Sure Pass Exam CIS-Discovery PDF

File-based Discovery is a process that helps identify what software is running on your Windows and UNIX servers and devices, even if there is no registration information available. File-based Discovery is triggered in the exploration phase of normal Discovery, after the target device has been classified and identified. File-based Discovery probes execute a scan searching for specific file extensions or file names in paths that you configure. The resulting file information is returned in the probe payload. The sensor attempts to match the discovered files with installed software, using the file name, size, and version returned by the probe.

References: File-based Discovery, File Based Discovery - Support and Troubleshooting

The SNMP Query operation on a pattern for a custom device query allows Discovery to retrieve information from the target device using the SNMP protocol. It is best practice to use the published manufacturer’s device MIB, which is the official and standard definition of the device’s SNMP data. Using the manufacturer’s device MIB ensures that the query is accurate, consistent, and compatible with the device. Modifying the default MIB information, enabling SSH as a secondary protocol, or using live devices in production are not recommended practices, as they may introduce errors, security risks, or performance issues123.

References:

• SNMP Query pattern operation - Product Documentation: San Diego - Now Support Portal
• Load a MIB file - Product Documentation: Vancouver - ServiceNow
• How Loading of MIB file works on SNMP Browser ( Pattern Step - SNMP Query) - Support and Troubleshooting

In ServiceNow Discovery, when encountering the error 'Active, couldn't classify' during the discovery of a new SNMP network device, it typically indicates an issue with the classification process. Classification is a crucial initial step in the Discovery process, where the system determines the type of device it is interacting with. If an SNMP Classification rule for the new device type does not exist or needs updating, Discovery will be unable to classify and thus properly discover the device. Incorrect SNMP credentials or firewall issues usually result in different types of errors, such as authentication failures or no response from the device.

A horizontal discovery pattern is a sequence of operations that collects information about a specific type of configuration item (CI), such as an operating system, a database, or a web server1. A horizontal discovery pattern does not use the connectivity section, which is only used for the application pattern type2. The connectivity section defines how to connect to a CI and run commands on it3. A horizontal discovery pattern uses the following sections1:

• Variables: Defines the variables that store the data collected by the pattern and map them to the target table fields.
• Identification: Defines the criteria to identify a CI and update or create a record in the CMDB.
• Operations: Defines the actions to perform on the target CI, such as running commands, querying databases, or parsing files.

References: 1: ServiceNow Docs - Horizontal discovery patterns 2: ServiceNow Docs - Application pattern types 3: ServiceNow Docs - Connectivity section