CIS-HR Practice Test 13 — 15 Questions

Question 1

Which TWO security methods are recommended for protecting HR case data?

Accepted Answer

Domain Separation. Domain Separation (D) is correct because it logically partitions HR case data by domain so that users in one domain cannot see records belonging to another, which is the recommended way to isolate sensitive HR data across business units or tenants. Access Control Lists (E) are correct because ACLs enforce record- and field-level authorization on HR case tables, ensuring only users with the appropriate roles (for example, sn_hr_core.case_writer or HR admin roles) can read, write, create, or delete HR case data. Together, Domain Separation and ACLs provide the platform's core data-security controls for protecting HR case records. UI Policies (A) only control client-side form behavior such as making fields mandatory or read-only, and are not a security mechanism. Business Rules (B) are server-side scripts that enforce logic or data manipulation, not access authorization. Data Policies (C) enforce mandatory/read-only field rules on the server but do not restrict who can access records, so they are not the recommended security methods for protecting HR case data.

Answer

UI Policies

Answer

Business Rules

Answer

Data Policies

Question 2

Where do you configure the link between an HR Service and a specific HR Case template?

Accepted Answer

HR Service record. The HR Service record is where you configure the link to a specific HR Case template, because the HR Service defines the service offering and its associated case template determines the fields, tasks, and workflow used when a case is created for that service. On the HR Service form, the 'Case template' field references the HR Template record that should be applied. This is the standard configuration point in HR Service Delivery.

Answer

Record Producer

Answer

Assignment Rule

Answer

HR Template record

Question 3

A customer wants to map HR cases to specific HR services based on the 'Category' field on the Employee Center. What is the correct path to configure this?

Accepted Answer

HR Administration > HR Services. The correct path to map HR cases to HR services based on the 'Category' field is HR Administration > HR Services. Within the HR Service record, administrators configure the service's category, subcategory, and other attributes that determine how cases are routed and mapped from the Employee Center category selection. This is where the linkage between the Employee Center category and the HR service is defined.

Answer

HR Administration > Case Options

Answer

Employee Center > Category Mappings

Answer

Service Portal > Pages

Question 4

When an HR Case is created, it inherits field values from the HR Template. What determines which template is applied?

Accepted Answer

HR Service. The HR Service record is what determines which HR Template is applied when an HR Case is created. Each HR Service is associated with an HR Template, and when a case is opened against that service (for example, via the HR catalog or a case creation flow), ServiceNow uses the template to pre-populate fields such as short description, category, and other defaults.

Answer

Assignment Rule

Answer

HR Profile

Answer

HR Topic

Question 5

An HR department requires that only users with the 'sn_hr_core.admin' role can modify HR Services. Which security mechanism must be configured to ensure this role restriction is enforced during the service definition process?

Accepted Answer

Access Control Lists (ACLs). Access Control Lists (ACLs) in ServiceNow are the mechanism that enforces role-based restrictions on tables and fields, including HR Services (sn_hr_core_service). An ACL requiring the 'sn_hr_core.admin' role for write operations ensures only those users can modify HR Services.

Answer

Client Scripts

Answer

UI Policies

Answer

Workflow Activities

Question 6

Where do you go to define the 'Lifecycle Event' itself (the parent object)?

Accepted Answer

Lifecycle Events > Lifecycle Events. To define the Lifecycle Event itself (the parent object), you navigate to Lifecycle Events > Lifecycle Events in the ServiceNow HR application menu. This module lists all Lifecycle Event records and allows you to create and configure the parent object that orchestrates the entire lifecycle process.

Answer

Activity Builder

Answer

HR Case Template

Answer

Task Configuration

Question 7

When an HR service is restricted by 'HR Criteria', what happens when a user attempts to open a case they don't have access to via the portal?

Accepted Answer

The system returns 'Record not found'. When HR Criteria restricts access to an HR service, the system does not reveal the existence of the restricted case to unauthorized users. Instead, it returns a 'Record not found' message, which prevents information leakage about the existence of cases the user is not entitled to see. This is a deliberate security design choice in ServiceNow HR Service Delivery to protect sensitive employee data.

Answer

The system prompts for admin credentials

Answer

An 'Access Denied' error message is displayed

Answer

The system redirects them to the login page

Question 8

Where are 'Activity Field Mappings' created?

Accepted Answer

Activity Definition record. Activity Field Mappings are created directly on the Activity Definition record. This mapping defines which fields on the source record (e.g., HR Case) are copied to the target record (e.g., HR Task) when the activity is executed. The Activity Definition record serves as the template for the activity, so field mappings are configured there to ensure consistency across all instances of that activity.

Answer

Lifecycle Event record

Answer

HR Task record

Answer

Activity Set record

Question 9

When using Activity Field Mappings, which source object represents the data entered by the user in the Lifecycle Event case form?

Accepted Answer

HR Case. In Activity Field Mappings, the HR Case source object represents the data entered by the user in the Lifecycle Event case form. Field mappings pull values from the HR case record (e.g., subject person, department, start date) and map them to activity fields. This allows the lifecycle event to propagate user-entered information to the generated activities.

Answer

Subject Person

Answer

Activity Set

Answer

Activity Definition

Question 10

What role is required for a user to manage 'HR Criteria' records?

Accepted Answer

hr_admin. The hr_admin role in ServiceNow HRSD is required to manage HR Criteria records, as it grants administrative access to HR configuration tables including HR Criteria, HR Profiles, and HR services. This role is designed for HR administrators who configure and maintain the HRSD application. Other roles listed are either read-only or unrelated to HR administration.

Answer

sn_hr_core.reader

Answer

itil

Answer

user_admin

Question 11

Which THREE of the following are benefits of using 'Scoped Applications' for HR?

Accepted Answer

Easier updates. Scoped applications in ServiceNow provide easier updates (B) because each scope is versioned and can be published, installed, and upgraded independently, so HR app changes don't force updates to other customizations. Improved security (C) is a benefit because scoped apps enforce scope-level access controls, private script includes, and restricted cross-scope access, reducing the risk of unintended privilege escalation. Data isolation (D) is also correct because scoped apps keep their tables, business rules, and scripts within the application scope, preventing other applications from directly accessing or modifying HR data unless explicitly allowed. Unlimited storage (A) is not a feature of scoped applications, and automatic role assignment (E) is not provided by scoping; roles must still be assigned through ACLs, groups, or user administration.

Answer

Unlimited storage

Answer

Automatic role assignment

Question 12

Which THREE of the following are true for Activity Field Mapping?

Accepted Answer

Can map from the HR Case. Option A is correct because Activity Field Mapping can map values from the HR Case record, allowing data from the case to populate fields in the activity. Option B is correct because the mapping is configured within the Activity Definition, where the source-to-target field relationships are specified. Option D is correct because the actual field mapping and value transfer occurs at runtime when the activity is created or executed. Option C is not correct because the mapping is not defined on the case form itself; the case form is only the source of data. Option E is not correct because Activity Field Mapping supports dynamic values from the case or other sources, not only static values.

Answer

Defined on the case form

Answer

Only for static values

Question 13

Which TWO items are required to set up an 'HR Catalog Item'?

Accepted Answer

HR Criteria. To set up an HR Catalog Item, you must define the HR Criteria (option B), which determines the eligibility conditions and targeting logic that decide which employees can see or request the item, and the HR Service (option C), which links the catalog item to the underlying HR service that fulfills the request and drives the associated workflows and case creation. These two records are the essential configuration elements that connect the catalog item to the HR service delivery model. A Role (option A) is not required to create the catalog item itself, since access is governed through criteria and user criteria rather than a dedicated role. A Scheduled Job (option D) is used for recurring automated tasks and is unrelated to catalog item setup. A Business Rule (option E) is a server-side script for enforcing logic on records and is not a required component for defining an HR Catalog Item.

Answer

Role

Answer

Scheduled Job

Answer

Business Rule

Question 14

Where do you go to view the HR Security Profiles assigned to a specific user?

Accepted Answer

HR Profile -> [User Name] -> Security Profiles. HR Security Profiles assigned to a specific user are viewed by opening the HR Profile record for that user and navigating to the Security Profiles related list. This shows exactly which HR security profiles are attached to that individual, which is the authoritative per-user view. The HR Profile is the central record linking a user to their HR-specific security configuration.

Answer

ACLs list

Answer

HR Administration -> HR Security -> HR Security Profiles

Answer

System Security -> Users

Question 15

Where can users find their submitted cases in the Employee Center?

Accepted Answer

My Cases widget. The 'My Cases' widget provides a view of current and closed cases.

Answer

Knowledge Base

Answer

Profile page

Answer

System settings