CIS-DISCOVERY practice question 3 of 10

A Discovery Schedule contains a /24 subnet IP Range and a Shazzam batch size of 5000. How many times will a Shazzam probe be launched during discovery?

Full set: 125 questions
Answer options
A: 1 Correct answer
B: 2
C: 5000
D: 254
Correct Answer:
A. 1
Explanation

The Shazzam probe is responsible for port scanning during the initial phase of ServiceNow Discovery. To optimize network traffic and performance, Discovery batches IP addresses together when launching Shazzam probes. The total number of Shazzam probes created is determined by dividing the total number of IP addresses in the discovery schedule by the Shazzam batch size. A /24 subnet contains exactly 256 IP addresses (ranging from .0 to .255). Since the established Shazzam batch size configuration in this scenario is 5,000, all 256 IP addresses easily fit into a single batch. Consequently, the MID Server will only need to launch one single Shazzam probe to effectively scan the entire /24 subnet, minimizing overhead and execution time.

Why Incorrect

B. 2: Incorrect because the total number of IP addresses (256) does not exceed the batch size of 5000, so a second probe is completely unnecessary.
C. 5000: Incorrect because this value represents the probe batch size capacity limit, not the total number of probes launched or IPs scanned.
D. 254: Incorrect because this represents the typical number of usable host IP addresses in a /24 subnet, not the number of Shazzam probes launched.

References

ServiceNow Product Documentation, Washington DC Release: "Discovery phases" -> "Port scan phase (Shazzam)". URL: https://docs.servicenow.com

ServiceNow Product Documentation: "MID Server properties" -> "mid.shazzam.max_scans".

Scroll to Top