CIS-DF Exam Dumps : Certified Implementation Specialist - Data Foundations (CMDB and CSDM)

Within the Common Service Data Model (CSDM), regulatory, security, and compliance-related information—especially for PII and PCI—must be modeled at the business and information level, not at the infrastructure or service offering level. The correct location for this data is Business Applications combined with Information Objects.

Business Applications represent the logical applications that support business capabilities and processes. Since compliance obligations (such as GDPR, PCI-DSS, or HIPAA) are assessed based on how the business uses data—not how many servers host the application—this is the correct anchor point for audit-relevant context.

Information Objects are explicitly designed to capture what data is processed, stored, or transmitted by an application, including data classifications such as PII, PCI, PHI, or confidential business data. They allow organizations to document regulatory scope, retention rules, encryption requirements, and audit controls without overloading CI records or polluting infrastructure classes.

Option A is incorrect because Technical Service Offerings and Groups focus on operational support and service delivery, not regulatory data context. Option C is also incorrect because Customer Service Offerings describe how services are consumed, while databases are technical components; neither is the authoritative place for compliance definitions.

Therefore, Business Applications and Information Objects are the correct CSDM constructs to support audits and regulatory compliance, making Option B the correct answer.

Archive is the correct policy type because the requirement is not permanent removal; it is controlled removal with the ability to restore records within a defined retention period. In CMDB Data Manager, archive policies support CMDB data lifecycle governance by moving eligible CI records out of active operational use while preserving them for recovery, audit, or historical review. This is different from Delete, which is used when records should be removed permanently and restoration is not the intended governance outcome. Certification is used to validate specific CI attributes, not remove records. Retire changes or manages lifecycle state but does not satisfy the specific requirement to remove records while preserving restore capability. Therefore, when the objective is to reduce active CMDB volume while retaining recoverability, the correct Data Manager policy type is Archive.

The contextual side panel is the correct work area because it displays detailed information about the selected node in Unified Map. When a Service Owner selects the home node or a related CI/service node, the contextual side panel provides supporting operational context such as active Incidents, planned Changes, related records, and other actionable details. This is exactly the requirement in the question: the Service Owner does not merely need to see topology; they need related work items connected to the selected node. The Map itself displays relationships and topology, but it does not provide the detailed related-record panel by itself. The toolbox provides map interaction tools, and content controls influence what layers or types of content are displayed. Neither of those is the correct place to review related Incidents and Changes for a selected node. Therefore, the correct answer is Contextual side panel.