ServiceNow Certified Implementation Specialist - Discovery CIS-Discovery Exam Questions

Answer : A, C

Pattern operations are the building blocks of patterns that define the logic and actions to perform on the target CIs. Some pattern operations query targets to retrieve information or execute commands, while others manipulate data or perform other tasks. WMI Query and Get Process are examples of pattern operations that query targets. WMI Query executes a Windows Management Instrumentation (WMI) query on a Windows target and stores the results in a variable.Get Process executes a command to list the processes running on a target and stores the results in a variable12.

Pattern operations - Product Documentation: Vancouver - ServiceNow

Pattern operations - Product Documentation: San Diego - Now Support Portal

Answer : A, D, E

For a pattern operation, the <_> placeholder can be replaced by any valid index or wildcard character that can be used to access an element of an array or a table.The $IfTable variable is a table that contains information about the network interfaces of a device1.The InstanceID attribute is a unique identifier for each interface2. To access the InstanceID of a specific interface, the pattern operation can use the following syntax:

$IfTable[<index>].InstanceID

where <index> is either:

A numeric index that corresponds to the position of the interface in the table, such as3for the third interface.

A dot (.) followed by a key-value pair that matches a specific attribute and value of the interface, such as [.Name=eth0] for the interface with the name eth0.

An asterisk () that represents a wildcard that matches any interface in the table, such as [] for all interfaces.

1: IfTable - Product Documentation: San Diego - ServiceNow

2: InstanceID - Product Documentation: San Diego - ServiceNow

Answer : E

CI identifiers can be viewed under the CI record1.A CI identifier is a set of attributes that uniquely identify a CI of a specific class2.CI identifiers are used by the identification and reconciliation engine (IRE) to match incoming data with existing CIs in the CMDB3.CI identifiers can be viewed and edited in the CI record by clicking the Identification Information related link1.

1:View and edit CI identifiers

2:Create or edit a CI identification rule

3:Identification rules

Answer : C

A check is a part of Agent Client Collector that defines the osquery commands to run on a CI and the frequency of execution. A check can also specify the conditions for generating alerts or events based on the osquery results.

Reference 1: Agent Client Collector - Product Documentation: San Diego - ServiceNow 2: Agent Client Collector for Visibility - Product Documentation: San Diego - ServiceNow

Answer : A, B

Global variables are variables that are automatically available for all steps in horizontal discovery patterns. They store information about the target CI, such as its IP address, host name, operating system, and credentials. There are two global variables that may be used for steps in horizontal discovery patterns: system and computer_system. The system variable contains the information about the target CI's IP address, host name, and credentials.The computer_system variable contains the information about the target CI's operating system, such as its name, version, and architecture12.

Patterns and horizontal discovery - Product Documentation: Tokyo - Now Support Portal

Horizontal Pattern probe - Product Documentation: San Diego - Now Support Portal

Answer : D

An extension section of a discovery pattern is a section that allows you to modify or extend the functionality of an existing pattern without customizing it. An extension section can contain shared libraries, which are reusable code snippets that can be invoked from any pattern or extension section. Shared libraries can be used to define common functions, variables, or constants that are used across multiple patterns or extension sections.Shared libraries can also be used to override the default behavior of some built-in functions, such as identification or classification12.Reference=1: ITOM: Extending Discovery/Service Mapping Patterns - GlideFast ServiceNow2: How to Create Discovery Pattern Extensions and Why to Use Them

Answer : C

A /24 subnet IP Range means that there are 256 possible IP addresses in the range, from 0 to 255. A Shazzam batch size of 5000 means that Discovery will send 5000 ICMP packets at a time to scan the IP addresses. Therefore, Discovery will launch the Shazzam probe once for every 5000 IP addresses in the range, or 256 / 5000 = 0.0512 times. Since the number of times must be an integer, Discovery will round up to 1 and launch the Shazzam probe once. However, since the Shazzam probe is launched for each MID Server that is assigned to the Discovery Schedule, the actual number of times will depend on how many MID Servers are available. If there are N MID Servers, then the Shazzam probe will be launched N times, each sending 5000 ICMP packets to the same IP range. Therefore, the total number of times that the Shazzam probe will be launched during discovery is N * 1 = N.

Discovery Schedule form

Shazzam Probe

Discovery IP range