Free ServiceNow CIS-DF Practice Exam with Questions & Answers | Set: 4

In CMDB modeling, accurately defining relationships is critical for impact analysis, service mapping, and Change Management. In this scenario, Application Servers can host multiple Applications, and Applications can also run across multiple Application Servers (for example, in clustered, load-balanced, or distributed architectures).

This architectural reality defines a many-to-many relationship between the Application Server table and the Application table.

In ServiceNow, many-to-many relationships are common for application hosting models, especially in modern environments that use horizontal scaling, redundancy, or containerized workloads. Modeling this correctly ensures that incidents, changes, and outages affecting a single server can be accurately traced to all impacted applications—and vice versa.

A one-to-many or many-to-one relationship would incorrectly assume exclusivity in one direction, which does not reflect real-world application deployment patterns. A one-to-one relationship would be even more restrictive and inaccurate.

Therefore, the correct relationship type is A – Many-to-many, which aligns with CMDB best practices and CSDM service modeling principles.

Within the Common Service Data Model (CSDM), regulatory, security, and compliance-related information—especially for PII and PCI—must be modeled at the business and information level, not at the infrastructure or service offering level. The correct location for this data is Business Applications combined with Information Objects.

Business Applications represent the logical applications that support business capabilities and processes. Since compliance obligations (such as GDPR, PCI-DSS, or HIPAA) are assessed based on how the business uses data—not how many servers host the application—this is the correct anchor point for audit-relevant context.

Information Objects are explicitly designed to capture what data is processed, stored, or transmitted by an application, including data classifications such as PII, PCI, PHI, or confidential business data. They allow organizations to document regulatory scope, retention rules, encryption requirements, and audit controls without overloading CI records or polluting infrastructure classes.

Option A is incorrect because Technical Service Offerings and Groups focus on operational support and service delivery, not regulatory data context. Option C is also incorrect because Customer Service Offerings describe how services are consumed, while databases are technical components; neither is the authoritative place for compliance definitions.

Therefore, Business Applications and Information Objects are the correct CSDM constructs to support audits and regulatory compliance, making Option B the correct answer.

In Data Foundations, a low “Unique Locations” result indicates the CMDB contains duplicate Location records (or inconsistent location usage) that reduce data reliability for operational reporting and service analytics. This sits under “Insight” because the dashboard is highlighting a measurable quality issue, and the playbook provides a structured remediation path to restore confidence.

The recommended playbook-aligned process is to review the duplicate locations, determine which one is correct per the organization’s naming and data standards, then re-point dependent records (CIs) to the correct Location before removing the duplicate. That sequence is essential: if you delete a duplicate location without first updating related CIs, you risk leaving CIs with missing/invalid location references, creating new completeness and correctness issues.

Option C matches best practice: validate which location record should remain, update all affected CIs (and any other dependent records) to use the correct location, and then delete (or retire/merge, depending on process controls) the duplicate record. Option B is risky because it skips validation and dependency updates. Option D defeats the purpose of “Unique Locations” by allowing ongoing inconsistency. Option A is not the best fit because “Duplicate CI Remediator” is oriented toward CI duplicates; Location is typically a reference/organization data domain and is handled through the specific remediation steps for that data set. Therefore, C is the recommended process.

In ServiceNow Data Foundations, specifically within CMDB Data Manager, policies are used to enforce data quality, completeness, and governance across configuration items (CIs). When defining a Data Manager policy, administrators can configure task creation for non-compliant records and specify how those tasks are assigned. One key configuration is the Assignment type, where “User Group Field” allows assignment to a group dynamically based on a group reference field on the CI record.

Out of the box, ServiceNow provides two default and universally available group reference fields for this purpose:

Assignment Group

Managed By Group

These two fields are considered core CMDB governance fields and are consistently available across most CI classes. They align directly with ITIL 4 Service Configuration Management and CSDM accountability models, ensuring that remediation tasks are routed to teams responsible for operational ownership or technical management of the CI.

Assignment Group (Correct – D) This is the most commonly used operational field in ServiceNow. It represents the team responsible for working on tasks related to the CI and is fully supported by CMDB Data Manager for automated task assignment.

Managed By Group (Correct – C) This field represents the group accountable for managing the CI throughout its lifecycle. It is a standard CMDB field and is explicitly supported by Data Manager policies for governance-driven task routing.

The other options are not default Data Manager assignment fields:

Owned by Group is often added through extensions or governance customization and is not guaranteed to exist across all CI classes.

Support Group is a CSDM and ITSM operational concept, commonly derived or mapped, but it is not a default group reference field exposed for CMDB Data Manager task assignment.

From a Data Foundations and CSDM governance perspective, using Assignment Group and Managed By Group ensures consistent accountability, scalable automation, and alignment with CMDB best practices.

The Common Service Data Model (CSDM) prescribes an incremental, maturity-based rollout approach to reduce risk and ensure sustainable adoption. The recommended order is Crawl, Walk, Run, Fly, which aligns implementation effort with increasing organizational capability and value realization.

Crawl focuses on foundational data hygiene: core CI classes, identification rules, reconciliation, basic Discovery ingestion, and CMDB Health basics.

Walk introduces service context, including Business Services, Application Services, and relationships that enable impact analysis for Incident and Change.

Run expands into operational excellence with Service Mapping, service offerings, advanced governance, and process automation.

Fly represents optimization and scale, leveraging analytics, AI/ML, proactive operations, and cross-domain integration (e.g., SecOps, APM, CSM).

This progression ensures teams do not over-model early or introduce complexity before data quality and governance are established. The other options describe generic project lifecycles or organizational categorizations, not the CSDM-recommended adoption path.

Therefore, the correct answer is D – Crawl, Walk, Run, Fly.

The CMDB Process Owner is accountable for the overall Configuration Management process and its governance framework. This includes establishing data standards, defining ownership and stewardship expectations, coordinating remediation processes, monitoring CMDB health, and ensuring that identification and reconciliation practices support trustworthy data.

A CI Analyst performs operational work on assigned CI classes, including updating records and resolving specific CMDB-related tasks. However, the analyst does not own organization-wide governance standards. A CMDB Architect designs the CMDB data model and technical architecture, while a Service Owner is accountable for a particular service. The IT Asset Manager focuses primarily on financial, contractual, and asset-lifecycle information.

Because the requirement covers organizational standards, cross-source data quality, and ongoing governance accountability—not merely individual record maintenance—the CMDB Process Owner is the correct role.

=========

Archive is the correct policy type because the requirement is not permanent removal; it is controlled removal with the ability to restore records within a defined retention period. In CMDB Data Manager, archive policies support CMDB data lifecycle governance by moving eligible CI records out of active operational use while preserving them for recovery, audit, or historical review. This is different from Delete, which is used when records should be removed permanently and restoration is not the intended governance outcome. Certification is used to validate specific CI attributes, not remove records. Retire changes or manages lifecycle state but does not satisfy the specific requirement to remove records while preserving restore capability. Therefore, when the objective is to reduce active CMDB volume while retaining recoverability, the correct Data Manager policy type is Archive.

The correct answer is Certification because the team is validating a specific CI attribute or relationship: whether each server is correctly associated with its location. Data Certification is used when assigned users must review and validate specific field values on CI records, such as location, support group, lifecycle status, environment, or ownership. If incorrect, the certifier can update or correct the data. Attestation would be correct only if the question asked users to confirm that the CI still exists or is still valid in general. This question is more precise: the location association must be confirmed, which is an attribute-level validation requirement. Delete, Archive, and Retire are lifecycle policy types used to remove, archive, or transition records, not validate field accuracy. Therefore, Certification is the correct CMDB Data Manager policy type.

=========

CI Class Manager is used to configure class-level health requirements, including attributes designated as required or recommended for a selected CI class. The administrator can identify Support Group and Managed By Group as recommended attributes for the Linux Server class. Recommended fields provide operational and diagnostic value even when they are not technically mandatory for inserting a CI.

Health Preferences control how CMDB Health findings are processed, including task-generation behaviour for CIs that fail applicable health conditions. Once the health calculations identify operational Linux servers with missing recommended values, remediation tasks can be generated and assigned for corrective action. The guide confirms that task behaviour for unhealthy CIs is governed through the relevant health metric configuration rather than through the dashboard itself.

Technical Service Offerings and Dynamic CI Groups can populate and synchronize group values, but they are not the modules used to define recommended-field health checks and generate health tasks. Therefore, B is correct.

=========

The correct answers are C and D. Identification and reconciliation rules are essential because they control how incoming CI data is matched to existing records and how updates from different sources are reconciled. This prevents duplicate CIs and ensures that authoritative sources update the correct attributes. CI Class Manager is also required because it provides governance over CI class structure, attributes, and inheritance. Standardized CI classes prevent each source from classifying the same real-world object differently. Option A is the cause of the problem, not the solution. Option B introduces avoidable technical debt because custom scripts are harder to govern, maintain, and upgrade. A Data Foundations-aligned solution uses standard class governance plus IRE rules to enforce consistency across all sources.

=========