CIS-HR Practice Test 5 — 25 Questions

Question 1

An organization requires that HR case data be encrypted at rest. What platform feature must be enabled?

Accepted Answer

Column Level Encryption (CLE). Edge Encryption or Column Level Encryption (CLE) is required for specific data-at-rest requirements in HR.

Answer

Contextual Security

Answer

Access Control Lists

Answer

HR Criteria

Question 2

Which THREE steps are necessary to ensure that HR criteria correctly restrict access to an Employee Center topic?

Accepted Answer

Apply the HR Criteria to the Topic record within the Employee Center configuration. HR Criteria, User Criteria, and the Topic configuration itself are required to restrict visibility in the Employee Center.

Answer

Update the global ACLs for the topic table

Answer

Run the HR Criteria evaluation job manually

Question 3

An HR Administrator needs to restrict visibility of a specific HR Case type so that only the HR Benefits group can access it. Which feature should be configured to achieve this requirement?

Accepted Answer

HR Criteria. HR Criteria is the standard way to control access to HR services, catalog items, and knowledge articles based on user conditions.

Answer

Assignment Rules

Answer

ACLs on the hr_case table

Answer

Service Portal Widgets

Question 4

You need to restrict access to a specific HR Case so that only members of the 'Payroll' assignment group can view it. Which security mechanism should you configure?

Accepted Answer

Apply an HR Security Profile using the 'Restrict by Assignment Group' setting. HR Case security is primarily managed through HR Criteria and HR Security profiles, but record-level access for specific cases is best controlled using ACLs or HR Scoped Roles.

Answer

Set the 'Read' ACL on the sn_hr_core_case table to 'Public'

Answer

Modify the 'HR Service' definition to include a client script

Answer

Configure a Business Rule to modify the sys_id visibility

Question 5

Which THREE of the following are primary components of the HR Service Delivery data protection strategy when handling PII?

Accepted Answer

Log Redaction. HRSD utilizes Field Encryption, Log Redaction, and Access Control Lists to maintain a secure posture for PII.

Answer

Workflow Activity Sets

Answer

Service Portal Themes

Question 6

You are migrating from a legacy HR system and need to ensure data integrity. What is the first step in the data model planning phase?

Accepted Answer

Define data mapping and normalization rules. Mapping fields between the legacy system and the ServiceNow HRSD schema is the critical first step.

Answer

Configure ACLs

Answer

Set up portal

Answer

Create HR services

Question 7

When configuring a new HR Service, you need to ensure the case is automatically assigned to a specific HR group. Where should you define this assignment logic?

Accepted Answer

HR Service definition. The HR Service configuration contains an Assignment rule or Assignment group field that determines routing for cases of that specific type.

Answer

HR Profile

Answer

HR Template

Answer

Assignment Rule

Answer

Flow Designer

Question 8

To ensure that HR case templates are applied correctly, where should you associate an HR Template?

Accepted Answer

HR Service. The HR Template is associated with the HR Service, so when the service is selected, the template automatically applies the field values.

Answer

HR Profile

Answer

HR Topic Category

Answer

HR Task

Question 9

An HR Administrator needs to configure data masking for the 'SSN' field in the HR Profile (sn_hr_core_profile) table. Which feature should be used to ensure the data is masked for all users except those with the 'hr_admin' role?

Accepted Answer

Use the 'Field Encryption' module with an encryption context. Field-level encryption or Data Masking is used to protect sensitive data fields based on user roles.

Answer

Set a Business Rule on the sys_dictionary table

Answer

Apply a UI Policy to make the field read-only

Answer

Configure an HR Criteria record

Question 10

Which TWO statements are true regarding the use of the 'sn_hr_core.delegated_developer' role?

Accepted Answer

It allows the user to publish HR applications to the ServiceNow Store.. This role facilitates scoped development while maintaining the integrity of the global environment by restricting access to system-level tables.

Answer

It removes the need for HR Criteria.

Answer

It grants full access to all global system tables.

Answer

It automatically assigns the 'admin' role to the user.

Question 11

An HR administrator needs to restrict access to sensitive employee medical records so that only the HR Benefits team can view them, even though other HR staff have the 'sn_hr_core.case_reader' role. Which security mechanism should be implemented?

Accepted Answer

Configure ACLs on the specific table/field with role requirements. Contextual Security (ACLs) applied to specific HR tables or fields allows for granular control based on roles and conditions beyond the standard HR roles.

Answer

Create a new HR Criteria record

Answer

Use Data Policies to read-only the records

Answer

Modify the HR Service Portal widget security settings

Question 12

What is the role of the 'HR Service' definition in data security?

Accepted Answer

It links to 'HR Criteria' for visibility control. The HR Service definition links the record to specific HR Criteria, which governs who can initiate or view the service's cases.

Answer

It defines the encryption level

Answer

It manages the user's role assignment

Answer

It contains the ACL scripts for the case

Question 13

You need to grant a partner HR team the ability to modify HR Case records, but you must prevent them from seeing the 'Salary' field on the HR Profile. How should you implement this requirement using the principle of least privilege?

Accepted Answer

Use Column-level ACLs on the sn_hr_core_profile table.. Field-level ACLs are the standard mechanism to restrict access to sensitive fields like Salary while allowing record-level access to the Case table.

Answer

Apply a Business Rule to hide the field.

Answer

Implement a Data Policy to make the field read-only.

Answer

Create an HR Criteria record for the Salary field.

Question 14

When an HR service is restricted by 'HR Criteria', what happens when a user attempts to open a case they don't have access to via the portal?

Accepted Answer

The system returns 'Record not found'. The system returns a 'Record not found' message, preventing the user from knowing the record even exists.

Answer

The system prompts for admin credentials

Answer

An 'Access Denied' error message is displayed

Answer

The system redirects them to the login page

Question 15

You need to ensure that HR case attachments are encrypted. What is the correct approach?

Accepted Answer

Enable 'Attachment Security' for the HR Scoped App. Attachments in ServiceNow inherit the security of the parent record, or you can use Attachment Encryption modules.

Answer

Rename the attachments

Answer

Encrypt the storage drive

Answer

Move files to a secure server

Question 16

Which THREE of the following are valid ways to secure HR data within a ServiceNow instance?

Accepted Answer

Configuring Column-level encryption.. Data security is maintained through role-based access (ACLs), record-level contextual security (HR Criteria), and platform-wide data protection (Encryption).

Answer

Assigning 'public' to all HR tables.

Answer

Sharing passwords between HR admins.

Question 17

An HR department requires that only users with the 'sn_hr_core.admin' role can modify HR Services. Which security mechanism must be configured to ensure this role restriction is enforced during the service definition process?

Accepted Answer

Access Control Lists (ACLs). Access Control Lists (ACLs) are the fundamental platform security mechanism used to restrict CRUD operations on tables and fields based on roles.

Answer

Client Scripts

Answer

UI Policies

Answer

Workflow Activities

Question 18

An HR agent reports they cannot view the 'HR Case' module in the application navigator. Which role is most likely missing from their profile?

Accepted Answer

sn_hr_core.case_reader. The 'sn_hr_core.case_reader' or 'sn_hr_core.case_writer' role is required to access the HR Case application modules.

Answer

itil

Answer

hr_admin

Answer

sn_hr_core.profile_reader

Question 19

Which THREE components are required to successfully configure an HR Record Producer?

Accepted Answer

HR Service definition. A Record Producer requires the target table, a mapped variable set, and the HR Service association.

Answer

Client Script

Answer

Approval workflow

Question 20

Which THREE features are part of the HR Service Portal configuration?

Accepted Answer

Widgets. Portals are configured with Themes, Menu items, and Widgets.

Answer

Assignment Rules

Answer

HR Case Template