SNOW-CSA Practice Test 12 — 15 Questions

Question 1

An administrator is troubleshooting an ACL that grants 'write' access to the 'incident' table for the 'itil' role. Despite the ACL being active, users with the 'itil' role cannot update incidents. The administrator confirms that no other write ACLs exist. What is the most likely reason?

Accepted Answer

The 'Required roles' field on the 'incident' table form layout requires a different role to update.. The most likely reason is that the 'Required roles' field on the 'incident' table form layout restricts update operations to a specific role that the 'itil' users do not have. Even though the ACL grants 'write' access to the 'itil' role, the form layout's 'Required roles' setting overrides ACL permissions by preventing the form from being submitted or updated by users without the specified role. This is a common misconfiguration where form-level restrictions are overlooked during ACL troubleshooting.

Answer

The ACL is defined on a different table that extends 'incident'.

Answer

There is a read ACL that denies read access, which prevents any write operations.

Answer

The table is set to 'High Security' in the application properties.

Question 2

A business rule runs on 'before update' of the 'incident' table and sets the 'assigned_to' field to the current user if the assignment group is empty. The rule is in the global scope. However, when a user from another application scope updates an incident via a web service, the field is not being set. What is the most likely cause?

Accepted Answer

The business rule is not configured to run in the 'System' (global) scope across all applications.. The business rule is in the global scope, but by default, business rules in the global scope only run for updates made within the global scope itself. When a user from another application scope updates an incident via a web service, the update originates from that other scope, and the global-scope business rule does not execute unless it is explicitly configured to run in the 'System' (global) scope across all applications. This is controlled by the 'Run in all scopes' checkbox on the business rule record.

Answer

The user making the web service call does not have the 'itil' role.

Answer

The business rule runs after the web service update and the field is already committed.

Answer

The business rule condition is incorrect for web service updates.

Question 3

An administrator wants to create a notification that sends an email to the 'Assignment group' members whenever an incident is assigned to that group. Which of the following should the administrator configure in the notification's 'Who will receive' list?

Accepted Answer

Assignment group members. Option C is correct because the 'Assignment group members' option in the notification's 'Who will receive' list dynamically resolves to all users who are members of the group currently populated in the 'Assignment group' field on the incident record. This ensures that when an incident is assigned to a specific group, every member of that group receives the email notification, which matches the administrator's requirement exactly.

Answer

Group members (on the record)

Answer

Caller

Answer

Assigned user

Question 4

Which TWO of the following are valid ways to define who receives a notification in ServiceNow? (Choose two.)

Accepted Answer

Users in a role. Option B is correct because ServiceNow allows notifications to be sent to all users who have a specific role assigned. When 'Users in a role' is selected as the recipient type, the system evaluates the role membership at runtime and sends the notification to every active user with that role, making it a valid and commonly used recipient definition.

Answer

Email address

Answer

Dynamic recipient

Answer

Group

Question 5

Which THREE of the following statements about ACL evaluation are true? (Choose three.)

Accepted Answer

An ACL's 'Requires role' field can have multiple roles separated by commas.. Options B, D, and E are correct. B: ACLs are ORed, meaning if one grants access, access is granted. D: If no ACL exists, access is denied. E: 'Requires role' on ACL can specify multiple roles, and the user needs any one. Option A is wrong because ACLs are processed in order of type (table, record, etc.), not alphabetically. Option C is wrong because 'Deny' ACLs do not exist; all ACLs grant, but conditions can restrict.

Answer

An ACL with type 'deny' will override all other ACLs.

Answer

ACLs are evaluated in alphabetical order by name.

Question 6

Which table field in a notification record defines the email subject?

Accepted Answer

Subject. Option A is correct because the 'Subject' field in the notification record sets the email subject. Option B is wrong because 'Short description' is for records. Option C is wrong because 'Name' is the notification name. Option D is wrong because 'Title' is not used for subject.

Answer

Short description

Answer

Title

Answer

Name

Question 7

Your company uses ServiceNow for IT Service Management. The 'incident' table has a custom 'create' ACL that restricts creation of incidents to users with the 'snc_internal' role. However, external users with the 'snc_external' role should also be able to create incidents via a portal. The portal uses a REST message that authenticates as a specific integration user. The integration user has the 'snc_internal' role. Despite the REST API call being successful, external users report that they cannot submit incidents through the portal. The system logs show that the REST API call returns a success, but the incident record is not created. What is the most likely cause?

Accepted Answer

The ACL is evaluated against the portal user, who lacks the 'snc_internal' role.. Option C is correct because ServiceNow ACLs are evaluated against the user who initiated the request, not the integration user making the REST API call. In this scenario, the portal widget executes under the context of the portal user (who lacks 'snc_internal'), so the 'create' ACL on the 'incident' table checks that user's roles, not the integration user's roles. Even though the REST message authenticates as an integration user with 'snc_internal', the system logs a success for the API call itself, but the ACL evaluation fails silently when the record creation is attempted, resulting in no incident record being created.

Answer

The integration user's session has expired during the request.

Answer

The portal widget is using a different table name in the API call.

Answer

The REST API endpoint is mapped to the wrong table.

Question 8

A notification on the 'incident' table is configured to send an email when the 'state' field changes to 'Resolved'. The condition uses the condition builder with 'State changes to Resolved'. However, the notification also sends when an incident is updated without a state change. What is the most likely cause?

Accepted Answer

A business rule in the background updates the state to 'Resolved' on every update, so the notification fires each time.. Option C is correct. The condition builder 'State changes to Resolved' fires on any update that meets the condition, but if there is no state change, it might still fire if the condition script is not properly checking the previous value. The most common cause is that the notification is also triggered by a business rule that updates the incident and sets state to Resolved even when state didn't change. Option A is wrong because the condition builder is fine. Option B is wrong because the 'Send when' setting does not cause that. Option D is wrong because subscribers don't affect condition.

Answer

The condition builder is incorrectly configured and should use 'State equals Resolved'.

Answer

The notification has multiple subscribers causing duplicate evaluations.

Answer

The 'Send when' field is set to 'Record is updated' instead of 'Record is inserted or updated'.

Question 9

A company wants to restrict access to CI records based on the business service they belong to. What feature should they use?

Accepted Answer

CMDB Data Segmentation. CMDB Data Segmentation (option C) is the correct feature because it allows administrators to restrict access to CI records based on the business service they belong to, using a segmentation rule that filters CIs by their 'business_service' field. This is specifically designed for multi-tenant or service-based access control in the CMDB, ensuring users only see CIs associated with their assigned business services.

Answer

ACLs on cmdb_ci table

Answer

CMDB Application Access Control

Answer

Condition-based ACLs

Question 10

An organization uses ServiceNow Discovery to populate the CMDB. They notice that some CIs are missing required relationships after discovery. What is the most likely reason?

Accepted Answer

The discovery probes and sensors are not configured to create relationships.. Discovery probes and sensors are responsible for collecting data from devices, but they do not automatically create relationships unless specifically configured to do so. If the probes and sensors lack the necessary configuration to identify and record relationships, the discovered CIs will remain isolated in the CMDB. This is the most common cause of missing relationships after a Discovery run.

Answer

The discovered CIs are in different classes that do not have relationship rules.

Answer

The IRE is set to 'reconcile only' and not 'create'.

Answer

The relationship type is not defined in the CMDB.

Question 11

A CMDB administrator is planning to use the CMDB Data Manager to perform data imports. Which THREE statements about the Data Manager are true? (Select exactly 3)

Accepted Answer

It can create relationships between CIs during import.. Option A is correct because the CMDB Data Manager can create relationships between Configuration Items (CIs) during the import process. When importing data, you can specify relationship definitions in the import source or transform map, allowing the Data Manager to automatically link CIs (e.g., 'Runs on', 'Depends on') based on the imported data, which is essential for maintaining a complete and accurate CMDB.

Answer

It automatically reconciles imported CIs with existing CIs.

Answer

It can directly import data from external databases.

Question 12

Based on the sys_audit output, which CI has undergone the most recent change to its operational_status?

Accepted Answer

CI002. The sys_audit table records the timestamp of each change to a CI's operational_status field. CI002 has the most recent sys_audit record for operational_status, indicating it was changed last. The correct answer is B because the audit trail shows CI002's status was updated after CI001's.

Answer

Both CI001 and CI002

Answer

Cannot be determined

Answer

CI001

Question 13

Which two statements are true about CMDB relationships? (Select two.)

Accepted Answer

Relationship types are defined in the cmdb_rel_type table.. Option A is correct because the `cmdb_rel_type` table stores the definitions of all relationship types in the ServiceNow CMDB, such as 'Depends on' and 'Used by'. Each record in this table defines a unique relationship type with its name, direction, and cardinality constraints. This table is the authoritative source for the relationship types available in the system.

Answer

Relationships can only be created manually.

Answer

A CI can have only one relationship of a given type.

Answer

The 'Depends on' relationship is default for all CIs.

Question 14

A company wants to ensure that critical servers in the CMDB have accurate operational status. Which CMDB feature should the administrator configure to automatically update the operational status based on monitoring tools?

Accepted Answer

Identification and Reconciliation. Option C is correct because Identification and Reconciliation rules can update CI attributes using data from discovery and monitoring sources. Option A is incorrect because CI Relationships define connections between CIs, not status updates. Option B is incorrect because Application Services model business services, not operational status. Option D is incorrect because CMDB Health Score measures data quality, not updates.

Answer

CI Relationships

Answer

Application Services

Answer

CMDB Health Score

Question 15

Refer to the exhibit. The script runs but no output is produced. What is the most likely cause?

Accepted Answer

The field 'u_environment' does not exist on records with sys_class_name='cmdb_ci_server'.. Option D is correct because the script uses `getValue('u_environment')` on a GlideRecord query for `cmdb_ci` with `sys_class_name='cmdb_ci_server'`. If the field `u_environment` does not exist on that table or class, `getValue` returns null, and the `gs.print` statement outputs nothing (or an empty string). The script runs without error, but no output is produced because the field is missing, not because the query returns zero rows.

Answer

The table 'cmdb_ci' has no records with sys_class_name='cmdb_ci_server'.

Answer

The orderByDesc method is misspelled (should be orderByDescending).

Answer

The script lacks point number of rows (no rows with condition).