SNOW-CSA Practice Test 17 — 15 Questions

Question 1

A developer wants to create a Scripted REST API endpoint that returns data from a custom table. The endpoint must only be accessible to users with the 'api_user' role. Which of the following is the best practice to enforce this restriction?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Define a read ACL on the custom table that requires the 'api_user' role.. The best practice for restricting access to a Scripted REST API endpoint in ServiceNow is to use an ACL (Access Control List) on the underlying table. When the endpoint is set to 'Requires authentication', the platform automatically evaluates table-level ACLs for each record operation. By defining a read ACL that requires the 'api_user' role, you enforce role-based access at the data layer, which is more secure and maintainable than checking roles in script.

Answer

Add a condition in the script that checks gs.hasRole('api_user') for each request.

Answer

Set the system property 'glide.service.catalog.enforce_acl' to true.

Answer

Use a 'read' ACL on the table and set the endpoint to 'Requires authentication'.

Question 2

A large organization uses a weekly scheduled report to analyze incident trends. The report queries a database view that joins several tables. The report has filters: ((category=Network OR category=Database) AND priority<=2) OR (assigned_to in (specific group)). The report takes over 30 minutes to run and often times out. The administrator wants to improve performance without altering the report's output. Which action should be taken?

Accepted Answer

Create summary fields on the incident table to pre-calculate counts and sums for the relevant filters.. Creating summary fields on the incident table pre-calculates aggregate values for the filters (category, priority, assigned_to), allowing the report to read precomputed data instead of scanning and joining large tables each time. This directly addresses the performance bottleneck without altering the report's output, as summary fields are updated incrementally and maintain the same logical results.

Answer

Remove the OR condition and split the report into two separate reports.

Answer

Increase the report's timeout value to 60 minutes.

Answer

Add indexes to the fields used in the filters.

Question 3

A system administrator receives a request to add a new field called 'Business Impact' to the 'cmdb_ci' table. Which method should be used to ensure the field is available to all CI classes?

Accepted Answer

Add the field to the 'cmdb_ci' table directly. The 'cmdb_ci' table is the base table for all Configuration Items (CIs) in the CMDB. Adding a field directly to this table ensures it is inherited by all child CI classes (e.g., cmdb_ci_computer, cmdb_ci_server) through the table hierarchy. This is the standard method for making a field universally available across all CI types without creating redundant or inconsistent data structures.

Answer

Add the field to a child class like 'cmdb_ci_computer'

Answer

Use the 'Include Table' configuration to add the field

Answer

Create a new extension table for the field

Question 4

Match each ServiceNow update set state to its meaning.

Accepted Answer

Draft: The update set is in the initial stage and is not yet ready for review.. Update set states track progress: Draft (building), Complete (ready), Testing (validating), Committed (applied). Common confusions involve mixing Committed with Draft or Testing with Complete.

Answer

Draft: The update set has been applied to the target instance.

Answer

Complete: The update set is being validated in a test environment.

Question 5

Refer to the exhibit. A catalog item has a variable 'department' (choice list with values 'IT', 'HR', 'Finance') and a variable 'cost_center' (choice list initially empty). The client script is supposed to add an option to 'cost_center' when 'department' is set to 'IT'. However, when a user selects 'IT', no new option appears. What is the most likely reason?

Accepted Answer

The variable 'cost_center' is not a 'Choice' variable type.. The `g_form.addOption()` method only works on variables of type 'Choice' (or similar select-type variables like 'Select Box'). If 'cost_center' is not a Choice variable, the client script cannot dynamically add options to it, and the method call silently fails or has no effect. In ServiceNow, only choice-based variable types support runtime option manipulation via client-side APIs.

Answer

The script is a server-side script and cannot use 'g_form'.

Answer

The script needs to call 'g_form.clearOptions()' before adding options.

Answer

The method should be 'g_form.addOption()' with different syntax.

Question 6

An administrator notices that a reference field on the cmdb_ci table, 'vendor', points to the 'core_company' table. However, some users report that they cannot select certain companies in the reference field. What is the most likely cause?

Accepted Answer

The 'vendor' field has a reference qualifier that filters companies. Reference qualifiers are used to filter the records displayed in a reference field. If the 'vendor' field has a reference qualifier condition (e.g., 'active=true' or 'vendor_type=hardware'), only companies meeting that condition will appear in the dropdown, preventing users from selecting certain companies. This is the most likely cause when users cannot see specific records in a reference field.

Answer

The 'display field' property is incorrectly configured

Answer

The 'vendor' field is marked as mandatory

Answer

The database view permission is set to 'none' for some users

Question 7

A manager wants to share a dashboard with the entire team without granting individual roles. What is the easiest way to achieve this?

Accepted Answer

Set the dashboard to 'Public'. Setting the dashboard to 'Public' is the easiest way because it makes the dashboard accessible to all users without granting any roles. This satisfies the requirement of sharing with the entire team without individual role assignments. Adding to a role would grant access only to those with that role, which is not the easiest method and contradicts the condition of not granting roles.

Answer

Create a report link and share via email

Answer

Publish the dashboard to a homepage

Answer

Add the dashboard to a role

Question 8

A system administrator needs to allow end users to add a 'Mobile Phone' field to the incident form without modifying the form layout for all users. Which feature should be used?

Accepted Answer

Enable personalization on the form. Personalization allows individual users to add fields to a form without affecting the form layout for all users. By enabling personalization on the incident form, the system administrator grants end users the ability to add the 'Mobile Phone' field to their own view of the form, which is stored per user in the sys_user_preference table.

Answer

Create a new form section

Answer

Configure a UI policy

Answer

Set an ACL to allow field addition

Question 9

An administrator wants to add a new application 'HR Service' to the application navigator with a custom icon. Which table stores the application menu and module definitions?

Accepted Answer

sys_app_module. The `sys_app_module` table stores both application menu and module definitions. When adding a new application like 'HR Service' to the navigator, a record is created in `sys_app_module` with a type of 'Application'. This record defines the application's name, icon, and other properties. Modules (sub-entries) are also stored in this table with a type of 'Module'. In contrast, `sys_app_application` is not a standard ServiceNow table for navigator definitions, and it only relates to application menu definitions, not module definitions.

Answer

sys_app

Answer

sys_app_application

Answer

sys_ui_module

Question 10

An administrator is asked to make the 'State' field read-only on the incident form after the record is saved. Which configuration should be used?

Accepted Answer

Create a UI Policy with condition 'always true' and set 'Read only' action, with 'On load' and 'After update' options. A UI Policy with the condition 'always true' and the 'Read only' action, with both 'On load' and 'After update' options selected, ensures the 'State' field becomes read-only immediately after the record is saved. The 'After update' option triggers the UI Policy to re-evaluate and apply the read-only state after the record is committed, while 'On load' ensures it is also read-only when the form is first opened. This is the only declarative client-side configuration that enforces the field state both on initial load and after every save.

Answer

Write a Business Rule that sets the field read-only after update

Answer

Create an ACL that denies write access to the field

Answer

Use a Client Script that runs on load and makes the field read-only if the record has a sys_id

Question 11

An administrator is managing a CMDB that contains both physical and virtual servers. The company uses a custom field 'u_os_version' to track the operating system version. When new servers are discovered, the field is populated correctly. However, when the operating system is updated manually by the IT team, the field is not updated. The administrator wants the CMDB to automatically reflect manual changes made to server operating systems. Which approach should be taken?

Accepted Answer

Create a business rule on the server table to update the CI when the OS is changed.. A business rule on the server table can detect when the 'u_os_version' field is manually updated and automatically update the corresponding CI record. This ensures that changes made outside of Discovery are reflected in the CMDB without requiring re-discovery or scheduled jobs, leveraging ServiceNow's event-driven architecture.

Answer

Configure the Discovery probe to re-discover the server after an OS update.

Answer

Use the CI Class Manager to set the field as 'Reconcilable'.

Answer

Use a scheduled job to query the server's actual OS version periodically.

Question 12

A company needs to import data from a CSV file into the User table. The CSV includes fields for first name, last name, email, and department. However, the import fails because some email addresses are invalid. Which feature in ServiceNow can be used to prevent invalid emails from being imported?

Accepted Answer

Transform Map with condition scripts. A Transform Map with condition scripts allows you to validate incoming data before it is written to the target table. In this scenario, you can add a script to the transform map that checks each email address against a regular expression pattern (e.g., RFC 5322) and skips or rejects rows with invalid emails, preventing them from being imported into the User table.

Answer

Data Source configuration

Answer

Import Set Row

Answer

Import Set Table API

Question 13

Which TWO conditions must be met for a business rule to execute on a table? (Choose TWO.)

Accepted Answer

The business rule must be associated with a table.. A business rule in ServiceNow is always scoped to a specific table; it cannot execute without being associated with one. The rule's 'Table' field defines the database table on which the rule triggers, and the platform checks this association before any execution logic runs.

Answer

The business rule must have at least one role specified in the 'Condition' tab.

Answer

The business rule must have an 'Advanced' script defined.

Answer

The business rule must have an order less than 100.

Question 14

Which THREE of the following are valid workflow activities in a Service Catalog workflow? (Choose three.)

Accepted Answer

Run Script. Run Script is a valid workflow activity in ServiceNow Service Catalog workflows. It allows you to execute a script (JavaScript) during the workflow, enabling custom logic such as updating records, calling APIs, or performing calculations. This activity is part of the standard workflow activities available in the Workflow Editor.

Answer

Approval - Dynamic

Answer

Scrum Task

Question 15

An administrator is troubleshooting an issue where a form section on the incident form is not visible to users with the 'itil' role, but is visible to admins. The section has no UI Policy or ACL restricting it. What is the most likely cause?

Accepted Answer

The section has a role requirement that the users lack. The most likely cause is that the form section has a role requirement configured in its dictionary entry or form layout. When a section is restricted to a specific role (e.g., 'admin'), users without that role (e.g., 'itil') will not see it, even if no UI Policy or ACL explicitly blocks it. This is a common visibility control in ServiceNow that overrides general role access.

Answer

An ACL is blocking the fields in the section

Answer

The fields in the section are marked as mandatory

Answer

The section has 'Visible' set to false in the form layout