CIS-HR Practice Test 23 — 15 Questions

Question 1

Which THREE of the following are valid trigger types for an Activity Set?

Accepted Answer

Date. The three primary trigger mechanisms for activity sets are Date-based, Condition-based, and Manual.

Answer

Notification

Answer

Email

Question 2

Which THREE of the following are primary methods for enforcing data protection within the HR Service Delivery application?

Accepted Answer

Before Query Business Rules. Security in HRSD relies on a combination of ACLs, Query Business Rules, and role-based access to ensure sensitive data is not exposed.

Answer

Service Portal Theme settings

Answer

HR Criteria

Question 3

If a user has both the 'hr_admin' and 'sn_hr_core.admin' roles, which role takes precedence for HR data security?

Accepted Answer

sn_hr_core.admin. ServiceNow security evaluation generally grants access if any role is present, but scoped admin roles are required for specific HR application configuration.

Answer

They are evaluated together

Answer

hr_admin

Answer

The system admin role

Question 4

If an HR Case is assigned to a 'Group', how does the 'HR Security Profile' ensure only the assigned group members can see it?

Accepted Answer

By checking the 'Assignment Group' field on the case against the user's groups. The profile is evaluated against the user's membership and the case's assignment field.

Answer

By using an HR Criteria record for every case

Answer

By enforcing it via an ACL that checks for the 'itil' role

Answer

By hiding the record if it is not 'Assigned to' the user

Question 5

Which THREE of the following are valid 'Activity Types' in a Lifecycle Event?

Accepted Answer

Approval. Approval, HR Task, and Signature are three core activity types in the HR Lifecycle Event framework.

Answer

Workflow

Answer

Checklist

Question 6

Which THREE pieces of information are displayed to an employee in the 'My Tasks' widget when part of an active Journey?

Accepted Answer

Task Subject. The Employee Center tasks widget typically displays the task subject, due date, and the assigned status.

Answer

Database Table Name

Answer

System Log ID

Question 7

If an HR table has a 'Read' ACL for the 'hr_admin' role, and you want to grant a new group 'HR_Auditors' access, what should you do?

Accepted Answer

Add 'HR_Auditors' to the existing ACL roles list. The best practice is to modify the existing ACL or add a new one rather than removing the current one, to maintain least privilege.

Answer

Remove the 'hr_admin' role from the ACL

Answer

Change the ACL to 'Public'

Answer

Create a business rule for the auditors

Question 8

A customer is using 'Scoped HR' and needs to allow an HR Admin to modify scripts while ensuring they cannot access other system tables. Which role should be assigned to the HR Admin to permit these actions within the HR scope?

Accepted Answer

sn_hr_core.delegated_developer. The 'sn_hr_core.delegated_developer' role allows a user to work within the scoped application without granting global system administrator privileges.

Answer

security_admin

Answer

sn_hr_core.admin

Answer

admin

Question 9

How can you audit access to HR cases?

Accepted Answer

By using the 'System Log' and 'ACL' audit logs. The system audit log and security logs track who has viewed records, providing an audit trail for HR compliance.

Answer

By running a report on the 'sys_log' table

Answer

By looking at the 'HR Case' table history

Answer

By asking the users

Question 10

Which TWO of the following tools allow you to perform a security audit on HR records?

Accepted Answer

System Logs. The Audit History and the System Logs provide auditability.

Answer

Form Layout

Answer

UI Policy logs

Answer

Dictionary Editor

Question 11

When utilizing the 'HR Service Delivery' module, you notice that sensitive employee data is being logged in the application logs. Which ServiceNow feature should be used to mask this data automatically without modifying the business logic?

Accepted Answer

Log Redaction Rules. Log Redaction rules are the specific platform feature used to scan and mask sensitive patterns (like PII) in system logs.

Answer

Field Encryption

Answer

ACLs

Answer

Data Privacy Policies

Question 12

Which TWO of the following are true about Lifecycle Events?

Accepted Answer

Used for complex HR processes. Lifecycle Events require the HR Service Delivery application and are used for complex cross-departmental processes.

Answer

Only for internal employee requests

Answer

Replaces all HR workflows

Answer

Are always single-step

Question 13

To ensure that HR case 'Work Notes' are hidden from the employee portal, what should you configure?

Accepted Answer

ACLs on the sn_hr_core_case table for the work_notes field. Visibility of work notes is controlled by the 'Visible to' field on the note or the underlying ACLs on the journal field.

Answer

HR Criteria

Answer

Catalog Item restriction

Answer

Business Rule on the task table

Question 14

When using 'HR Criteria', which attribute can be used to restrict access based on the user's location?

Accepted Answer

User Location. HR Criteria allows evaluation of user attributes, including the 'location' field.

Answer

User Role

Answer

IP Address

Answer

Browser Type

Question 15

What role is required for a user to manage 'HR Criteria' records?

Accepted Answer

hr_admin. Management of HR Criteria is restricted to HR Admins or those with specific scoped administrative privileges.

Answer

sn_hr_core.reader

Answer

itil

Answer

user_admin