Configuration Management Database
About 15% of the CIS-Discovery exam — see all 4 domains.
Discovery exists to populate a healthy CMDB. This domain is about how data lands correctly and stays trustworthy.
CI classes and the CMDB
- CIs live in class tables that extend a base class (
cmdb_ci) in a hierarchy (e.g.,cmdb_ci_server→cmdb_ci_win_server). A more specific subclass inherits the parent's fields. - Classification during Discovery determines which class a CI is written to; reclassification moves a CI from one class to another (for example, when a device was first found generically and later identified more precisely). Reclassification can be switched (downgrade/upgrade within the hierarchy).
Identification and Reconciliation Engine (IRE)
The IRE is the single gateway through which Discovery (and other sources) write CIs, so the CMDB stays free of duplicates.
- Identification rules — each CI class has an identification rule made of one or more identifier entries, evaluated in priority order. An entry lists the criterion attributes that must match an existing CI for it to be considered "the same." Example: a server may be identified by serial number first, then by name + IP.
- Reconciliation rules — when multiple discovery sources can write the same attribute, reconciliation decides which source is authoritative for that attribute, preventing one source from overwriting another's better data.
- Data sources & precedence — IRE tracks which source last updated a CI; this underpins reconciliation and helps spot conflicting writes.
- IRE applies to payloads (including those from Discovery patterns and Import Sets), inserting, updating, or matching CIs as the rules dictate.
CMDB Health
CMDB Health dashboards score data quality across KPIs grouped into three families you should memorize:
- Completeness — are required attributes and required relationships populated? (e.g., CIs missing an owner or a critical attribute).
- Compliance — do CIs follow expected rules: correct class, no orphans, no stale records (not updated within an expected window), duplicates flagged.
- Correctness — are values valid and consistent (e.g., duplicate detection, recommended attribute values).
Health jobs run on a schedule and feed dashboards used to prioritize remediation (deduplicate, fill gaps, retire stale CIs).
What to drill for Domain 3: the CI class hierarchy and reclassification; that IRE is the mandatory entry point preventing duplicates; identifier entries with criterion attributes evaluated by priority; reconciliation deciding authoritative source per attribute; and the three CMDB Health families (completeness, compliance, correctness) plus what staleness/duplicates mean.
Sample questions from this domain
Three of the 45 in this domain, with the reasoning. The full set is in the question bank.
What is the primary purpose of the Identification and Reconciliation Engine (IRE) in the CMDB?
- A. To identify whether incoming CI data matches an existing CI and to reconcile attribute updates from multiple sources ✓
- B. To schedule discovery runs
- C. To install MID Servers
- D. To scan the network for open ports
Why: The IRE matches incoming data to existing CIs (identification) and governs which source can update which attributes (reconciliation). Port scanning is Shazzam, MID installation and scheduling are unrelated to the IRE.
Which CMDB component defines the attributes used to uniquely identify a CI of a given class?
- A. Discovery Schedule
- B. CI Identifier (identification rule) with identifier entries ✓
- C. ECC queue record
- D. MID Server cluster
Why: A CI Identifier (identification rule) lists the identifier entries/criterion attributes used to uniquely match a CI for its class. Schedules, MID clusters, and ECC records do not define CI identity.
What is the role of 'reconciliation rules' (datasource precedence) in the CMDB?
- A. They define the MID Server IP ranges
- B. They encrypt the ECC queue
- C. They schedule discovery runs
- D. They control which data source is authoritative for specific attributes, preventing lower-priority sources from overwriting them ✓
Why: Reconciliation rules establish datasource precedence so only the authoritative source updates given attributes, preventing overwrites by lower-priority sources. They do not schedule discovery, define MID IP ranges, or encrypt the ECC queue.