A large financial institution uses ServiceNow CMDB to manage their IT infrastructure. They have a complex environment with multiple data sources: Discovery, SCCM, and a custom integration from their cloud provider. The CMDB contains over 100,000 CIs. Recently, the CMDB team noticed that for a specific set of Windows servers, the 'os_version' attribute is being updated to an incorrect value every night. The value comes from the SCCM integration, which is supposed to be the authoritative source for software-related attributes. However, the 'os_version' attribute should be authoritative from Discovery. The IRE is configured with reconciliation rules, but the issue persists. The team also finds that the Discovery job for these servers runs at 2:00 AM, and the SCCM integration runs at 3:00 AM. The incorrect value appears after the SCCM run. The reconciliation rules are set so that Discovery is authoritative for 'os_version', but the SCCM integration still overwrites it. What is the most likely cause and recommended action?
If the rule is misconfigured or inactive, SCCM may overwrite the attribute.
Why this answer
The reconciliation rule is the mechanism that dictates which data source is authoritative for a specific attribute. If the rule is misconfigured, inactive, or not properly scoped, the IRE will allow the SCCM integration to overwrite the 'os_version' attribute even though Discovery is intended to be authoritative. Reviewing and correcting the rule ensures that the IRE enforces the correct source priority for that attribute.
Exam trap
The trap here is that candidates assume changing the order of integrations (Option C) will fix the issue, but the IRE's reconciliation rules, not the sequence of data ingestion, determine which source is authoritative for a given attribute.
How to eliminate wrong answers
Option A is wrong because enabling IRE 'Strict' mode would block all updates from non-authoritative sources, but the SCCM integration is still an authorized data source; the issue is a misconfigured reconciliation rule, not the IRE mode. Option B is wrong because disabling the SCCM integration removes a valuable authoritative source for software attributes and does not address the root cause of the reconciliation rule misconfiguration. Option C is wrong because changing the order of integrations does not affect which source is authoritative; the IRE uses reconciliation rules to determine source priority, not the order of data ingestion.