Free CIS-SM sample questions

Correct answer: Execute a command like `netstat` or `lsof` and use a 'Parse Command Output' operation to identify active connections on port 9010.

For proprietary TCP protocols where configuration files are not available or readable, the most reliable method to discover active connections is to inspect the network state of the host machine. Running a command like `netstat` (for Windows) or `lsof -i` (for Linux/Unix) will list active network connections. The output of this command can then be parsed within the pattern to identify the remote IP addresses and ports the application is communicating with, allowing Service Mapping to create the correct dependency links.

Correct answer: A firewall is blocking traffic from the MID Server to the Oracle Listener port (typically 1521).

A 'Connection timed out' error indicates that the MID Server sent a request to the target port, but received no response, which is a classic symptom of a firewall blocking the traffic. Since horizontal discovery of the nodes works (likely via SSH/WMI), but the specific application port is unreachable, it points to a network access control list (ACL) or firewall rule that is not configured to allow the MID Server to communicate with the Oracle Listener port. Incorrect credentials would typically result in an authentication error, not a timeout.

Correct answer: The 'Update on change' option within the discovered service's configuration.

ServiceNow provides a specific feature for this purpose. Within the configuration of a discovered application service, there is a checkbox labeled 'Update on change'. When this option is enabled, Service Mapping will automatically trigger a re-discovery of that specific service whenever a CI that is part of the service map is updated through a change request. This is the most efficient and targeted method, as it avoids unnecessary full-schedule rescans.

Correct answer: Analyze incident data to identify the services that generate the highest volume of high-priority incidents.

The goal of the project is to improve Mean Time To Resolve (MTTR) for major incidents. Therefore, the most logical and value-driven approach is to prioritize the services that are the biggest source of pain. By analyzing historical incident data (e.g., from the Incident [incident] table), the consultant can identify which business services are associated with the most P1/P2 incidents. Mapping these services first will provide the greatest and most immediate impact on the project's primary goal.

Correct answer: False

This statement is false. The best practice is to place a new CI class as deep in the class hierarchy as possible. This allows the new class to inherit the maximum number of relevant attributes and identification rules from its parent classes, reducing redundant configuration and ensuring consistency. Creating classes directly under [cmdb_ci] should be avoided unless the new CI type is fundamentally different from all existing classes.

Correct answer: Identification and Reconciliation Engine (IRE) Rules

The Identification and Reconciliation Engine (IRE) is the core CMDB feature for preventing duplicate CIs. By defining robust Identification Rules, you tell the IRE which attributes to use to uniquely identify a CI, regardless of the discovery source. Reconciliation Rules and Datasource Precedence Rules then govern which data source is authoritative for which attributes when updates occur. Properly configuring the IRE rules for the web server class will ensure that both Service Mapping and horizontal discovery identify and update the same CI record.

Correct answers: Configure credentials with permissions to access the Kubernetes API server for each cluster.; Use the Kubernetes pattern from the ServiceNow Store/PStore.; Define a URL entry point pointing to the application's Ingress controller.

ServiceNow discovers Kubernetes environments by querying the Kubernetes API, not by logging into individual nodes. This API provides all the necessary information about namespaces, services, pods, and their relationships.

ServiceNow provides specialized patterns for discovering modern technologies like Kubernetes. These patterns contain the necessary logic to query the API and build the correct CI model in the CMDB.

For a containerized application exposed to users, the Ingress controller or Load Balancer is the logical starting point for top-down discovery. Mapping starts from this entry point and traces the traffic flow through Kubernetes services to the backend pods.

Correct answer: The pattern's log level is set lower than the level specified in the 'Log' step.

The 'Log' operation in the Pattern Designer has a 'Level' parameter (e.g., Debug, Info, Warn, Error). The pattern execution itself also has a log level, which is controlled by system properties (e.g., `glide.discovery.debug`). If the message in the 'Log' step is set to 'Debug', but the overall pattern discovery log level is set to 'Info', the debug message will not be written to the log. This is a common issue when debugging patterns.

Correct answer: Review the Discovery Log for the Apache server to see why the Tomcat identification failed.

A 'Generic Application' CI is created when Service Mapping detects a listening process on a port but no pattern's Identification Section successfully matches that process. The first step in troubleshooting is to examine the Discovery Log for the source CI (the Apache server). The log will contain details about which patterns were attempted on the destination IP/port, why they failed (e.g., credential failure, no matching process found), and the information that was gathered. This information is crucial for determining whether to fix credentials, adjust the Tomcat pattern, or create a new pattern.

Correct answer: To allow customization of a baseline pattern without modifying it directly, ensuring upgrade safety.

The Extension Section is a critical feature for maintaining customizations across platform upgrades. It allows an implementer to add custom steps (e.g., to gather additional attributes or create extra relationships) to a baseline, out-of-the-box pattern. These extensions are stored separately from the base pattern. During an upgrade, the base pattern can be updated by ServiceNow without overwriting the custom logic in the Extension Section. This prevents customizations from being lost and reduces the maintenance burden.