry for the Serial Number attribute.. IRE identification rules can utilize preprocessing scripts or transform rules, but more commonly, identifier entries are configured with normalization or matching criteria, or payload transformers to normalize case sensitivity before matching.

Answer

Create a custom CMDB Data Manager policy to merge duplicates automatically.

Answer

Set the Reconciliation Rule to discard updates from the secondary data source.

Answer

Modify the Identification Rule weight to a higher number.

Question 9

While reviewing the CMDB Correctness score, an administrator notices a high count of orphan CIs. What is the definition of an orphan CI in the context of CMDB Health Correctness?

Accepted Answer

A CI that has no relationships defined where relationships are expected according to class configuration rules.. An orphan CI is a Configuration Item that belongs to a class that is expected to have relationships (such as containing or running on), but currently has no relationships defined.

Answer

A CI that has not been updated by any discovery source or manual import in over 90 days.

Answer

A CI record that shares the exact same serial number and name as another active CI record.

Answer

A CI whose assigned support group or managed-by user no longer exists in the sys_user table.

Question 10

Which THREE of the following metrics are tracked under the Correctness pillar of the CMDB Health Dashboard? (Choose three.)

Accepted Answer

Relationships (Invalid relationships). Correctness tracks data integrity problems, specifically Duplicates, Orphans, and Invalid Relationships or Stale references (depending on configuration, primarily Duplicates and Orphans). Let's list the valid correctness metrics.

Answer

Staleness

Answer

Required fields populated

Question 11

An administrator creates a custom identification rule for a new class. The rule has two entries: Entry 1 uses 'serial_number' (weight 100), and Entry 2 uses 'mac_address' (weight 50). When a payload arrives containing both attributes, how does the IRE evaluate the rule entries?

Accepted Answer

The IRE evaluates Entry 1 first. If a match is found, it uses that CI; if no match is found, it proceeds to evaluate Entry 2.. IRE evaluates identification rule entries in order of their priority or weight, or matches using the first matching entry based on configuration criteria.

Answer

The IRE averages the weights and creates a new CI if the combined score is below 75.

Answer

The IRE rejects the payload because conflicting matching criteria are defined within the same rule.

Question 12

A Major Incident is declared. Which THREE of the following actions are automatically performed or enabled by the Major Incident Management plugin?

Accepted Answer

Access to the Major Incident Workbench.. Major Incident Management functionality provides specific workflows to handle high-impact incidents.

Answer

Automatic assignment to the Service Desk manager.

Answer

Automatic closure of all related incidents.

Question 13

When configuring Maintenance Schedules in ServiceNow Change Management, what is the effect of defining a Maintenance Schedule versus a Blackout Schedule?

Accepted Answer

Maintenance schedules specify approved windows for changes, while blackout schedules specify prohibited periods. Maintenance schedules define when changes are allowed or preferred, whereas blackout schedules define when changes are prohibited.

Answer

Maintenance schedules are only for emergency changes, while blackout schedules apply to normal changes

Answer

There is no functional difference; they are interchangeable terms in ServiceNow

Answer

Maintenance schedules automatically close change tasks, while blackout schedules trigger conflict warnings

Question 14

An IT administrator is configuring Service Level Agreements (SLAs) for a critical cloud infrastructure service. The requirement is that the SLA pause condition should trigger whenever a customer is actively providing requested information, but the time elapsed during the pause must be completely excluded from the duration calculation. Which SLA configuration element achieves this behavior in ServiceNow?

Accepted Answer

SLA Definition Pause Condition. Pause conditions in SLA Definitions halt the timer when met, and the duration calculation automatically excludes the paused duration from the overall percentage calculation.

Answer

Retroactive Start calculation override

Answer

SLA Workflow timer extension

Answer

Business Rule intercepting task state changes

Question 15

When configuring financial modeling and cost roll-ups for a Service Offering in SPM, which THREE data sources can contribute to the calculated cost of the offering? (Choose three.)

Accepted Answer

Direct expense lines associated with the service offering CI. Financial models in SPM can aggregate costs from underlying CIs, expense lines, and related operational expenses.

Answer

Syslog error count thresholds

Answer

Client browser cookies and cache session logs

Question 16

A Problem record is associated with a Change Request via the 'Caused by change' field. When the Change Request is cancelled, a stakeholder wants the linked Problem record to automatically transition back to the 'Assess' state and notify the problem assignee. How should this be configured?

Accepted Answer

A Business Rule on the Change Request table that evaluates state changes and updates linked Problem records. A Business Rule on the Change Request table checking if state changed to Cancelled can query related problems and update their state and trigger an event.

Answer

A Data Lookup definition on the task table

Answer

A Client Script on the Problem table checking parent change status

Answer

A UI Policy on the Change form

Question 17

An administrator is configuring SLA Definitions for Incident Management. They need the SLA timer to pause whenever an incident is placed in the 'Awaiting Vendor' state. How should this be configured?

Accepted Answer

Set the Pause condition to State is Awaiting Vendor.. SLA Pause Conditions define when the SLA clock stops ticking, typically mapped to specific states such as 'Awaiting User' or 'Awaiting Vendor'.

Answer

Modify the Incident workflow to suspend timers.

Answer

Set the Stop condition to State is Awaiting Vendor.

Answer

Create a Business Rule to pause task_sla records.

Question 18

An organization wishes to customize the Risk Assessment questionnaire to include custom branching logic based on the user's previous answer. Which module is used to design and manage these assessments?

Accepted Answer

Assessment Designer (survey_designer). Assessments (Assessment Designer, survey_designer) are used to configure risk assessment questionnaires and categories in ServiceNow.

Answer

Service Catalog Item Builder

Answer

Form Designer

Answer

Workflow Studio

Question 19

An enterprise requires that when a Major Incident is declared, a dedicated Child Incident task is automatically created for each affected business service found in the Business Service CI relationship. Which out-of-the-box feature supports this specialized workflow?

Accepted Answer

Major Incident Management (MIM) Workbench. Major Incident Management (MIM) includes specialized workflows and communication plans to handle major incidents, including child incident management.

Answer

Service Level Agreement Engine

Answer

Data Lookup Definitions

Answer

Incident Templates

Answer

Outbound REST Message

Question 20

An organization wants to configure Change Risk Assessment such that certain specific answers to questionnaire items instantly escalate the risk to 'High', regardless of other scores. How can this be achieved?

Accepted Answer

Configuring Risk Assessment Conditions with specific Question/Answer thresholds. Risk Assessment threshold rules or custom risk calculation script includes allow overriding the total calculated risk based on specific critical answers.

Answer

Writing a client script on the Change Request form

Answer

Creating a Data Policy on the Assessment Instance table

Answer

Editing the Risk Assessment UI Macro