Security And Data Protection

When configuring 'HR Security Profiles', what is the purpose of the 'Apply to' field?

Which THREE of the following are primary methods for enforcing data protection within the HR Service Delivery application?

A user in the HR department reports they cannot see records in the 'HR Tasks' list, despite having the 'hr_task_reader' role. What is the most likely cause?

An HR Administrator needs to configure data masking for the 'SSN' field in the HR Profile (sn_hr_core_profile) table. Which feature should be used to ensure the data is masked for all users except those with the 'hr_admin' role?

Which role is required to modify HR security configurations in a scoped application without having full system admin access?

You need to restrict access to a specific HR Case so that only members of the 'Payroll' assignment group can view it. Which security mechanism should you configure?

You are configuring Delegated Development for an HR team member. You want to grant them permissions to create and modify HR Service Portal widgets, but you must prevent them from modifying the underlying HR security ACLs. Which scope role should be assigned to the developer?

An HR administrator needs to restrict access to sensitive employee medical records so that only the HR Benefits team can view them, even though other HR staff have the 'sn_hr_core.case_reader' role. Which security mechanism should be implemented?

Where do you go to view the HR Security Profiles assigned to a specific user?

What role is required for a user to manage 'HR Criteria' records?

Which of the following is true regarding 'HR Scoped Roles'?

You need to ensure that 'Payroll' employees cannot see 'Employee Relations' cases. What is the standard ServiceNow best practice for this?

If a user has both the 'hr_admin' and 'sn_hr_core.admin' roles, which role takes precedence for HR data security?

An organization requires that HR case data be encrypted at rest. What platform feature must be enabled?

To ensure that HR case 'Work Notes' are hidden from the employee portal, what should you configure?

When configuring 'Delegated Developer', what privilege allows a user to modify 'HR Service' definitions?

Which module contains the 'HR Security' configuration settings?

You need to allow HR managers to view sensitive employee information only while they are on the corporate VPN. What security tool is best suited for this?

If an HR table has a 'Read' ACL for the 'hr_admin' role, and you want to grant a new group 'HR_Auditors' access, what should you do?

Who can modify HR Security Profiles?

What is the purpose of the 'HR Criteria' 'Display' field?

Which feature enables the 'HR Scoped App' to hide its tables from non-HR users?

If an HR Case is assigned to a 'Group', how does the 'HR Security Profile' ensure only the assigned group members can see it?

What is the impact of checking 'Enforce HR Security' on a table in the 'HR Scoped App'?

When using 'HR Criteria', which attribute can be used to restrict access based on the user's location?

Which ServiceNow feature identifies sensitive HR data fields for protection?

If a user has the 'sn_hr_core.case_writer' role, what can they do?

In a multi-scoped environment, how do you allow an HR role to access a global 'cmdb_ci' table?

What is the purpose of the 'Delegated Developer' role?

When setting up 'HR Criteria', can you use both roles and conditions?

What is the benefit of using 'HR Criteria' instead of hard-coded ACL scripts?

What is the role of the 'HR Service' definition in data security?

When an HR service is restricted by 'HR Criteria', what happens when a user attempts to open a case they don't have access to via the portal?

Which 'HR Security Profile' setting defines whether the profile is active?

Which table holds the 'HR Profile' data?

How can you audit access to HR cases?

Which role is necessary to perform 'HR Case' deletions?

If a user is assigned to multiple 'HR Security Profiles', how does the system determine the final access level?

What is the function of the 'Restricted Caller Access' (RCA) records?

You need to ensure that HR case attachments are encrypted. What is the correct approach?

What is the primary way to define which HR users can access the 'HR Service Portal'?

If a field has 'Encryption' applied, how does the system handle searching for that data?

Which THREE of the following are components of an HR Security Profile?

Which TWO factors must be configured when setting up a new 'Delegated Developer' for HR?

Which THREE of the following are types of HR Criteria?

Which TWO of the following are true about 'HR Scoped Roles'?

Which TWO of the following are valid ways to secure sensitive HR data on the platform?

Which TWO of the following can be used to restrict access to an HR Case?

Which THREE of the following are considered 'Sensitive HR Data' categories?

Which THREE of the following are necessary to test if your HR security configuration is working correctly?

Which TWO of the following are true about 'HR Criteria'?

Which THREE of the following are benefits of using 'Scoped Applications' for HR?

Which TWO of the following tools allow you to perform a security audit on HR records?

Which THREE of the following are required to successfully implement 'Field Level Encryption'?

Which TWO of the following are examples of 'HR Scoped Roles'?

Which THREE of the following are security controls that can be applied to HR attachments?

Which TWO of the following are true regarding 'HR Security Profiles' and 'Assignment Groups'?

Which THREE of the following are valid ways to prevent data leakage in HR?

An HR administrator is configuring HR Criteria to restrict access to a specific Knowledge Base article. When applying this criteria, the system checks the HR Profile of the logged-in user. Which security component is responsible for enforcing this record-level visibility in the HR Service Delivery module?

You need to grant a partner HR team the ability to modify HR Case records, but you must prevent them from seeing the 'Salary' field on the HR Profile. How should you implement this requirement using the principle of least privilege?

An HR department requires that only users with the 'sn_hr_core.admin' role can modify HR Services. Which security mechanism must be configured to ensure this role restriction is enforced during the service definition process?

When utilizing the 'HR Service Delivery' module, you notice that sensitive employee data is being logged in the application logs. Which ServiceNow feature should be used to mask this data automatically without modifying the business logic?

A customer is using 'Scoped HR' and needs to allow an HR Admin to modify scripts while ensuring they cannot access other system tables. Which role should be assigned to the HR Admin to permit these actions within the HR scope?

A user needs access to HR case data, but only for cases belonging to their specific department. Which security model should be used to restrict this data access dynamically?

You are auditing your instance and find that unauthorized users are able to read HR Profile records. After verifying that no ACLs are broken, what is the next most likely source of this data exposure?

Which THREE of the following are primary components of the HR Service Delivery data protection strategy when handling PII?

Which TWO statements are true regarding the use of the 'sn_hr_core.delegated_developer' role?

Which THREE of the following are valid ways to secure HR data within a ServiceNow instance?