ServiceNow CIS-ITOM and CIS-Discovery - IT Operations Management Discovery Service Mapping Event Management

By Marcus Chen · Updated May 25, 2026

Questions25
Passing Score75%
Format100% Multiple Choice
Sessions Logged1,636
Your progressLog in / Register to track times taken, best score, questions mastered, and coverage on this quiz.
Rating
4.4 (32)

Topics covered

This quiz

Uncategorized25 (100%)

Uncategorized25 questions

Browse more · Report this quiz

Question catalog for this preview

Catalog listing of the 5 preview questions for this quiz.

Question 1

A ServiceNow ITOM implementation team needs to populate the CMDB with AWS EC2 instances, S3 buckets, RDS databases, and VPC configurations. AWS infrastructure changes frequently with auto-scaling. What is the correct approach for continuous CMDB currency for cloud assets?

Answer choices

  • A. Have cloud administrators manually update CI records when they make changes

  • B. Configure Cloud Discovery integration using ServiceNow's Cloud Management Integration (CMI) with AWS credentials — uses AWS APIs (EC2 describe-instances, RDS describe-db-instances) to discover and continuously update cloud CIs without a MID Server in the cloud

  • C. Install a MID Server on every AWS EC2 instance

  • D. Export AWS Config snapshots and import as CSV weekly

Question 2

A company has deployed Service Mapping and created service maps for their critical business applications. A planned maintenance is scheduled for a database server. The Change Manager wants to know which business services will be impacted before approving the change. How does ServiceNow address this?

Answer choices

  • A. The Change Manager manually asks each application team if they use the database

  • B. Change Management integrates with CMDB Service Maps — on the Change record, the "Affected CIs" field lists the database server; the CI Relationship viewer shows all business services that depend on this CI through the service map, enabling impact analysis before approval

  • C. Approve the change and monitor for incidents post-change

  • D. Check a manual spreadsheet of application-to-server mappings

Question 3

A company's Service Mapping implementation is showing a business service as "Incomplete" — some CIs in the service map have no connections traced beyond a specific point. What is the MOST LIKELY cause?

Answer choices

  • A. The database server is down

  • B. Missing Service Mapping patterns for the CI type at the gap point — Service Mapping couldn't identify the connection type (e.g., the app server communicates with the database using a non-standard port that no pattern handles, or the application uses an unusual connection method)

  • C. The service map is limited to 50 CIs maximum

  • D. Service Mapping only traces HTTP connections

Question 4

After running Discovery, a ServiceNow administrator notices that the same physical server appears twice in the CMDB under different sys_ids — once as a Linux server and once as a virtual machine, both with the same IP address. What is the ROOT CAUSE and fix?

Answer choices

  • A. Discovery is running too frequently and creating duplicates

  • B. The Discovery Identification Rules for the two CI classes are not correctly configured, causing the IRE (Identification and Reconciliation Engine) to fail to match the existing CI. Review and correct the identification rules (e.g., ensure serial number or hostname is used as the identifier)

  • C. Delete one of the duplicate CIs manually and run Discovery again

  • D. The MID Server is malfunctioning; restart the MID Server service

Question 5

A monitoring team receives 5,000 events per hour from their monitoring tools (Nagios, SolarWinds, Dynatrace) during business hours. Most are duplicate or correlated alerts about the same infrastructure issue. They want ServiceNow to condense these 5,000 events into meaningful, actionable alerts. Which ITOM feature addresses this?

Answer choices

  • A. Forward all 5,000 events directly to ITSM as incidents

  • B. Event Management with Alert Correlation — events are ingested, deduplicated using event rules, correlated to the affected CI using CMDB data, and grouped into Alerts representing the underlying issue, dramatically reducing noise

  • C. Create email filters to block the majority of events

  • D. Increase the monitoring team headcount to review all 5,000 events