CIS-HR Full-Length Exam Simulation

Question 1

An HR implementation team wants to ensure that only users with the HR case manager role can view the 'confidential notes' field on HR cases, while all other HR agents can see the case but not that field. The field is on the HR case table. What is the most appropriate configuration to meet this requirement?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Create a field-level ACL on the confidential notes field that requires the HR case manager role for read access, and ensure no other ACL grants read access to that field.. Field-level ACLs are the correct mechanism to restrict access to a specific field based on roles. By requiring the HR case manager role for read access on the confidential notes field, only those users can see it. Other HR agents with table-level read access will not see the field because the field-level ACL denies access. This is a standard security practice in ServiceNow.

Answer

Create a UI policy that makes the confidential notes field read-only for all HR agents except those with the HR case manager role.

Answer

Create a table-level ACL on the HR case table that requires the HR case manager role for read access, and then create a separate table-level ACL that allows all HR agents read access.

Answer

Create a business rule that clears the confidential notes field when the current user does not have the HR case manager role.

Question 2

What is the purpose of the 'sn_hr_core_topic_category' table?

Accepted Answer

Organize HR Services. This table is used to organize HR Services into logical groupings, which are then used for reporting and portal navigation.

Answer

Define HR roles

Answer

Store HR cases

Answer

Manage HR templates

Question 3

Which module allows you to view all HR Cases assigned to you?

Accepted Answer

My HR Cases. The 'My HR Cases' module filters cases where the assigned to is the current user.

Answer

Unassigned Cases

Answer

All Cases

Answer

My Groups Cases

Question 4

What is the Employee Center?

Accepted Answer

A unified portal for employee services. It is the unified portal for all employee interactions with departments like HR, IT, and Finance.

Answer

A database table

Answer

An HR reporting tool

Answer

The back-end admin tool

Question 5

An organization requires that HR case data be encrypted at rest. What platform feature must be enabled?

Accepted Answer

Column Level Encryption (CLE). Column Level Encryption (CLE) is the platform feature that encrypts specific columns in a table, ensuring data at rest is encrypted. For HR case data, enabling CLE on the relevant fields (e.g., case description) satisfies the encryption at rest requirement. CLE uses the platform's encryption capabilities to protect sensitive data.

Answer

Contextual Security

Answer

Access Control Lists

Answer

HR Criteria

Question 6

When configuring a Record Producer for an HR Service, where should the HR Administrator map the 'Short Description' variable to ensure it populates the case correctly?

Accepted Answer

In the Record Producer 'Variables' related list, configure the variable's 'Map to field' attribute. In the Record Producer 'Variables' related list, you configure the variable's 'Map to field' attribute to map it to the 'Short Description' field on the HR case. This ensures that when the record producer is submitted, the variable value populates the case's Short Description. This is the standard declarative mapping method.

Answer

By creating a template for the Record Producer

Answer

Using a Client Script on the Record Producer

Answer

In the HR Service lifecycle event mapping

Question 7

A user is assigned the 'hr_case_writer' role. What is the primary function of this role?

Accepted Answer

Create and update HR cases. The 'hr_case_writer' role allows a user to create and update HR cases, which is standard for HR agents.

Answer

Manage HR profiles

Answer

View HR configuration

Answer

Approve HR requests

Question 8

When configuring the Employee Center, which feature allows you to group related catalog items and knowledge articles for a better user experience?

Accepted Answer

Taxonomy. Taxonomy in ServiceNow Employee Center provides a hierarchical structure to organize catalog items, knowledge articles, and other content into categories and subcategories, improving navigation and user experience. It allows administrators to group related items logically, making it easier for employees to find what they need.

Answer

Portal Menu

Answer

Catalog Category

Answer

Service Portfolios

Question 9

You want to ensure that only members of the 'HR Benefits' group can see certain HR cases. Which field on the HR Case form should you use?

Accepted Answer

Assignment group. To ensure only members of the 'HR Benefits' group can see certain HR cases, you should use the Assignment group field on the HR Case form. Assignment groups are used to control access via ACLs that restrict case visibility to members of that group. By setting the Assignment group to 'HR Benefits', only users in that group will have access.

Answer

HR Service

Answer

HR Topic

Answer

Assigned to

Question 10

In a multi-scoped environment, how do you allow an HR role to access a global 'cmdb_ci' table?

Accepted Answer

By creating a Restricted Caller Access (RCA) record. In a multi-scoped environment, a Restricted Caller Access (RCA) record is the correct way to allow a scoped application (like HR) to access a table in another scope (like the global cmdb_ci table). RCA records explicitly grant cross-scope access to specific tables or scripts, bypassing the default scope isolation. This is the standard mechanism for controlled cross-scope access.

Answer

By changing the scope of the cmdb_ci table

Answer

By adding the 'hr_admin' role to the table

Answer

By using an HR Criteria

Question 11

Which TWO items can be controlled by HR Criteria?

Accepted Answer

Knowledge articles. HR Criteria in ServiceNow HR Service Delivery are used to dynamically determine which Knowledge articles (option B) and Catalog items (option C) are visible to an employee, based on conditions such as the user's HR profile, location, employment type, or other user attributes. Knowledge articles are surfaced through the HR Service Portal's knowledge base widgets, where HR Criteria filter which articles a given user can see. Catalog items are similarly filtered in the HR catalog so that only items matching the user's criteria are displayed. HR Tasks (A), HR Templates (D), and HR Profiles (E) are not controlled by HR Criteria; HR Profiles actually supply the attribute data that HR Criteria evaluate against, rather than being filtered by them.

Answer

HR Tasks

Answer

HR Templates

Answer

HR Profiles

Question 12

Which THREE of the following are valid ways to prevent data leakage in HR?

Accepted Answer

Data encryption. Data encryption (B) is correct because encrypting sensitive HR fields at rest (e.g., via Edge Encryption or platform encryption) renders leaked data unreadable without the keys, directly preventing exposure of PII. Auditing/logging (D) is correct because enabling audit records on HR tables (sys_audit) creates a tamper-evident trail of who read or changed sensitive records, which deters leakage and supports detection and forensic investigation. Access restrictions via ACLs (E) is correct because table/field-level ACLs enforce role- and condition-based read/write rules (e.g., restricting salary fields to HR admins), which is the primary control limiting who can view HR data. UI Policy disabling (A) is not a valid control because UI Policies only affect client-side form behavior and do not stop API, import, or direct table access, so data can still leak. Global table renaming (C) is not a valid control because renaming a table is cosmetic and provides no security boundary against unauthorized reads.

Answer

UI Policy disabling

Answer

Global table renaming

Question 13

If a user is promoted, and a Lifecycle Event is triggered, how do you handle the change in 'Department' on the user record?

Accepted Answer

Use HR Service field mapping. HR Service field mapping defines how Lifecycle Event activities write data back to the user (sys_user) record. When a promotion triggers a Lifecycle Event, the HR Service's field mappings specify that the new Department value from the case should update the user's Department field. This is the declarative, supported way to handle record changes.

Answer

Manually edit the profile

Answer

Use Trigger condition

Answer

Update the activity set

Question 14

Which THREE components are required for the HR Knowledge base to function properly?

Accepted Answer

Categories. In ServiceNow HR Service Delivery, the HR Knowledge Base requires three foundational components to function: the Knowledge Base itself (C), which is the container that stores and organizes HR knowledge content; Categories (A), which provide the taxonomy/topic hierarchy used to classify and navigate articles within that knowledge base; and Articles (B), which are the actual knowledge records that deliver the HR content to employees and agents. Without the Knowledge Base container there is nowhere to store content, without Categories the articles cannot be organized or browsed by topic, and without Articles there is no content to serve. Assignment Rules (D) and HR Service records (E) are related HR configuration elements used for routing cases and defining HR services, but they are not required for the knowledge base itself to store and present articles.

Answer

Assignment Rules

Answer

HR Service records

Question 15

You notice that HR data is leaking into reports accessible by IT. What is the first thing you should check?

Accepted Answer

Access Control Lists (ACLs). Access Control Lists (ACLs) are the primary mechanism in ServiceNow that govern record-level and field-level read/write access, so if HR data is appearing in IT-accessible reports, the ACLs on the HR tables (or the reports themselves) are the most likely misconfiguration. Checking ACLs first isolates whether the leak is caused by overly permissive read rules on HR records. This is the foundational access control layer that must be validated before examining higher-level groupings or logic.

Answer

HR Groups

Answer

Business Rules

Answer

Report ACLs

Question 16

Which THREE of the following are required to create a new HR Service?

Accepted Answer

HR Service Type (Fulfillment, etc.). When creating a new HR Service, the HR Service Type (option A) is required because it defines the fulfillment model — such as Fulfillment, Case Management, or Content — which drives how the service behaves and what configuration fields appear. The HR Service Name (option B) is mandatory as the unique identifier/label used to reference and display the service throughout the HR Service Delivery application. The Topic Category (option C) is also required, since it links the HR Service to the HR taxonomy (topic detail/category structure) that governs routing, search, and portal placement. Options D and E are not required: an external API key is unrelated to HR Service creation (it pertains to integrations/authentication), and a custom database table is never needed because HR Services are stored in standard ServiceNow tables.

Answer

An external API key

Answer

A custom database table

Question 17

You need to add a custom field to the HR Profile that syncs with an external payroll system. Which table should be extended or modified?

Accepted Answer

sn_hr_core_profile. The HR Profile table (sn_hr_core_profile) is the central location for user-specific HR data.

Answer

sys_user

Answer

sn_hr_core_config

Answer

sn_hr_core_case

Question 18

What is the 'HR Profile' table?

Accepted Answer

sn_hr_core_profile. The 'sn_hr_core_profile' table stores HR-specific information about an employee.

Answer

sys_user

Answer

hr_service

Answer

sn_hr_core_case

Question 19

What is the purpose of the 'Topic Category' in HR Service configuration?

Accepted Answer

To classify services for reporting and navigation. Topic categories provide high-level organizational grouping for HR services.

Answer

To assign the ticket

Answer

To create a record producer

Answer

To define user access

Question 20

What is the primary function of an 'HR Task' within a Lifecycle Event?

Accepted Answer

Execute individual work items. An HR Task within a Lifecycle Event represents an individual unit of work that must be completed as part of the lifecycle process. It is assigned to a user or group and tracks completion of a specific action (e.g., 'Sign employment contract', 'Return laptop'). HR Tasks are the executable work items that drive the lifecycle event forward.

Answer

Manage audience criteria

Answer

Configure trigger conditions

Answer

Define the lifecycle event structure