Security And Data Protection

An HR administrator needs to restrict access to sensitive employee medical records so that only the HR Benefits team can view them, even though other HR staff have the 'sn_hr_core.case_reader' role. Which security mechanism should be implemented?

Where do you go to view the HR Security Profiles assigned to a specific user?

What role is required for a user to manage 'HR Criteria' records?

An organization requires that HR case data be encrypted at rest. What platform feature must be enabled?

To ensure that HR case 'Work Notes' are hidden from the employee portal, what should you configure?

If an HR table has a 'Read' ACL for the 'hr_admin' role, and you want to grant a new group 'HR_Auditors' access, what should you do?

What is the purpose of the 'HR Criteria' 'Display' field?

Which feature enables the 'HR Scoped App' to hide its tables from non-HR users?

What is the impact of checking 'Enforce HR Security' on a table in the 'HR Scoped App'?

Which ServiceNow feature identifies sensitive HR data fields for protection?

If a user has the 'sn_hr_core.case_writer' role, what can they do?

In a multi-scoped environment, how do you allow an HR role to access a global 'cmdb_ci' table?

What is the purpose of the 'Delegated Developer' role?

When setting up 'HR Criteria', can you use both roles and conditions?

What is the benefit of using 'HR Criteria' instead of hard-coded ACL scripts?

What is the role of the 'HR Service' definition in data security?

When an HR service is restricted by 'HR Criteria', what happens when a user attempts to open a case they don't have access to via the portal?

Which 'HR Security Profile' setting defines whether the profile is active?

Which table holds the 'HR Profile' data?

If a user is assigned to multiple 'HR Security Profiles', how does the system determine the final access level?

What is the function of the 'Restricted Caller Access' (RCA) records?

What is the primary way to define which HR users can access the 'HR Service Portal'?

If a field has 'Encryption' applied, how does the system handle searching for that data?

Which TWO factors must be configured when setting up a new 'Delegated Developer' for HR?

Which TWO of the following are valid ways to secure sensitive HR data on the platform?

Which TWO of the following can be used to restrict access to an HR Case?

Which THREE of the following are considered 'Sensitive HR Data' categories?

Which TWO of the following are true about 'HR Criteria'?

Which THREE of the following are benefits of using 'Scoped Applications' for HR?

Which TWO of the following are examples of 'HR Scoped Roles'?

Which THREE of the following are valid ways to prevent data leakage in HR?

An HR department requires that only users with the 'sn_hr_core.admin' role can modify HR Services. Which security mechanism must be configured to ensure this role restriction is enforced during the service definition process?

A user needs access to HR case data, but only for cases belonging to their specific department. Which security model should be used to restrict this data access dynamically?

You are auditing your instance and find that unauthorized users are able to read HR Profile records. After verifying that no ACLs are broken, what is the next most likely source of this data exposure?

Which THREE of the following are primary components of the HR Service Delivery data protection strategy when handling PII?

Which THREE of the following are valid ways to secure HR data within a ServiceNow instance?

An HR administrator needs to ensure that only members of the HR department can view HR case records in the HR Service Portal. The HR cases are stored in the HR Case [sn_hr_core_case] table, which is not scoped. The administrator has created a new group called 'HR Case Viewers' and assigned it the 'sn_hr_core.case_reader' role. What is the most appropriate way to restrict access so that only this group can read HR case records?

An HR implementation specialist is configuring data protection for HR cases. The organization requires that certain HR case fields containing sensitive employee information, such as Social Security Number and Medical History, be encrypted at rest. The specialist plans to use the platform's encryption capabilities. Which TWO of the following statements are true regarding field-level encryption in ServiceNow? (Choose two.)

An HR implementation team wants to ensure that only users with the HR case manager role can view the 'confidential notes' field on HR cases, while all other HR agents can see the case but not that field. The field is on the HR case table. What is the most appropriate configuration to meet this requirement?

An HR administrator is configuring HR criteria to determine which HR services and cases a user can access. The administrator wants to create a criterion that includes all employees in the 'HR' department and also all users with the 'hr_admin' role. What is the correct way to combine these conditions?

An HR implementation specialist is configuring the HR Service Portal to ensure that HR cases are only accessible to the assigned HR agent and the case's opener, unless the user has the 'sn_hr_core.admin' role. The specialist needs to enforce this at the record level. Which platform feature should be used to meet this requirement?

An HR administrator needs to grant a new HR agent access to view HR cases, but the agent should not be able to see the 'employee_salary' field on those cases. The HR case table already has a read ACL that grants access to the 'hr_agent' role. What is the minimum additional configuration required to hide the 'employee_salary' field from this agent?

An HR implementation specialist is configuring the HR Service Portal and wants to ensure that employees can only view their own HR cases and not those of other employees. Which platform feature should be used to enforce this?

An HR implementation specialist is configuring security for HR Service Delivery. They need to ensure that HR cases containing sensitive employee information are protected. Which TWO of the following are valid methods to restrict access to HR case records based on user roles? (Choose two.)

An HR implementation specialist needs to ensure that HR case attachments containing sensitive employee information are protected from unauthorized access. The company requires that only the HR agent assigned to the case and the employee who opened the case can download the attachment. Which configuration should be implemented?

An HR implementation specialist is configuring the HR Service Delivery application. The organization wants to ensure that HR agents can only see HR cases that are assigned to their own assignment group, and that they cannot see cases assigned to other HR groups. Which feature should be used to enforce this?

An HR implementation specialist needs to ensure that only users with the HR administrator role can delete HR cases. Which security mechanism should be configured to enforce this?

An HR implementation specialist is configuring an HR Service Delivery (HR SD) instance where employees must be able to open their own HR cases but must never see cases opened by other employees. The solution should use a single, reusable configuration mechanism rather than writing bespoke business rules per case type. Which configuration should the specialist use to enforce this requirement?

An HR implementation specialist must ensure that employees can view their own HR profile, including job title and department, but cannot see compensation fields such as salary or bonus. Employees currently have the sn_hr_core.employee role. Which configuration most directly achieves field-level protection of compensation data while preserving access to non-sensitive HR profile fields?

An HR implementation specialist is configuring field-level encryption for sensitive employee data in HR cases. The organization requires that certain fields, such as national ID and salary, be encrypted at rest and that only users with a specific role can decrypt them. Which ServiceNow feature should the specialist use to meet this requirement?

An HR implementation specialist is reviewing how HR Service Delivery protects sensitive employee data across the platform. The organization wants to confirm that both row-level and field-level protections are in place, and that data in transit and at rest is safeguarded. Which TWO of the following mechanisms are native to ServiceNow and directly support HR data protection? (Choose two.)

An HR implementation specialist is reviewing the security configuration for HR Service Delivery. The organization wants to ensure that HR agents cannot view the 'Notes' field on HR cases if the case is marked as 'Confidential'. Which configuration should be implemented?