How to pass CIS-Discovery in 2026

What is CIS-Discovery?

ServiceNow Discovery is the platform feature that automatically finds and maps your IT infrastructure. It scans your network, identifies servers, switches, routers, storage devices, and applications, then populates the CMDB with configuration items and their relationships. Without Discovery, teams spend hundreds of hours manually entering CI data that goes stale within weeks.

The CIS-Discovery certification (Certified Implementation Specialist - Discovery) tests whether you can configure Discovery from scratch, run it across different network environments, troubleshoot failures when probes and sensors return errors, and optimize the entire process so it runs efficiently at scale.

The exam has approximately 45 questions. You get 90 minutes. It runs on the Pearson VUE platform, either at a testing center or proctored online using the OnVUE app. The passing score uses ServiceNow's scaled scoring model. No exact cutoff is published, but candidates who consistently score 80% or higher on practice tests report passing on the real exam.

This is not a conceptual certification. The questions assume you have actually configured Discovery, created credentials, troubleshot probe failures, and read ECC queue entries. Candidates who only study documentation without touching a PDI consistently underperform.

If you are deciding between certifications, the which certification first guide covers how Discovery fits into the broader ServiceNow certification path.

Prerequisites

CIS-Discovery has two important prerequisites in 2026.

First, ServiceNow recommends holding the Certified System Administrator (CSA) certification before attempting any CIS exam. CSA is not technically mandatory for CIS-Discovery, but the exam assumes you understand the ServiceNow platform fundamentals that CSA covers: tables, forms, ACLs, scheduled jobs, system properties, and basic administration. Without CSA-level knowledge, you will struggle with Discovery configuration questions that reference these platform concepts.

Second, and this one is mandatory: CIS-Data Foundations (CIS-DF) is now a required prerequisite for CIS-Discovery. ServiceNow introduced this mandate in 2025, and it affects exactly seven CIS certifications: ITSM, Discovery, HAM, SAM, Service Mapping, SIR, and VR. You cannot earn CIS-Discovery without first holding CIS-DF.

The good news is that CIS-DF is free through June 30, 2026. Your first attempt costs nothing. After that date, it costs $450 per attempt with retakes at $225. If you have not passed CIS-DF yet, do that first. The CIS-DF practice test covers all five domains with detailed explanations.

If you already hold CIS-Discovery but do not have CIS-DF, you need to pass it by December 31, 2026 or your Discovery certification expires. Do not wait until November to start studying.

Domain weights

ServiceNow publishes the official domain weights in the CIS-Discovery exam blueprint. These weights tell you exactly where to allocate your study time. Getting the ratio wrong is why people who "studied everything" still fail.

Domain	What it covers	Weight
Discovery fundamentals	MID server architecture, probes and sensors, ECC queue, Discovery phases, CI creation process	25%
Horizontal discovery	IP-based scanning, network discovery, Discovery schedules, credentials, port probes, classification	25%
Pattern-based discovery	Application patterns, custom patterns, pattern variables, horizontal patterns vs top-down patterns	20%
Service mapping integration	Application service maps, entry points, connection attributes, Traffic-Based Discovery, map completion	15%
Troubleshooting	Probe/sensor failures, credential errors, MID server issues, incomplete discovery, log analysis	15%

Discovery fundamentals and horizontal discovery together account for half your score. These two domains cover the core mechanics of how Discovery works: what the MID server does, how probes and sensors function, how IP ranges are scanned, and how classification turns raw data into typed CIs. If you only have time to study two domains deeply, these are the two.

Pattern-based discovery at 20% is the third-largest domain. This is where ServiceNow has invested the most development effort in recent releases. Patterns detect application-layer components that basic horizontal discovery misses. The exam tests whether you understand the difference between horizontal patterns and top-down patterns, how pattern variables work, and when to use custom patterns.

Service mapping integration (15%) and troubleshooting (15%) round out the exam. Service mapping builds on Discovery output to create visual application service maps. Troubleshooting tests your ability to diagnose real-world problems: why a probe failed, why a CI was not created, why credentials are not working.

For more context on how exam costs factor into your study investment, see the ServiceNow certification cost breakdown.

5-week study plan

This plan assumes 8 to 12 hours per week. The extra week compared to other CIS exams accounts for the hands-on lab work that CIS-Discovery demands. You cannot pass this exam on reading alone. You need time in a PDI running actual Discovery operations.

For general study strategies that apply across all ServiceNow exams, the how to study for ServiceNow exams guide covers time management, note-taking, and retention techniques.

PDI practice labs

A Personal Developer Instance (PDI) is free from ServiceNow. Request one at developer.servicenow.com. These labs are not optional for CIS-Discovery. The exam tests practical knowledge that you can only build by doing.

Lab 1: Install and validate a MID server

Download the MID server installer from your PDI. Install it on your local machine or a cloud VM. Configure the config.xml with your instance URL, MID server user credentials, and a unique name. Start the MID server service and verify it shows as "Up" in your instance under MID Servers. Test the connection by running a simple ECC queue test. This lab teaches you the architecture that every other Discovery feature depends on.

Lab 2: Create Discovery credentials

Go to Discovery > Credentials in your PDI. Create a Windows credential using a local admin account. Create a Linux/Unix credential using SSH with either password or key-based authentication. Create an SNMP credential with a community string. Assign each credential to a credential set. Understanding how credentials are organized, prioritized, and tested is critical. The exam will ask you what happens when credentials fail and how the fallback process works.

Lab 3: Configure and run a Discovery schedule

Create a new Discovery schedule. Set the IP range to a small subnet (your local network or a range that includes your MID server host). Select the MID server you installed in Lab 1. Choose the appropriate Discovery type (IP-based for horizontal discovery). Run the schedule. Watch the Discovery Status record update in real time. Check which CIs were created. Review the ECC queue to see the probes that ran and the sensor output that came back.

Lab 4: Run horizontal patterns

After horizontal discovery completes, check whether any patterns triggered on the discovered CIs. Look at the Discovery Status for pattern matches. If your MID server host is running any detectable applications (a web server, a database), you should see pattern-based CIs appear in addition to the base server CI. If no patterns matched, review the pattern logs to understand why. This teaches you how horizontal and pattern-based discovery work together.

Lab 5: Troubleshoot a failed discovery

Intentionally break something. Change a credential to the wrong password. Run Discovery against a host that is firewalled. Point a schedule at a non-existent IP range. Then walk through the troubleshooting process: check the Discovery Status, look for error messages, open the ECC queue entries, read the MID server log on disk. This lab builds the diagnostic skill that the troubleshooting domain tests. Most candidates never practice failure scenarios, which is exactly why those questions trip them up.

For additional free resources and lab ideas, see the free ServiceNow study resources guide.

Common mistakes

Not understanding MID server architecture. The MID server is the foundation of everything in Discovery. It sits between your ServiceNow instance and your network. Every probe goes through it. Every sensor result comes back through it. Candidates who treat the MID server as "just a thing you install" miss questions about MID server clustering, load balancing, network segmentation, and which protocols the MID server uses to communicate with both the instance and the targets. Study the MID server deeply. It appears in questions across all five domains.

Ignoring the ECC queue. The External Communication Channel queue is where all Discovery communication is logged. When a probe fails, the ECC queue shows you what was sent and what came back. When a sensor produces unexpected output, the ECC queue has the raw data. Candidates who never look at the ECC queue during their PDI practice cannot answer questions that show ECC queue entries and ask what went wrong. Spend time in the ECC queue during every lab exercise.

Confusing horizontal and pattern-based discovery. Horizontal discovery scans IP ranges and identifies devices at the network layer. Pattern-based discovery detects applications running on those devices. They are not alternatives to each other. They work in sequence. Horizontal discovery runs first to find hosts. Patterns run on the discovered hosts to detect applications. The exam tests whether you know which type of discovery found a given CI and what triggers each type to run. Get this distinction clear in week 1 and reinforce it in every lab.

Not practicing Service Mapping integration. Discovery and Service Mapping are separate products that work together. Discovery populates the CMDB with individual CIs. Service Mapping connects those CIs into application service maps that show how an application's components relate to each other. The exam tests the integration points: how Discovery data feeds into Service Mapping, what entry points are, and how connection attributes define relationships. If you only study Discovery in isolation, you will miss 15% of the exam.

Studying without a timer. Knowing the material and answering 60 questions in 90 minutes are different skills. That is 90 seconds per question on average. Multi-select questions require you to evaluate every option carefully, which takes longer. If you never practice under timed conditions, you will run out of time on the real exam or rush through the last 10 questions and get them wrong. Take at least three full-length timed practice tests before exam day.

Skipping the CIS-DF prerequisite. Some candidates plan to pass CIS-DF "later" and focus on CIS-Discovery first. That does not work. CIS-DF is mandatory. You cannot register for CIS-Discovery without it. And the CMDB knowledge from CIS-DF directly applies to Discovery questions about how CIs are created, classified, and reconciled. Pass CIS-DF first. It makes CIS-Discovery easier, not harder.

Practice tests

Practice tests serve two purposes for CIS-Discovery. First, they show you what the questions actually look like. ServiceNow certification questions have a specific style: scenario-based, often multi-select, with answer options that are close enough to require precise knowledge. Reading documentation does not prepare you for that format. Answering practice questions does.

Second, practice tests reveal your weak domains before the real exam does. After each practice test, sort your wrong answers by domain. If you missed four questions in troubleshooting but only one in horizontal discovery, your study time should shift toward troubleshooting. This domain-based review strategy is more effective than re-reading everything equally.

The CIS-Discovery practice test course has questions mapped to all five exam domains. Each question includes a detailed explanation that covers why the correct answer is right and why each wrong answer is wrong. The explanations link back to official ServiceNow documentation so you can verify everything independently.

When you take practice tests, simulate real conditions. Set a timer for 90 minutes. Close all other tabs. Do not look anything up. Mark questions you are unsure about and come back to them at the end, just like you would on the real exam. Your practice score under these conditions is the best predictor of your real score.

If you want a quick self-assessment before committing to full practice tests, the certification recommendation quiz can help you gauge your readiness across different ServiceNow certification paths.

Frequently asked questions

How much does the CIS-Discovery exam cost?

The CIS-Discovery exam costs $450 for the first attempt and $225 for each retake. Unlike CIS-DF, there is no free first attempt promotion for CIS-Discovery. That $450 price tag makes preparation especially important. One failed attempt costs more than any study materials you could buy. For a full breakdown of all ServiceNow exam pricing, see the certification cost guide.

Do I need CIS-DF before CIS-Discovery?

Yes. CIS-Data Foundations became a mandatory prerequisite for CIS-Discovery as part of ServiceNow's 2025 mandate. You cannot register for CIS-Discovery without holding CIS-DF. The mandate affects seven CIS certifications total: ITSM, Discovery, HAM, SAM, Service Mapping, SIR, and VR. Read the full mandate explanation for details and deadlines.

Can I pass CIS-Discovery without hands-on experience?

It is possible but unlikely. The exam asks scenario-based questions that assume you have configured Discovery, read ECC queue entries, troubleshot credential failures, and worked with Discovery schedules. Candidates with hands-on PDI experience consistently score higher than those who only read documentation. A PDI is free. There is no reason to skip the hands-on work.

How long should I study for CIS-Discovery?

Plan for 5 weeks at 8 to 12 hours per week. That gives you approximately 40 to 60 hours of total study time. Candidates with existing Discovery experience on real projects can compress this to 3 to 4 weeks. Candidates new to Discovery should not compress below 5 weeks because the PDI labs need time to set up and iterate through.

What is the difference between CIS-Discovery and CIS-Service Mapping?

CIS-Discovery focuses on how ServiceNow finds and classifies individual CIs: the MID server, probes, sensors, credentials, horizontal scanning, and pattern-based detection. CIS-Service Mapping focuses on how those individual CIs get connected into application service maps that show business service dependencies. Discovery populates the CMDB. Service Mapping organizes what Discovery found into meaningful service views. Many candidates pursue both certifications because the technologies work together, but they are separate exams with separate study paths.