VendorsExamsEnterprise
Support
Request an ExamContact UsFAQ

Certified Implementation Specialist - Cloud Provisioning and Governance Free Sample Questions

20 free sample questions150 in the full practice test

Try simulator

CIS-CPG Sample Questions

  1. Question 1

    A financial services client has implemented ServiceNow CPG to manage their AWS and Azure environments. They have a strict compliance requirement that any new virtual machine provisioned with the tag 'CostCenter:Trading' must automatically be assigned to a specific, pre-approved network security group and have a maximum lease duration of 90 days. What is the most efficient way to enforce this multi-faceted requirement within CPG?

    Answer and explanation

    Correct answer: C

    This is the most efficient and declarative approach. CPG is designed to handle such requirements through the combination of Resource Profiles (for resource attributes like network settings) and Policies (for conditional enforcement based on metadata like tags). A policy can enforce the application of a specific profile, which in turn defines the technical specifications and lease terms, avoiding the need for complex custom scripting.

  2. Question 2

    A cloud administrator is building a custom workflow for a complex provisioning process. The workflow needs to provision a database, retrieve its generated public IP address, and then pass that IP address to a subsequent step that provisions a web server, which needs the IP to configure its connection string.

    Which CAPI object is specifically designed to store and pass data, such as the database IP address, between different activities within the same workflow execution?

    Answer and explanation

    Correct answer: B

    The Cloud Operation Context is a data structure that persists throughout a CAPI workflow's execution. It acts as a data bus, allowing one activity (e.g., provisioning the database) to write output variables (like the IP address) into the context, which can then be read by subsequent activities (e.g., configuring the web server).

  3. Question 3

    Multiple answers

    When configuring a Service Account for an Azure cloud provider in ServiceNow CPG, which specific pieces of information are required to establish the connection and authenticate successfully? (Select THREE)

    Answer and explanation

    Correct answers: A, C, E

    To authenticate an Azure Service Principal, you need the Tenant ID (to identify the Azure AD directory), the Application (client) ID (to identify the application registration), and a Client Secret or Certificate (as the password/proof of identity).

  4. Question 4

    A development team uses a complex Terraform configuration to deploy their entire application stack, which includes EC2 instances, an RDS database, and a load balancer. The team lead wants to make this stack available for self-service provisioning through the ServiceNow Cloud Catalog while maintaining Terraform as the underlying engine. What is the correct sequence of steps to achieve this?

    Answer and explanation

    Correct answer: C

    The standard and recommended process involves connecting ServiceNow to the source of the Terraform configuration (like a Git repo) via the Terraform Connector. ServiceNow can then parse the template, generate a corresponding Catalog Item with variables mapped as inputs, and make it available for provisioning, leveraging the native integration.

  5. Question 5

    True or False: In ServiceNow CPG, a single Resource Profile can be configured to apply different settings based on whether the target cloud provider is AWS or Azure.

    Answer and explanation

    Correct answer: B

    A Resource Profile is provider-specific. You would create one Resource Profile for AWS settings (e.g., specifying an EC2 instance type) and a separate Resource Profile for Azure settings (e.g., specifying an Azure VM size). A policy could then be used to select the appropriate profile based on the target cloud provider.

  6. Question 6

    During the deployment of an Azure VM using a CPG catalog item, the provisioning process fails. The workflow error message indicates an 'InvalidTemplate' error from the Azure API. The administrator suspects an issue with how the user inputs from the catalog item are being passed to the ARM template parameters. Which CPG component is responsible for mapping the catalog item variables to the parameters within the ARM template?

    Answer and explanation

    Correct answer: B

    The Blueprint is the central component that maps user inputs from the Cloud Catalog Item to the parameters of the underlying infrastructure template (like an ARM template). An incorrect mapping or data type mismatch in the Blueprint configuration is a common cause of 'InvalidTemplate' errors, as it results in malformed data being sent to the cloud provider's API.

  7. Question 7

    A cloud architect needs to design a CPG solution that automatically applies a set of standard tags to every resource provisioned, regardless of the cloud provider or catalog item used. The required tags are 'ManagedBy:ServiceNow' and 'Environment:Production'. Which CPG construct is the most appropriate place to define these universally applied tags?

    Answer and explanation

    Correct answer: B

    Defining tags at the top-level Resource Block (often the Stack or Blueprint Container) ensures that they are inherited by all child resources within the provisioned stack. This is the most efficient and scalable method for applying universal tags, as it centralizes the logic and avoids having to repeat the tag definitions in every catalog item or policy.

  8. Question 8

    Case Study:

    A large enterprise, Global Tech Inc., is using ServiceNow CPG to streamline its multi-cloud operations across AWS and VMware. They have established separate Cloud Accounts for their Development and Production environments in both cloud providers. The Cloud Governance team has been tasked with implementing strict cost control and access policies.

    Requirements:

    1. The Development team should only be able to provision resources in the Development Cloud Accounts (both AWS and VMware).
    2. Developers are limited to a combined monthly spending quota of $5,000 across all their provisioned resources.
    3. Any attempt to provision a resource that would cause the team to exceed this quota must be blocked and require manager approval.
    4. All provisioned resources must be discoverable and populated in the ServiceNow CMDB.

    Which combination of CPG components is required to fulfill all these requirements?

    Answer and explanation

    Correct answer: C

    This combination correctly addresses all four requirements using native CPG features: 1) Permissions applied directly to the Cloud Accounts restrict which users/groups can provision into them. 2 & 3) A Quota policy is the correct tool for setting a spending limit and can be configured to trigger an approval workflow when the threshold is breached. 4) The 'Create CI' flag on Resource Blocks is the standard mechanism that instructs CPG to create a corresponding Configuration Item (CI) in the CMDB upon successful provisioning.

  9. Question 9

    What is the primary function of a CAPI Response Processor script in a custom CPG workflow?

    Answer and explanation

    Correct answer: B

    The Response Processor is executed after CAPI receives a response from a cloud provider's API. Its main purpose is to parse this response (typically in JSON format), extract key information (like a resource ID, IP address, or status), and map it to variables in the Cloud Operation Context for use in subsequent workflow steps.

  10. Question 10

    A ServiceNow administrator is configuring a catalog item for provisioning VMware virtual machines. They want to offer users pre-defined sizes (e.g., Small, Medium, Large) instead of letting them specify exact CPU and Memory values. Each size corresponds to a specific combination of vCPUs and RAM.

    Which CPG component is used to define these 't-shirt sizes'?

    Answer and explanation

    Correct answer: C

    A Compute Profile is a type of Resource Profile specifically designed to define virtual hardware specifications. It allows administrators to create named, pre-defined configurations (t-shirt sizes) for CPU, memory, and other compute resources, which can then be presented as simple choices to end-users in the Cloud Catalog.

Register free to unlock 10 more sample questions

Lifetime One

Own this practice test forever.

$79.99
$75.99
one-time
  • Full access to 150 questions
  • Study, Timed & Flashcard Modes
  • All past and future versions i
  • Detailed Explanations
  • Study Tracking & Past Attempts
  • Brainy AI Assistant
  • Lifetime updates

Two

Any 2 exams per month.

$20.00/exam
$39.99
/month
  • 2 active exam slots
  • Study, Timed & Flashcard Modes
  • All past and future versions i
  • Detailed Explanations
  • Study Tracking & Past Attempts
  • 1,000 Brainy AI Credits
  • Cancel anytime
Popular

Pro Four

Any 4 exams per month.

$17.50/exam
$69.99
/month
  • 4 active exam slots
  • Study, Timed & Flashcard Modes
  • All past and future versions i
  • Detailed Explanations
  • Study Tracking & Past Attempts
  • 5,000 Brainy AI Credits
  • Dedicated support

Premium Twelve

Any 12 exams over 3 months.

$15.00/exam
$179.99
/3 months
  • 4 active exam slots
  • Study, Timed & Flashcard Modes
  • All past and future versions i
  • Detailed Explanations
  • Study Tracking & Past Attempts
  • 15,000 Brainy AI Credits
  • Dedicated support
  • Friend seat included — full access

Trusted by professionals at

NvidiaSupabaseGitHubOpenAITursoClerkClaude AIAmazon