20+ practice questions focused on Security And Data Protection — one of the most tested topics on the ServiceNow Certified Implementation Specialist - Human Resources (CIS-HR, HR Service Delivery) (CIS-HR) exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Security And Data Protection PracticeWhen configuring 'HR Security Profiles', what is the purpose of the 'Apply to' field?
Explanation: The 'Apply to' field on HR Security Profiles determines the record scope the profile governs — specifically whether it applies to HR Cases, HR Tasks, or both. This lets administrators create granular access rules that differ between case-level and task-level records, since HR agents often need different visibility on tasks versus their parent cases.
Which THREE of the following are primary methods for enforcing data protection within the HR Service Delivery application?
Explanation: In HR Service Delivery, data protection is enforced primarily through the platform's access control and query-restriction mechanisms. Access Control Lists (ACLs) (B) are the core authorization layer that grants or denies read/write/create/delete access to tables and fields based on roles, conditions, and scripts, making them a primary enforcement method. Before Query Business Rules (A) run before a database query executes and can inject or modify query conditions to restrict which records a user can retrieve, providing row-level data protection. Query Business Rules (D) similarly run on query operations to add filters or conditions that limit the result set returned to the user, protecting sensitive HR records. Service Portal Theme settings (C) only control the look-and-feel and branding of the portal and have no bearing on data access. HR Criteria (E) are used to segment HR profiles/cases for routing and assignment logic, not to enforce record-level data protection.
A user in the HR department reports they cannot see records in the 'HR Tasks' list, despite having the 'hr_task_reader' role. What is the most likely cause?
Explanation: The most likely cause is that the HR Criteria associated with the HR Task type excludes the user's department. HR Criteria are used to determine which HR tasks are visible to which users based on attributes like department, location, or role. Even if the user has the hr_task_reader role, if the HR Criteria for that task type does not include their department, they will not see the records.
An HR Administrator needs to configure data masking for the 'SSN' field in the HR Profile (sn_hr_core_profile) table. Which feature should be used to ensure the data is masked for all users except those with the 'hr_admin' role?
Explanation: Field Encryption with an encryption context is the correct feature to mask data for specific roles. It allows administrators to encrypt sensitive fields and control decryption based on roles, ensuring that only users with the 'hr_admin' role can view the unmasked data. This provides a robust security mechanism for PII like SSN.
Which role is required to modify HR security configurations in a scoped application without having full system admin access?
Explanation: The delegated_developer role is designed specifically to allow developers to modify security configurations (such as ACLs, cross-scope privileges, and scoped application security) within their assigned scopes without granting them the full security_admin role. In ServiceNow scoped applications, delegated development lets an admin delegate security_admin-like privileges to a developer for a specific scope, enabling them to elevate and modify security artifacts. This satisfies the requirement of modifying HR security configurations without full system admin access.
+15 more Security And Data Protection questions available
Practice all Security And Data Protection questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Security And Data Protection. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Security And Data Protection questions on the CIS-HR frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Security And Data Protection is tested as part of the ServiceNow Certified Implementation Specialist - Human Resources (CIS-HR, HR Service Delivery) (CIS-HR) blueprint. Practicing with targeted Security And Data Protection questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free CIS-HR practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Security And Data Protection is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Security And Data Protection practice session with instant scoring and detailed explanations.
Start Security And Data Protection Practice →