Most Recent ServiceNow CIS-Discovery Exam Questions & Answers

Global variables are variables that are automatically available for all steps in horizontal discovery patterns. They store information about the target CI, such as its IP address, host name, operating system, and credentials. There are two global variables that may be used for steps in horizontal discovery patterns: system and computer_system. The system variable contains the information about the target CI's IP address, host name, and credentials.The computer_system variable contains the information about the target CI's operating system, such as its name, version, and architecture12.

Patterns and horizontal discovery - Product Documentation: Tokyo - Now Support Portal

Horizontal Pattern probe - Product Documentation: San Diego - Now Support Portal

Debug mode is a feature of the Pattern Designer that allows you to test and troubleshoot your patterns in real time. To activate Debug mode, you need to have the admin role or a role that includes the pattern_designer_debug permission.Debug mode is not available for users who only have the pattern_designer_read permission1.

A check is a part of Agent Client Collector that defines the osquery commands to run on a CI and the frequency of execution. A check can also specify the conditions for generating alerts or events based on the osquery results.

Reference 1: Agent Client Collector - Product Documentation: San Diego - ServiceNow 2: Agent Client Collector for Visibility - Product Documentation: San Diego - ServiceNow

In ServiceNow Discovery, the reconciliation process is governed by precedence rules. These rules determine which data source's information will be retained if there are conflicts when multiple sources discover the same CI. In this case, Altiris has a higher order of precedence (300) compared to ServiceNow (100), as seen in the ''Data Source Precedents'' section of the image. Therefore, if Altiris discovers 'Windows2' for the name attribute on the same CI after ServiceNow sets it to 'Windows1', the name will change to 'Windows2' due to Altiris's higher precedence.

Reconciliation

Data source precedents

For ServiceNow Discovery to detect a Windows device, the Windows Management Instrumentation (WMI) service needs to be running on the host. WMI is a Windows feature that provides a standardized way to access management information about operating system components and services. Discovery uses WMI to query Windows hosts for information about their hardware, software, and system configuration. SSH is used for Unix-like systems, WinRM is an alternative Windows management protocol, and CIM (Common Information Model) is a cross-platform standard; however, WMI is the primary service used for Windows device discovery.