CIS-DF · domain
Governance
Governance on the CIS-DF exam covers how ServiceNow keeps CMDB and CSDM data trustworthy over time: CMDB Health Dashboard, Data Certification, and CMDB Data Governance. Questions are scenario-based, asking which application or module hosts a feature, how remediation tasks are routed and closed, and how scheduled certification campaigns are configured for record owners.
Focused practice
Practice Governance questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about Governance
Be able to locate CMDB Health, Data Certification, and CMDB Data Governance within the CMDB application, then configure a governance policy or certification schedule end to end. The critical thing is knowing which module runs the check and how remediation tasks are assigned and closed.
Identifying that CMDB Health Dashboard, Data Certification, and CMDB Data Governance live in the CMDB application
Configuring CMDB Data Governance policies that generate remediation tasks for missing or incorrect CI attributes
Running on-demand CMDB Health completeness checks to produce audit evidence for a specific rule
Setting up Data Certification schedules so application owners review their records quarterly
Watch out for
Common Governance exam traps
- ▸Assuming CMDB Data Governance is a separate plugin or application rather than part of the CMDB application alongside CMDB Health.
- ▸Forgetting that remediation tasks need assignment, ownership, and closure workflow configured, so generated tasks go unactioned.
- ▸Confusing Data Certification schedules with CMDB Health scores; certification is owner attestation, not automated metric calculation.
Question index
All Governance questions (56)
Click any question to see the full explanation, or start a practice session above.
An enterprise wants to ensure that data stewards are automatically notified when duplicate CIs are detected by the Identification and Reconciliation Engine (IRE). How can this governance requirement be streamlined?
Medium2An organization wants to configure remediation rules so that when a CMDB Health Correctness anomaly (such as a duplicate CI) is identified, a remediation task is automatically generated and assigned to the correct data owner. Where are these remediation rules configured?
Hard3An administrator needs to ensure that historical changes to data governance remediation tasks are easily tracked. Which platform feature automatically tracks changes to task work notes, state transitions, and assignments?
Medium4Which CMDB Health metric category evaluates whether CIs have mandatory fields populated, such as Assigned to, Managed by, and Support Group?
Medium5An auditor requires proof that all discovered Linux servers have a validated business justification attribute. The team uses CMDB Data Governance to enforce this. How can the administrator prove to the auditor that the policy is actively running and enforcing this rule?
Hard6An administrator needs to configure score weightings on the CMDB Health Dashboard so that Correctness carries 50% weight, Completeness carries 30%, and Compliance carries 20%. Where is this configured?
Hard7Which TWO actions can be taken from the CMDB Data Governance application interface? (Choose two.)
Medium8A governance team wants to ensure that CIs without valid IP addresses or MAC addresses are flagged in network-connected classes. Where can this specific validation rule be configured?
Medium9What is the primary purpose of the 'Audit' functionality within ServiceNow Asset and CMDB management?
Easy10A CMDB administrator notices that multiple CIs have duplicate records with identical serial numbers due to conflicting integration sources. Which CMDB Health metric evaluates this specific condition?
Medium11Which THREE actions occur when a Data Certification task is assigned to a CI owner? (Choose three.)
Hard12Which TWO types of metrics are evaluated under the CMDB Health framework? (Choose two.)
Medium13When setting up CMDB data ownership, which field on a CI record is typically used to designate the individual accountable for the physical or logical asset's data quality?
Easy14An auditor needs to verify when a critical business application CI was last updated by an authorized discovery source versus a manual update. Which CMDB feature tracks the provenance and history of attribute updates for governance review?
Easy15A CMDB administrator is configuring a Data Certification campaign to verify the accuracy of CI attributes. The administrator wants to ensure that only CIs that have not been certified in the last 6 months are included in the campaign. Which ServiceNow feature should be used to filter the CIs?
Medium16An organization notices that custom application CIs are failing compliance checks because the governance policy checks standard fields that do not apply to custom apps. How should an administrator resolve this while maintaining governance standards?
Hard17An organization wants to configure CMDB Data Governance remediation tasks so that when a completeness policy fails for a high-priority server, a task is automatically assigned to the data owner. Where are these remediation workflows and task generation parameters configured?
Hard18An administrator needs to track overall CMDB data quality using standardized metrics out of the box. Which specific dashboard should they access in ServiceNow to view scores for Completeness, Correctness, Compliance, and Freshness?
Easy19An enterprise wants to establish clear data ownership and automate the lifecycle management tasks of archiving and retiring old hardware servers. Which native ServiceNow tool should be implemented to govern this process?
Easy20An administrator is reviewing the Correctness score on the CMDB Health Dashboard and notices a low score caused by multiple CIs having no relationships to any business services. Which specific Correctness metric is flagging this issue?
Hard21A CMDB administrator is configuring CMDB Data Governance policies to enforce data quality. The administrator wants to define actions that occur when a policy is violated. Which two actions can be configured in a CMDB Data Governance policy? (Choose two.)
Hard22A CMDB manager wants to review the overall health of the CMDB across Completeness, Correctness, and Compliance. Which ServiceNow module should they navigate to first?
Easy23What is the primary role of a 'Data Owner' in the context of ServiceNow CMDB governance?
Easy24An administrator needs to configure a Data Certification schedule to ensure that Application owners review their respective records quarterly. Which module is used to set up these recurring certification campaigns?
Medium25When planning a CMDB Governance strategy, which THREE key stakeholder groups should be actively involved in defining data ownership and data quality rules? (Choose three.)
Hard26Which TWO configurations can be adjusted within CMDB Health Dashboard metric settings? (Choose two.)
Medium27Which TWO metrics are categorized under CMDB Health Correctness? (Choose two.)
Medium28A security audit reveals that unauthorized users are modifying critical CI attributes directly on form views. Which ServiceNow platform governance feature can restrict write access to specific CI attributes based on user roles and data classification?
Hard29What is the main benefit of establishing CMDB data stewardship roles within an enterprise?
Easy30A company implements a policy where department heads must review their server assets every six months. Which module supports scheduling this periodic verification campaign?
Medium31Which TWO metrics are standard components of the CMDB Health Dashboard overview? (Choose two.)
Easy32What is the primary function of the CI Class Manager in relation to CMDB governance?
Easy33A company is preparing for an ISO compliance audit of its IT infrastructure. The auditor asks to see historical records of who approved changes to critical server ownership attributes over the past year. Which ServiceNow feature provides this verifiable evidence?
Hard34An enterprise requires that all newly discovered servers must have a valid cost center before being classified as operational. How can this requirement be automated without writing custom scripts?
Medium35Which TWO benefits are gained by scheduling regular Data Certification campaigns in a mature CMDB? (Choose two.)
Medium36A company discovers that multiple discovery sources are overwriting authoritative manual updates to server asset tags. Which governance mechanism should be configured to protect specific attributes from being updated by automated discovery?
Medium37Which TWO methods can be used to assign data ownership to configuration items in the CMDB to support governance and accountability? (Choose two.)
Medium38A CMDB administrator needs to ensure that all Configuration Items (CIs) of class 'Server' have a value in the 'Environment' field. The administrator wants to prevent CIs from being marked as 'Operational' if this field is empty. Which ServiceNow feature should be used to enforce this requirement?
Medium39Which ServiceNow application houses the CMDB Health Dashboard, Data Certification, and CMDB Data Governance features?
Easy40When configuring CMDB Data Governance policies, which THREE rule criteria types can be evaluated against CI records? (Choose three.)
Hard41A governance team wants to ensure that no CI is created without a populated 'Environment' field (e.g., Production, Test, Development). Which feature should be used to enforce this rule at the point of data entry or integration?
Medium42An administrator configures a CMDB Data Governance policy to check for missing support groups on business applications. When the policy runs, it creates remediation tasks. How can the administrator ensure these tasks are automatically closed when the data is corrected by a user?
Hard43Which TWO practices represent effective CMDB governance strategies for maintaining data quality? (Choose two.)
Medium44When setting up CMDB Data Governance, which THREE elements must be defined for a custom data policy or rule? (Choose three.)
Hard45A company requires that all production Linux servers must have an assigned owner and a valid support group before being eligible for operational use. Which CMDB governance feature can automatically evaluate these specific data requirements and fail or flag non-compliant CI inserts?
Medium46An auditor requests evidence that all critical databases have an identified support group. Which built-in CMDB feature allows an administrator to quickly run an on-demand check for this specific completeness rule without waiting for scheduled dashboard refreshes?
Medium47A company notices that hundreds of stale server records are polluting the CMDB, negatively affecting health scores. Rather than deleting them manually, what is the best practice governance workflow to handle stale CIs?
Medium48An organization wants to ensure that no duplicate CIs are ever inserted into the cmdb_ci table by API integrations or manual imports. Which ServiceNow engine natively enforces this governance rule?
Hard49Which THREE factors should an administrator consider when configuring CMDB Health Inclusion Rules? (Choose three.)
Hard50Which dashboard component in the CMDB Health Dashboard displays the ratio of CIs that have missing mandatory attributes?
Easy51An administrator notices that the CMDB Health background jobs are running during peak business hours and impacting performance. Where can the schedule for CMDB Health metric calculations be modified?
Hard52An enterprise is audited for CSDM compliance. The CSDM Data Foundations Dashboard indicates that application services are not properly connected to technical services. What is the governance impact of this structural gap?
Hard53Which TWO actions can be performed directly from the CMDB Health Dashboard when investigating health metrics? (Choose two.)
Medium54Which role is typically required to manage and configure CMDB Data Governance policies and remediation definitions?
Easy55Which TWO core benefits does the CSDM Data Foundations Dashboard provide to an organization? (Choose two.)
Easy56A team wants to exclude test and lab servers from being evaluated by strict production CMDB Health completeness rules. What is the best practice method to handle this in ServiceNow?
EasyOther domains
All CIS-DF exam domains
Frequently asked questions
- What does the Governance domain cover on the CIS-DF exam?
- Be able to locate CMDB Health, Data Certification, and CMDB Data Governance within the CMDB application, then configure a governance policy or certification schedule end to end. The critical thing is knowing which module runs the check and how remediation tasks are assigned and closed.
- How many questions are in this domain?
- This page lists all 56 Governance questions in the CIS-DF question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Governance questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.