CIS - Discovery

1. Where to enable File-based Discovery?

a. Enable com.snc.discovery.file_based_discovery plugin under Discovery Configuration
Console (already subscribed along Discovery Subscription)

2. When is file-based Discovery triggered?

a. Triggered in the exploration phase of normal Discovery

3. Use which pattern step operation to establish Relationship between Cis?

a. Create Relation/Reference

4. Options of Set Initial Selection Criteria when validate MID Server? (3 answers)

a. Allow ALL capabilities

b. Allow ALL application
c. Allow ALL IP ranges

5. Where to view Discovery errors that errors have the help link?

6. How many threads does MID Server have by default? 25

7. Which condition that make group displayed in this form

 Group having type=”Health” (Not “Health Dashboard”)

8. Location of CI discovered by Discovery is populated from:
 Location field of Discovery Schedule
9. Application pattern has:
 CI Type, OS, Order
10. Classifier trigger:
=> Probe, horizontal pattern
For the Parse Variable pattern operation, what is required to have two different parsing methods
to populate variables?
A. Two different Debug Mode sessions.
B. A tabular and a scalar variable.
C. Two different steps.
D. Two different Define Parsing selections on the same step.
Which best describes Discovery schedule of type Configuration Item?
A. Verifies Configuration Item data from the scanned IP ranges against the data in the
CMDB.
B. Creates only a list of discovered IPs in both IPv4 and IPv6 formats.
C. Collects complete information from the scanned IP ranges and sends it to the CMDB.
D. Directly populates records in the assets table.
When installing a MID Server on a Windows platform, which right must be associated when
creating a Service Account?
A. Root
B. Domain Admin
C. MID Server User Role
D. Log on as service
Which of the below choices are needed for Quick Discovery? (Choose two.)
A. MID Server
B. Discovery Schedule
C. PID
D. Target IP

In order to use Debug from the Pattern Designer, you must have what?
A. a proxy server
B. a discoverable CI
C. the admin role
 D. Service Mapping installed
A discovery runs against a Windows Server returning the following attribute values for the first
time: name = WindowsSN1 serial_number = 12321
A subsequent discovery runs against a different Windows Server returning the following
attribute values: name = WindowsSN2 serial_number = 12321
With only base system CI Identifiers configured, which of the following is true?
A. A Windows Server CI is created, then updated with WindowsSN2 as the name.
B. Two Windows Sewer CIs are created, with WindowsSN1 AND WindowsSN2 for
names.
C. Two Windows Server CIs are created, without serial_number values.
D. A Windows Server CI is created, then updated with WindowsSN1 as the name.
Which choice represents the three best ways of extending Discovery?
A. Orchestration, Classifiers, Discovery Patterns
B. Fingerprinting, Classifiers, Discovery Patterns
C. Orchestration, Classifiers, Probes & Sensors
D. Classifiers, Probes & Sensors, Discovery Patterns
E. Classifiers, Fingerprinting, Probes & Sensors

SNMP Credentials require which of the following?

A. write community strings
B. usernames
C. read community strings
D. port 135 access
Which choice will populate the Location field for a discovered CI?
A. Location field for a Discovery Schedule
B. Location field for a parent CI Type
C. Location field for a Port Probe
D. Location report from the Discovery Dashboard
What role is needed by the MID Server's user account to interact with a ServiceNow instance?
A. mid_server
 B. discovery_admin
C. sm_mid
D. mid_discovery
Which operation is used to change from the default credentials to any other appropriate
credentials in a horizontal pattern?
A. Change credentials
B. Change user
C. Alternate credentials
D. Alternate user

After navigating to an Automaton Error Messages list from Discovery > Home, how are the
options on the right navigation pane categorized? (Choose two.)
A. SELECT ALL
B. SELECT ONE
C. ACTION ON SELECTED
D. ACTION ON ALL
Which of the following can be used in the Debug Identification Section in Debug Mode for an
infrastructure pattern? (Choose two.)
A. IP
B. AWS Endpoint
C. PID
D. Host Name
With multiple CI data sources, which choice is the best for determining which source can update
a CI attribute?
A. Business Rules
B. Data Certification
C. Transform Maps
D. Reconciliation Rules
One method for deleting specific CIs not discovered in 30 days is:
A. Scheduled Job
 B. UI Policy
C. Service Mapping
D. Data Policy

Which of the following choices must be installed on a MID Server to run Credential-less
Discovery?
A. Credential-less Extension
B. Nmap
C. Advanced IP Scanner
D. Defender
A network device has both an SSH port and an SNMP port open. Discovery tries the SSH probe
first and it fails. This triggers the SNMP probe, which succeeds. Discovery uses SNMP first for
subsequent discoveries on that device.
What discovery functionality allows the above to happen?
A. Classification
B. Credential affinity
C. MID Server affinity
D. IP service affinity
The CMDB contains which of the following record types? (Choose two.)
A. Model
B. Configuration Item (CI)
C. Asset
D. Relation Type
When is the Extension section in a horizontal pattern executed?
A. As part of the post-sensor processing script
B. After the Identification sections
C. As part of the port scan
D. Before the Identification sections

For CMDB Health, relationships can be which of the following choices? (Choose three.)
 A. Duplicate
B. Stale
C. Orphan
D. Required
E. Recommended
Which of the choices provides active discovery errors with a help link for each error?
A. Discovery Dashboard
B. IP Address Failure Report
C. Discovery Schedule
D. MID Server Dashboard

What related list on a classifier dictates which Horizontal Pattern probe is launched?
A. Discovery Log
B. Classification Criteria
C. Pattern probes
D. Triggers probes
Which of the following does the ECC Queue provide? (Choose two.)
A. Login credentials for the MID Server host.
B. The actual XML payload that is sent to or from an instance.
C. A connected flow of probe and sensor activity.
D. The process responsible for defining, analyzing, planning, measuring, and improving
all aspects of the availability of IT services.
Which of the following choices are only used for the Application Pattern Type? (Choose two.)
A. Run Order
B. Identification Section
C. CI Type
D. Operating System
By default, which of the following are automatically available as variables for horizontal
discovery patterns? (Choose two.)
 A. infrastructure_system
B. The CI Type on the Discovery Pattern form
C. windows_cmdb_ci
D. computer_system
Which choices are necessary to launch any pattern? (Choose two.)
A. CI Classification
B. CI Serial Number Attribute
C. Data Certification
D. CI Type

Which of the below choices are horizontal pattern types? (Choose two.)
A. Hardware
B. Software
C. Infrastructure
D. Application
What does the MID Server need to collect vCenter events?
A. vCenter Event Collector extension
B. MID SNMP Trap Listener extension
C. Firewall
D. vCenter probes
A Discovery Schedule contains a /24 subnet IP Range and a Shazzam batch size of 5000.
How many times will a Shazzam probe be launched during discovery?
A. 1
B. 2
C. 5000
D. 254
Which method is used by Discovery to determine if a Host IP is active or alive?
A. Port Scan
 B. Traceroute
C. Ping
D. Classification
Discovery finds and maps dependencies for the following types of storage devices. (Choose
three.)
A. Direct-attached storage (DAS)
B. Network-attached storage (NAS)
C. Storage area network (SAN)
D. Multiple area network (MAN)
E. Redundant Array of Independent Disks (RAID)
Which choice allows the following functionality to occur?
If this value is set to 1000 and a discovery must scan 10,000 IP addresses using a single MID
Server, it creates 10 Shazzam probes with each probe scanning 1000 IP addresses.
A. MID Server Clusters
B. MID Server selection method
C. Shazzam Batch Size
D. Behaviors

Which choice best describes how to use a Behavior for discovery?

A. The MID Server selection method on a Discovery Schedule.
B. The Behavior drop-down menu on a Discovery IP Range.
C. The Behavior drop-down menu on a Discovery Status.
D. The Behavior checkbox on a CI.
Which of the following pattern operations query targets? (Choose two.)
A. WMI Query
B. Merge Table
C. Get Process
 D. Parse Variable

Vinh Ta updated SEP 7 (Utah):

1. What is used to merge variable’s value of two tabular variable into a single variable:
A. [<constant>]
B. [*]
C. +
D. ==

2. Which of the following MID Server name is invalid

A. Mid_server1
B. My_mid_server1
C. Mid.server1
D. Midserver1

3. What is configured in the Agent Client Collector to run osquery on a Window Server

4. What is seen in the Discovery Pattern log but not seen in ECC Queue?
A. Pattern steps details showing which one is failed steps
B. Payload with CIs attribute/
C. CI Relationship is created/updated
D.

5. What is the status of payload send back from the mid-server

A. Input
B. Output
C. Pending
D. Ready.
6. Which options available in the “ACTION ON ALL” of Recommended Actions in Automation Error
Messages through Discovery -> Home (choose two.)
A. View instructions
B. Retry discovery
C. Ping IP Address

7. How can you create Relationship in Horizontal Discovery Pattern?

8. When discover Linux Server with related Disk and set the discovery strategy=”Absent”. At the
first time the CI was discovered, the Disk is not found. Next time when the Linux Server
discovery run, which operation will occurs?
D. The Linux Server’s Operational Status is set to “Non-Operational"
E. The Disk’s install status is set to “Absent”
F. The Linux Server’s install status is set to “Absent”
G. The Disk’s operational Status is set to “Non-Operational"

9. What is included in the Extension Section of the Horizontal Discovery Pattern?

A. Connection Section
B. Network Libraries
C. Shared Libraries
D. Identification Section

10. What is Scalar variable?

E. Each row is a Tabular variable
F. Each row is a single column
G. Each row is a single command
H. Each row...

11. When using the “Parse Variable”, method “Delimited Text”, which is available of the following
(Choose multiple)
A. Positions
B. Line seperator
C. Field name
D. Table name

12. The following picture is which type of pattern?

A. Infrastructure
B. Application
C. ...
D. ...
13. Which best describe temporary variable used in the Horizontal Discovery Pattern?
A. Scalar/List
B. Tabular/Table
C. Command
D. ...

14. What is recommended to followed by when increasing the number of mid-server threads
A. Increase number of max payload size
B. Increase number of memory allocation in MID Server apps
C. ...
D. ...

15. CMDB Health KPI for Completeness

A. Recommended
B. Required
C. Audit
D. Overall

E. Where can you find the Reconciliation Rule?

F. CI Class Manager
G. Discovery Dashboard
H. Discovery Pattern
I. Discovery Status
J. ..
K. ..

16. Which definition best describe Reconciliation Rule ?

A. Reconciliation rule specify which authorized data sources can update a CMDB Tables or CI
attributes...
B. Reconciliation rule uniquely identifies CIs, CI is recently discovered
C. …
D. …

17.What is recommended when grant permission level on Windows discovery?

A. A local administration user with full admin access.
B. A full domain user with read access
C. A (some domain not all) user with sudo access //I think this one is likely correct => please
reseach.
D. A … user with write access

18. What is this Operation?

A. Put file
B. Transform table
C. Parse variable
D. …

19. What is the error “Active, couldn't classify” means?

A. Logical/Physical firewall blocked Discovery reach the device
B. Credentials not match
C. …
D. …

20. What is the error “No Result Returned From Probe” means? (option similar to the above
question)