314 questions total · 5pages · All types, answers revealed
When a MID Server is part of a cluster, what happens to the ECC queue items if one MID Server goes down?
Clusters allow for automatic failover of queued work.
Why this answer
If load balancing is configured, the other nodes in the cluster take over the work.
Which TWO of the following are potential side effects of an improperly configured Reconciliation Rule?
Strict rules can prevent valid sources from updating data.
Why this answer
Improper rules lead to data flip-flopping or legitimate updates being rejected.
If a pattern step is configured to use a 'Variable' as an input, but that variable was never defined, what is the result?
References to missing variables result in runtime errors.
Why this answer
The pattern will throw an execution error because the reference is missing.
You need to ensure that Discovery ignores a specific range of IP addresses within a larger CIDR block that is already configured. What is the most efficient configuration approach?
This is the native feature for this requirement.
Why this answer
The Excluded IP Ranges related list on the Discovery Schedule record allows you to explicitly ignore specific IPs.
If you need to define a new CI attribute that should be populated by Discovery, which task is mandatory?
Without the correct permissions in the reconciliation rule, the Discovery data source cannot update the attribute.
Why this answer
If Discovery is to populate the attribute, you must add it to the pattern and ensure that no Reconciliation Rule prevents the 'Discovery' data source from writing to it.
What is the purpose of the 'Table' attribute in the 'Identification' step?
The Table field links the pattern's identification logic to the specific CI class.
Why this answer
The 'Table' attribute defines which CMDB class the identified CI belongs to.
What happens to the ECC Queue if the MID Server is unable to connect to the ServiceNow instance?
The MID Server pulls 'ready' records when it checks in.
Why this answer
If the MID is down, the ECC Queue records remain in the 'ready' state on the instance and wait until the MID reconnects to process them.
A MID Server is failing to upgrade. What should you check first?
These files detail the installation errors for the binary.
Why this answer
The upgrade logs in the agent/logs directory provide insight into why an upgrade process failed (e.g., permissions, disk space).
Which TWO file types are typically located in the MID Server 'agent' directory?
These are essential for MID Server configuration.
Why this answer
The agent directory contains configuration files and the binary scripts for starting the service.
When a CI record is 'Orphaned' according to the CMDB Health Dashboard, what does this mean?
Orphaned CIs are those that exist in the CMDB but lack defined connections to other CIs.
Why this answer
An Orphan CI is a CI that has no incoming or outgoing relationships, which is often unexpected for core infrastructure components.
What is the primary way to check if a MID Server is communicating correctly with the ServiceNow instance?
Status shows connection state.
Why this answer
The MID Server status on the 'MID Server' list view shows 'Up' if it is connected.
You need to add a new CI type to an existing horizontal pattern. Which step must be performed in the Pattern Designer to ensure the CI is linked to the parent process?
The 'Related CI' step establishes relationships between the discovered CI and existing infrastructure.
Why this answer
To link a CI to a parent process in a pattern, you must define the relation in the Identification section using the 'Related CI' step.
What is the purpose of the 'Pre-sensor' script?
Pre-sensor scripts modify the data before it reaches the CMDB identification engine.
Why this answer
Pre-sensor scripts allow developers to manipulate data before it is processed by the identification engine.
A MID Server is configured to scan a network segment but the scan fails with an 'Access Denied' error. Where should you look to ensure the MID Server is using the correct credentials?
Discovery logs capture the authentication attempts and failures.
Why this answer
The Discovery Logs provide the specific execution details, including which credentials were tried and rejected.
You notice a MID Server has the status 'Down' in the ServiceNow instance, but the service is running on the host. What is the first step to troubleshoot?
The agent log contains specific error messages regarding connectivity to the instance.
Why this answer
Checking the agent log is the standard first step for identifying why the MID Server is failing to heartbeat or authenticate.
When a Discovery scan completes, how can you view the status of all individual IP addresses scanned by that schedule?
This is the primary way to view execution results.
Why this answer
The 'Discovery Status' record provides a detailed list of all devices scanned, including errors and results.
Which TWO scenarios indicate that an identification rule is misconfigured?
This is a classic symptom of poor ID rules.
Why this answer
If multiple CIs are created when one should exist, or if updates are applied to the wrong CI, the rules are likely wrong.
During the Identification phase, you notice that multiple CI records are being created for the same physical server. Which component should you verify to ensure the Identification engine correctly merges these attributes?
Identification Rules are critical for matching incoming data to existing CIs.
Why this answer
Identification Rules define the criteria used by the Identification and Reconciliation Engine (IRE) to determine if a CI already exists, preventing duplicates.
Which of the following correctly describes the use of the 'Pattern Designer's' 'Search' feature?
The search bar helps navigate complex step sequences.
Why this answer
The search feature allows you to find specific steps or configurations within a large, complex pattern.
Which TWO of the following are key components of the Pattern Designer?
The panel is used to inspect step variables.
Why this answer
The designer consists of the step palette and the execution/debug environment.
You are troubleshooting a MID Server that is stuck in the 'Validated' state but not picking up jobs. You notice the 'MID Server Issues' list reports a 'Clock drift' error. What is the recommended resolution?
Synchronizing the host time to an accurate NTP source resolves clock drift errors.
Why this answer
Clock drift indicates the MID Server host time is out of sync with the instance, causing authentication issues with the ECC Queue.
When using the 'Parse Delimited' step, what is the 'Separator' attribute used for?
The separator allows the engine to split text into columns for mapping.
Why this answer
The separator defines the character (e.g., comma, pipe) that splits the columns in the text.
Which action should you perform before modifying a default Discovery Pattern?
Creating a copy ensures your custom logic is preserved during platform updates.
Why this answer
To avoid losing changes during upgrades, you must make a copy of the pattern before modification.
What is the maximum number of times a Discovery Schedule can run?
There is no hard limit on the number of runs.
Why this answer
Discovery schedules can be configured to run as often as required by the system capability.
Which TWO of the following are primary functions of a Discovery Behavior?
Behaviors group probes.
Why this answer
Behaviors dictate which probes to use and can be used to define customized sets of exploration tasks.
Which THREE pieces of information are required for a MID Server to communicate with the ServiceNow instance?
The MID server must know where to connect.
Why this answer
Connectivity requires a valid URL, authentication (as configured via the MID server record), and the ability to reach the instance via proxy/firewall.
When configuring a custom probe, what is the best practice for ensuring that the probe executes only on relevant devices?
Triggers ensure correct execution.
Why this answer
Linking the probe to a specific 'Classifier' or 'Pattern' ensures it only runs when the device type matches.
What does the 'Debug' mode in the Pattern Designer require to function?
The debugger needs data from a real host to simulate execution.
Why this answer
Debug mode requires a target node to execute the pattern against, which is provided by a Discovery status record.
Which THREE of the following items are stored in the Credential record?
Required for authentication.
Why this answer
Credential records typically store Usernames, Passwords, and SSH keys/certificates.
What is the result of using a 'Delimiter' of '\n' in a 'Parse Delimited' step?
The newline character is the standard delimiter for row separation.
Why this answer
The '\n' (newline) delimiter splits the text into separate rows.
Which of the following describes the function of the 'Discovery' section in a pattern?
The discovery section contains steps to run OS commands and collect data.
Why this answer
The discovery section is where actual commands are executed on the host.
When configuring a Discovery Behavior, what is the primary purpose of defining 'Probes' within the behavior?
Behaviors group probes for specific discovery goals.
Why this answer
Behaviors are collections of probes that dictate the scope of the discovery execution.
What does 'Discovery' in ServiceNow primarily populate?
Discovery populates the CMDB.
Why this answer
Discovery is designed to populate the Configuration Management Database (CMDB).
You want to run a command only if a previous step was successful. How is this configured?
Step conditions allow for logic-based execution flow.
Why this answer
You can use the 'Condition' field on a step to check the state of previous steps.
A new device type is not being discovered correctly. Where should you look to ensure the classification process is prepared to handle it?
Classifiers handle the logic.
Why this answer
The 'Discovery Classifiers' table contains the rules used to identify and classify devices.
Which THREE of the following items are considered 'CI Identification' best practices?
Complex rules increase processing time and error potential.
Why this answer
Best practices for identification focus on stability, uniqueness, and minimizing rule sprawl.
Which THREE of the following are key components for configuring a successful Discovery?
Defines the 'how' and 'where'.
Why this answer
Schedules, MID Servers, and Credentials are the foundational blocks for any discovery project.
When the Identification and Reconciliation Engine (IRE) processes a payload, which THREE components determine if a CI is updated or created?
Identifies the origin of the data, which is checked by reconciliation rules.
Why this answer
The IRE relies on Identification Rules, Reconciliation Rules, and the payload content to make decisions.
Which ServiceNow feature allows you to visualize the flow of data from Discovery into the CMDB, helping to debug why a CI attribute was populated with a specific value?
IRE logs provide granular detail on how the identification process processed incoming discovery data.
Why this answer
The 'CMDB Workspace' or 'CI Identification and Reconciliation' logs allow you to see the payload sent to the IRE.
How can you prevent a specific MID Server from being used for Discovery?
Capabilities restrict the type of work assigned.
Why this answer
Removing the 'Discovery' capability effectively prevents the MID Server from being assigned discovery jobs.
Which TWO of the following are considered 'best practices' for pattern design?
Documentation helps other developers.
Why this answer
Keeping patterns modular and documenting the steps are essential practices.
You need to store the result of a WMI query in a variable that can be accessed across different sections of the pattern. Which step type should you use?
Set Variable is the standard way to persist data into a named variable for later use.
Why this answer
The 'Set Variable' step allows you to capture output from previous steps and assign it to a variable that persists throughout the pattern execution.
If a MID Server is 'Down', what happens to Discovery schedules assigned to it?
No MID means no execution.
Why this answer
Discovery will not run if the assigned MID server is offline, as there is no path to the target network.
Where can you view the 'Version' of the MID Server?
The version field is populated on the record.
Why this answer
The MID Server record provides the current version of the software.
How does Discovery handle the identification of a device that has had its IP address changed since the last discovery?
Identification rules handle reconciliation.
Why this answer
Discovery uses Identification rules based on unique hardware attributes (like serial numbers) to reconcile the CI, regardless of IP changes.
You need to ensure that Discovery only scans specific ports for a particular set of Linux servers. Where should you configure this customized port list to override the default Shazzam probe settings?
Behaviors allow you to associate specific Port Probes with a discovery process.
Why this answer
Port Probes are defined within a Discovery Behavior, which allows you to specify a custom Port Probe record containing the specific ports to be scanned.
Which UI tool is used to visualize the pattern execution flow?
The Pattern Designer provides the graphical interface for building and debugging patterns.
Why this answer
The Pattern Designer includes a graphical interface that displays the steps and flow of the pattern.
During Discovery, a switch is identified, but its related interfaces are not appearing in the CMDB. What is the first thing you should check?
If the IRE cannot identify the interface CI, it cannot create the relationship link.
Why this answer
If the CI is identified but relationships are missing, the identification rule for the relationship (contained in the payload) is usually the cause.
Which THREE actions should you take when troubleshooting a discovery process that is failing to populate the 'Serial Number' field for a specific class of routers?
The rule must include the serial number as an identifier for the match to work.
Why this answer
Troubleshooting involves verifying the pattern execution, the identification rule logic, and the reconciliation rule settings.
You notice that Discovery is creating duplicate CIs for Windows servers. Which CMDB feature should you investigate first to ensure Discovery correctly identifies existing CIs?
Identification rules are the primary mechanism for matching and preventing duplicates.
Why this answer
The Identification and Reconciliation Engine (IRE) uses identification rules to prevent duplicates by matching incoming data against existing CIs based on defined criteria.
When using multiple MID Servers for load balancing, what is the best way to group them?
Clusters are the correct mechanism for load balancing.
Why this answer
MID Server Clusters allow you to group MID Servers for load balancing and failover.
Which TWO of the following are true about the 'Discovery Status' module?
Shows Shazzam/Class/etc.
Why this answer
It provides a historical log of all discovery runs and detailed information about what occurred during each phase.
You notice that Discovery is failing to detect devices in a new subnet. What is the first thing you should verify in the Discovery configuration?
The range must exist for discovery to trigger.
Why this answer
Ensuring the IP range is defined in the Discovery Schedule is essential for the scan to target the subnet.
Which TWO of the following are valid CI relationship types that can be created in a pattern?
A common relationship type.
Why this answer
Patterns support standard CMDB relationships like 'Runs on' or 'Depends on'.
Which TWO of the following can be used to troubleshoot a MID Server that is not responding?
Provides detailed runtime errors.
Why this answer
Checking the MID Server logs and the ECC Queue status are the primary ways to diagnose communication issues.
What is the primary function of the 'CI Class Manager'?
It provides a unified interface for defining and managing the configuration of all CMDB CI classes.
Why this answer
CI Class Manager is the centralized UI for managing class hierarchy, identification rules, and reconciliation rules.
You need to ensure that a specific MID Server only performs WMI discovery and ignores SSH tasks. How do you configure this?
Capabilities filter the types of work a MID Server will pull from the ECC Queue.
Why this answer
Capabilities are used to restrict the types of tasks a MID Server will accept. Removing the SSH capability ensures the MID Server ignores those jobs.
What happens in the CMDB when a 'Reconciliation Rule' identifies a conflict between two data sources?
Reconciliation rules prioritize data sources; higher priority sources successfully update the attribute.
Why this answer
The rule determines which source 'wins' based on the priority value assigned to the data sources; the loser is ignored for that attribute.
If you want to ensure that a Discovery Schedule runs exactly once every 24 hours starting at a specific time, which setting do you use?
Daily is the correct setting for fixed interval runs.
Why this answer
Setting the 'Run' field to 'Daily' allows you to define the start time and frequency.
If a MID Server's 'Service' is running but the MID Server is 'Down' in the instance, what should you inspect?
Network issues prevent the heartbeat from reaching the instance.
Why this answer
If the service is up but the record is down, there is likely a network communication block or a configuration mismatch in agent.config.
What is the purpose of the 'mid.snmp.port' parameter?
This parameter is used to influence SNMP communication settings.
Why this answer
This parameter defines the port the MID server listens on for SNMP traps or communicates via, depending on the discovery configuration.
What is the primary function of the 'MID Server' application in ServiceNow?
It facilitates secure communication and data collection across firewalls.
Why this answer
The MID Server acts as a bridge between the instance and the internal network for data collection.
When configuring Data Sources for CMDB reconciliation, which TWO of the following are true regarding the behavior of the Identification and Reconciliation Engine (IRE)?
Source priority levels are used by the IRE to determine which data source wins when multiple sources provide conflicting attribute values.
Why this answer
The IRE uses source priority and data source configuration to manage conflicting attribute data.
You have a situation where a CI is being updated, but you don't know which data source is responsible. Where can you look to find the authoritative source for each attribute?
Reconciliation rules define the priority of data sources for CI attributes.
Why this answer
Reconciliation rules allow an administrator to define which sources are permitted to update specific CI attributes.
A MID Server reports 'Up' but is not processing any jobs. What is the most likely cause?
A paused MID Server maintains a heartbeat but ceases processing ECC queue items.
Why this answer
If a MID Server is paused, it will remain up but will not poll for work from the ECC Queue.
What is the purpose of the 'MID Server Properties' module?
System properties are global configurations.
Why this answer
This module allows you to define system-wide properties that influence all MID Servers.
A Discovery administrator needs to ensure that only specific CI classes are populated by Discovery. Where should this configuration be managed to prevent unauthorized CI creation?
These rules control which attributes identify a CI and govern the insertion or update of records into the CMDB.
Why this answer
The Discovery CI classification process uses Identification and Reconciliation rules to determine how CIs are created and updated in the CMDB.
Which THREE of the following are standard Discovery phases that can be seen in the 'Discovery Status' record?
Valid phase.
Why this answer
The four phases are Shazzam, Classification, Identification, and Exploration. Any three of these are valid.
You are implementing a new discovery tool and want to ensure it integrates seamlessly with existing CMDB identification rules. What is the first step?
This prevents duplicate CI creation by ensuring the new tool aligns with existing identification logic.
Why this answer
You must check existing Identification Rules to see if the new tool's data can be mapped using existing identifiers.
Which TWO of the following are true regarding the Shazzam phase?
Shazzam probes the network for open ports.
Why this answer
Shazzam is the first phase and is used to identify which ports are open on discovered IPs.
Which of the following is true about 'Identification Sections'?
Identification sets the primary CI context for the rest of the pattern.
Why this answer
An identification section must contain at least one step that identifies the CI.
What is the purpose of the 'MID Server Validation' process?
Validation verifies the MID Server identity using a certificate handshake.
Why this answer
Validation ensures that the MID Server is trusted by the instance and authorized to execute commands.
What happens if a pattern execution encounters an error in a step that is marked as 'Continue on error'?
The 'Continue on error' flag allows the execution flow to bypass the failure.
Why this answer
The 'Continue on error' flag allows the discovery to proceed to the next step despite failure.
A pattern is failing to map a specific attribute because the command used returns multi-line output. What is the standard way to handle this in a Discovery Pattern?
Regex is the standard tool in patterns for parsing strings, including multi-line results.
Why this answer
Patterns use parsing steps (like Regex or Split) to convert multi-line output into structured attribute data.
Which TWO settings can be managed via the MID Server 'Capabilities' feature?
Capabilities are used to assign specific protocol handling.
Why this answer
Capabilities allow you to restrict work (like discovery) and manage specific scan types (like WMI).
Practice SERVICENOW-CIS-DISCOVERY by domain
Target a specific domain to shore up weak areas.