Troubleshooting practice questions

An administrator is troubleshooting why a CMDB CI's last discovered date is not updating after a successful discovery run. The CI is in a valid state and the discovery schedule runs. What could be the cause?

Trap 1: The CMDB identification rule has a condition that excludes this CI…

If the CI is discovered, the condition likely allows matching.

Trap 2: The discovery source is set to 'ServiceNow' but the CI was created…

Discovery source does not affect the update; manual CIs can still be updated.

Trap 3: The CI is a parent class and child class discovery is updating…

Parent CIs can still be updated directly by discovery.

A
The CMDB identification rule has a condition that excludes this CI from updates.
Why wrong: If the CI is discovered, the condition likely allows matching.
B
The discovery source is set to 'ServiceNow' but the CI was created manually.
Why wrong: Discovery source does not affect the update; manual CIs can still be updated.
C
The reconciliation rule is set to 'Manual' and the discovered data conflicts with existing data.
Manual reconciliation prevents automatic updates when conflicts arise, so the date stays unchanged.
D
The CI is a parent class and child class discovery is updating child records.
Why wrong: Parent CIs can still be updated directly by discovery.

Study the full ACL explanation →

Question 2mediummultiple choice

An administrator is troubleshooting an ACL that grants 'write' access to the 'incident' table for the 'itil' role. Despite the ACL being active, users with the 'itil' role cannot update incidents. The administrator confirms that no other write ACLs exist. What is the most likely reason?

Trap 1: The ACL is defined on a different table that extends 'incident'.

Wrong: ACLs on parent tables apply to child tables, but the administrator checked.

Trap 2: There is a read ACL that denies read access, which prevents any…

Wrong: Read and write ACLs are independent.

Trap 3: The table is set to 'High Security' in the application properties.

Wrong: High Security settings affect visibility but not ACL evaluation.

A
The 'Required roles' field on the 'incident' table form layout requires a different role to update.
Correct: Form-level required roles can override ACLs for UI actions.
B
The ACL is defined on a different table that extends 'incident'.
Why wrong: Wrong: ACLs on parent tables apply to child tables, but the administrator checked.
C
There is a read ACL that denies read access, which prevents any write operations.
Why wrong: Wrong: Read and write ACLs are independent.
D
The table is set to 'High Security' in the application properties.
Why wrong: Wrong: High Security settings affect visibility but not ACL evaluation.

Question 3hardmultiple choice

A catalog client script is used to populate a variable's value from an external table. The script works in the development instance but fails in production. Which troubleshooting step should be taken first?

Trap 1: Ensure the external table exists in the production instance

Table existence is a basic prerequisite but not the first troubleshooting step when the script differs in behavior.

Trap 2: Review the system logs for script errors

While logs help, the first step is to check configuration differences between environments.

Trap 3: Check if the workflow attached to the catalog item is active

Workflows are separate from client scripts and do not affect their execution.

A
Ensure the external table exists in the production instance
Why wrong: Table existence is a basic prerequisite but not the first troubleshooting step when the script differs in behavior.
B
Review the system logs for script errors
Why wrong: While logs help, the first step is to check configuration differences between environments.
C
Verify that the script's 'Run as' and 'Global' flags are set correctly in production
Client scripts may depend on user context; production might have different security or scope settings.
D
Check if the workflow attached to the catalog item is active
Why wrong: Workflows are separate from client scripts and do not affect their execution.

Study the full ACL explanation →

Question 4hardmultiple choice

An administrator is troubleshooting an issue where a form section on the incident form is not visible to users with the 'itil' role, but is visible to admins. The section has no UI Policy or ACL restricting it. What is the most likely cause?

Trap 1: An ACL is blocking the fields in the section

The problem states no ACL is restricting the section or its fields.

Trap 2: The fields in the section are marked as mandatory

Mandatory fields are still visible; they just require a value.

Trap 3: The section has 'Visible' set to false in the form layout

If 'Visible' were false, the section would be hidden for everyone, including admins.

A
The section has a role requirement that the users lack
Sections can be role-restricted; if users lack the role, the section is hidden.
B
An ACL is blocking the fields in the section
Why wrong: The problem states no ACL is restricting the section or its fields.
C
The fields in the section are marked as mandatory
Why wrong: Mandatory fields are still visible; they just require a value.
D
The section has 'Visible' set to false in the form layout
Why wrong: If 'Visible' were false, the section would be hidden for everyone, including admins.

Question 5mediummulti select

An administrator is troubleshooting issues with the CMDB identification and reconciliation engine. Which three components are part of the identification and reconciliation process? (Choose three.)

Trap 1: Transform maps

Transform maps are used to map import set fields to target fields, not part of IRE.

Trap 2: CI Class Manager

CI Class Manager manages class definitions and extensions, not the IRE process.

A
Transform maps
Why wrong: Transform maps are used to map import set fields to target fields, not part of IRE.
B
Reconciliation rules
These rules specify how to handle CI merging and conflict resolution.
C
Data source
Each data source provides CI data that feeds into the IRE process.
D
Identification rules
These rules define the criteria to match CIs from different data sources.
E
CI Class Manager
Why wrong: CI Class Manager manages class definitions and extensions, not the IRE process.

Question 6hardmulti select

An administrator is troubleshooting an import that is failing silently. The import set rows show 'Processed' with no errors, but no records are created or updated in the target table. Which THREE areas should the admin investigate?

Trap 1: Check if the target table has a 'sys_id' field.

All tables have a sys_id field.

Trap 2: Check if the import set table is set as the target table.

The import set table is the source, not the target.

A
Check if the coalescing field is set correctly in the transform map.
If coalescing is set to a field that does not match, no updates may occur.
B
Check if the target table has a 'sys_id' field.
Why wrong: All tables have a sys_id field.
C
Check if the field mappings are complete and correct.
Missing mappings can result in empty records that may be filtered out.
D
Check if the import set table is set as the target table.
Why wrong: The import set table is the source, not the target.
E
Check if there is a transform script that conditionally skips record creation.
Transform scripts can prevent record creation if conditions are not met.

Question 7hardmultiple choice

An import set fails with error 'Import set row processing error'. The transform map uses a script that references a table that does not exist. What is the first step to resolve this?

Trap 1: Re-create the import set definition

Re-creating the import set will not fix the script error.

Trap 2: Change the data source type

Changing the data source type doesn't address the script error.

Trap 3: Update the transform script to reference a valid table

This is the correct action, but placed here as B. Actually, it is correct.

A
Re-create the import set definition
Why wrong: Re-creating the import set will not fix the script error.
B
Change the data source type
Why wrong: Changing the data source type doesn't address the script error.
C
Run the import set in a different scope
Running in a different scope may bypass the error if the table exists there, but the root cause is the table reference. However, the script referencing a non-existent table is the core issue; changing scope is a temporary fix. The best practice is to update the script.
D
Update the transform script to reference a valid table
Why wrong: This is the correct action, but placed here as B. Actually, it is correct.

Question 8mediummultiple choice

You are responsible for the CMDB at a large enterprise. The CMDB is used for change management and incident management. Recently, during a major incident, it was found that several critical CIs were missing from the CMDB, causing delays in troubleshooting. Further analysis reveals that the Discovery probes were not running on those devices due to schedule conflicts. You need to ensure that all critical devices are discovered regularly. What is the most effective solution?

Trap 1: Manually add the missing CIs and set a reminder to check every week.

Manual processes are error-prone and do not guarantee regular discovery.

Trap 2: Use horizontal discovery to prioritize critical devices.

Horizontal discovery discovers many devices in a range, but does not provide scheduled priority.

Trap 3: Increase the frequency of Discovery schedules for all devices.

This would strain resources and may not resolve the specific scheduling conflict for critical devices.

A
Manually add the missing CIs and set a reminder to check every week.
Why wrong: Manual processes are error-prone and do not guarantee regular discovery.
B
Use horizontal discovery to prioritize critical devices.
Why wrong: Horizontal discovery discovers many devices in a range, but does not provide scheduled priority.
C
Create a dedicated Discovery schedule for critical devices with a higher frequency.
A dedicated schedule ensures critical devices are discovered consistently regardless of other schedules.
D
Increase the frequency of Discovery schedules for all devices.
Why wrong: This would strain resources and may not resolve the specific scheduling conflict for critical devices.

Question 9hardmultiple choice

A ServiceNow administrator at a large enterprise is troubleshooting an issue with the incident form. A custom form section titled 'Sensitive Data' should only be visible to users with the 'security_admin' role. The administrator created a UI Policy with the condition g_user.hasRole('security_admin') and an action that sets the 'Sensitive Data' section's visible attribute to true. The UI Policy is active and set to run on load. However, users with the 'security_admin' role report that they do not see the section. The administrator verified that the section is configured with a 'Visible' condition that is blank, and the section's 'Roles' field is empty. What is the most likely reason the section is not showing?

Trap 1: The UI Policy condition should use 'g_user.hasRoleExactly' instead…

'hasRole' is sufficient; 'hasRoleExactly' is for exact role match but not needed here.

Trap 2: A table-level ACL is blocking visibility of the section for all…

An ACL would prevent record access, not just hide a section.

Trap 3: The section's 'Roles' field is empty and must be set to…

An empty 'Roles' field means the section is visible to all, not hidden.

A
The UI Policy condition should use 'g_user.hasRoleExactly' instead of 'g_user.hasRole'.
Why wrong: 'hasRole' is sufficient; 'hasRoleExactly' is for exact role match but not needed here.
B
The section has a 'Visible' condition script that returns false, overriding the UI Policy.
A section's own 'Visible' condition, if it returns false, will hide the section regardless of UI Policy.
C
A table-level ACL is blocking visibility of the section for all users.
Why wrong: An ACL would prevent record access, not just hide a section.
D
The section's 'Roles' field is empty and must be set to 'security_admin'.
Why wrong: An empty 'Roles' field means the section is visible to all, not hidden.

Question 10mediummultiple choice

You are troubleshooting an issue with the Virtual Agent chatbot. Users report that when they ask the chatbot 'How do I reset my password?', the chatbot responds with 'I'm sorry, I don't understand that question.' However, the chatbot correctly answers other questions like 'What is the IT support number?' The password reset topic is configured with a user input of 'password reset' and a response that provides instructions. The chatbot's NLU model has been trained with over 50 utterances for the password reset topic. The issue started after a recent update to the chatbot's configuration. What is the most likely cause?

Trap 1: The password reset topic was deleted

The stem says it is configured.

Trap 2: The NLU model needs more training utterances

50 utterances is typically sufficient.

Trap 3: The user input does not match any utterances exactly

NLU handles variations.

A
The password reset topic is inactive
An inactive topic will not respond.
B
The password reset topic was deleted
Why wrong: The stem says it is configured.
C
The NLU model needs more training utterances
Why wrong: 50 utterances is typically sufficient.
D
The user input does not match any utterances exactly
Why wrong: NLU handles variations.

Question 11easymultiple choice

A ServiceNow administrator is troubleshooting a notification issue. The company has a 'Customer Satisfaction Survey' notification that is supposed to send an email to the 'caller' of an incident when the incident state changes to 'Resolved' (state=6). The notification is configured with table 'incident', condition 'state changes to 6', and recipient 'caller'. However, the email is not being sent. The administrator checks the system log and finds no errors. The notification has an advanced script that checks if the 'caller' has a valid email address. The script is: if (current.caller_id.email == '') { return false; }. The administrator confirms that the caller's email field is populated. What is the most likely reason the notification is not sending?

Trap 1: The advanced script should be removed because it is blocking valid…

The script returns false only if email is empty, which is not the case.

Trap 2: The script should check for null instead of empty string.

The email field is a string; empty string check works, but the issue is earlier.

Trap 3: The recipient field should use the email field directly instead of…

Using 'caller' reference is correct; it resolves to the user's email.

A
The advanced script should be removed because it is blocking valid emails.
Why wrong: The script returns false only if email is empty, which is not the case.
B
The notification condition should be 'state is 6' rather than 'state changes to 6'.
If the incident is created with state 6, 'changes to' condition does not trigger.
C
The script should check for null instead of empty string.
Why wrong: The email field is a string; empty string check works, but the issue is earlier.
D
The recipient field should use the email field directly instead of the reference 'caller'.
Why wrong: Using 'caller' reference is correct; it resolves to the user's email.