ServiceNow · Free Practice Questions · Last reviewed May 2026
24real exam-style questions organised by domain, each with the correct answer highlighted and a plain-English explanation of why it's right — and why the others are wrong.
You are tasked with ensuring that sensitive HR cases are restricted to specific HR agents. Which mechanism should you configure to ensure that only members of the 'HR Benefits' group can read cases assigned to the 'Benefits' HR Service?
Implement HR ACLs
ACLs allow you to define granular security rules based on roles and group membership for HR cases.
Configure Data Policies
Apply Business Rules
Use HR Criteria
Which THREE actions are required to properly configure an HR Service to use a specific HR Template?
Create a Business Rule to trigger the template
Associate the template directly to the HR Case table
Ensure the HR Template is marked as 'Active'
Inactive templates cannot be applied to cases.
Define the template content in the 'HR Template' module
The template must exist and be defined before it can be assigned to a service.
Link the HR Template in the HR Service record
This is the primary configuration step for linking logic to the service.
An HR implementation requires separating HR data from general ITSM data. Which THREE steps should be taken to ensure proper HR data isolation?
Enable Domain Separation globally
Use the Human Resources: Core scope for all HR tables
Scoped applications prevent unauthorized cross-scope data access.
Configure ACLs to restrict table access to HR scoped users
ACLs are the final line of defense for data isolation.
Disable all Global business rules
Assign HR-specific roles to HR users
Roles like sn_hr_core.admin ensure users only interact with HR-authorized modules.
In the context of the Employee Center, what determines whether a user can see a specific HR catalog item?
User's Active Directory group
The System Administrator role
The HR Service configuration
HR Criteria
HR Criteria allows for granular visibility control based on HR Profile attributes.
You are designing a data model where HR Profiles must be automatically created when a new user is added to the system. Where should this logic be configured?
Life Cycle Event trigger
HR Service Activity
Employee Center Topic Mapping
HR Profile Business Rule
The HR Profile business rule or data policy ensures profile creation.
An HR administrator needs to ensure that only members of the 'HR Tier 1' group can view sensitive HR cases. Which mechanism should be used to restrict access?
Update the HR Case ACLs
ACLs are the standard security mechanism for row-level and column-level access control.
Use UI Policies
Change the HR Service configuration
Modify the Case Assignment Rules
Want more HR System Architecture practice?
Practice this domainWhen configuring 'HR Security Profiles', what is the purpose of the 'Apply to' field?
To define which HR Service the profile controls
To assign the profile to a specific user group
To specify whether the profile covers HR Cases, HR Tasks, or both
This is the functional purpose of the 'Apply to' field in the profile.
To restrict the profile to specific geographic locations
Which THREE of the following are primary methods for enforcing data protection within the HR Service Delivery application?
Before Query Business Rules
These are used to append 'WHERE' clauses to database queries.
Access Control Lists (ACLs)
ACLs define who can read, write, or delete HR data.
Service Portal Theme settings
Query Business Rules
Query Business Rules restrict what records a user can see in a list view.
HR Criteria
A user in the HR department reports they cannot see records in the 'HR Tasks' list, despite having the 'hr_task_reader' role. What is the most likely cause?
The user is not in the 'hr_admin' group
The user needs the 'sn_hr_core.admin' role
The HR Case is in a 'Closed' state
The 'HR Criteria' associated with the HR Task type excludes the user's department
HR Criteria acts as a gatekeeper for record visibility beyond just roles.
An HR Administrator needs to configure data masking for the 'SSN' field in the HR Profile (sn_hr_core_profile) table. Which feature should be used to ensure the data is masked for all users except those with the 'hr_admin' role?
Use the 'Field Encryption' module with an encryption context
Field Encryption allows for role-based access to decrypted data.
Set a Business Rule on the sys_dictionary table
Apply a UI Policy to make the field read-only
Configure an HR Criteria record
Which role is required to modify HR security configurations in a scoped application without having full system admin access?
security_admin
delegated_developer
The delegated developer role is specifically designed for scoped application management.
sn_hr_core.admin
hr_manager
You need to restrict access to a specific HR Case so that only members of the 'Payroll' assignment group can view it. Which security mechanism should you configure?
Set the 'Read' ACL on the sn_hr_core_case table to 'Public'
Modify the 'HR Service' definition to include a client script
Configure a Business Rule to modify the sys_id visibility
Apply an HR Security Profile using the 'Restrict by Assignment Group' setting
HR Security Profiles allow for granular restriction of HR records based on assignment groups.
Want more Security And Data Protection practice?
Practice this domainWhich role is required to configure Lifecycle Events in ServiceNow?
admin
hr_admin
sn_hr_core.admin
sn_hr_le.admin
This role grants permission to manage LE configurations.
You have multiple activity sets in a lifecycle event. How does the system determine the order in which they trigger?
The order defined in the Lifecycle Event record
The 'Order' field on the Activity Set
The Order integer determines the sequence.
Alphabetical order of the name
Creation date of the activity set
An HR agent reports that an activity within an activity set is not triggering despite the trigger condition being met. What is the most likely cause?
The activity set is set to 'Active'
The parent Lifecycle Event case is in 'Draft' status
The trigger condition is too complex
The activity type is not defined
Activities require a type to define the creation mechanism.
You need to ensure that an activity set triggers only for employees in the 'Engineering' department. Where do you configure this restriction?
Activity Set Properties
Activity Field Mapping
Activity Set Trigger Condition
Lifecycle Event Audience
Audiences allow filtering of activity sets by user criteria.
When using Activity Field Mappings, which source object represents the data entered by the user in the Lifecycle Event case form?
HR Case
This refers to the triggering LE case record.
Subject Person
Activity Set
Activity Definition
A HR administrator wants to create a new Lifecycle Event. Which table must be the base for the record to be available for the Lifecycle Event engine?
sn_hr_le_activity
sn_hr_core_task
sn_hr_core_case
sn_hr_le_case
Lifecycle Event cases are managed via the sn_hr_le_case table.
Want more Lifecycle Events And Journeys practice?
Practice this domainWhich TWO configurations should be performed to customize the Employee Center header branding?
Change the User Criteria for the homepage
Update the HR Service definition
Edit the Employee Center record producer
Use the Branding Editor to update logo and primary colors
The Branding Editor provides a UI for these changes.
Modify the CSS in the portal theme record
Portal themes hold the CSS for deep customization.
When configuring a Record Producer for an HR Service, where should the HR Administrator map the 'Short Description' variable to ensure it populates the case correctly?
By creating a template for the Record Producer
In the Record Producer 'Variables' related list, configure the variable's 'Map to field' attribute
This is the native way to map variables to table fields.
Using a Client Script on the Record Producer
In the HR Service lifecycle event mapping
An HR administrator needs to ensure that only members of the 'Payroll' group can view a specific sensitive HR case. Which feature should be used to restrict access based on group membership?
Access Control Lists (ACLs)
ACLs provide granular security control for record access.
Business Rules
HR Service assignment rules
HR Criteria
Which THREE steps are necessary to ensure that HR criteria correctly restrict access to an Employee Center topic?
Update the global ACLs for the topic table
Apply the HR Criteria to the Topic record within the Employee Center configuration
The link between criteria and topic must be established.
Run the HR Criteria evaluation job manually
Ensure the 'Available for' field is populated on the Topic record
This is the standard mechanism to apply criteria to a topic.
Create a custom HR Criteria record specifying the audience
HR Criteria defines who can see the content.
An HR agent reports they cannot view the 'HR Case' module in the application navigator. Which role is most likely missing from their profile?
itil
hr_admin
sn_hr_core.case_reader
This is the base role for viewing HR cases.
sn_hr_core.profile_reader
You are configuring a new HR Service that requires an approval from the manager before it progresses to the 'Work in Progress' state. Where should this be defined?
HR Service record
The HR Service record allows linking of specific lifecycle events or approval definitions.
HR Lifecycle Event
Assignment Rule
Catalog Item
Want more Core HR Applications And Employee Center practice?
Practice this domainThe CIS-HR exam has 200 questions and must be completed in 120 minutes. The passing score is 700/1000.
Scenario-based questions covering exam objectives with detailed answer explanations.
The exam covers 4 domains: HR System Architecture, Security And Data Protection, Lifecycle Events And Journeys, Core HR Applications And Employee Center. Questions are weighted by domain — higher-weight domains appear more on your actual exam.
No. These are original exam-style practice questions written against the official ServiceNow CIS-HR exam objectives. They are not copied from the real exam. Courseiva focuses on genuine understanding, not memorisation of braindumps.
Courseiva tracks your accuracy per domain and routes you toward weak areas automatically. Free, no account required.