SNOW-CSA Practice Test 2 — 10 Questions

Question 1

An organization uses ServiceNow Discovery to populate the CMDB. They notice that some CIs are missing required relationships after discovery. What is the most likely reason?

Accepted Answer

The discovery probes and sensors are not configured to create relationships.. Discovery probes and sensors are responsible for collecting data from devices, but they do not automatically create relationships unless specifically configured to do so. If the probes and sensors lack the necessary configuration to identify and record relationships, the discovered CIs will remain isolated in the CMDB. This is the most common cause of missing relationships after a Discovery run.

Answer

The discovered CIs are in different classes that do not have relationship rules.

Answer

The IRE is set to 'reconcile only' and not 'create'.

Answer

The relationship type is not defined in the CMDB.

Question 2

A CMDB administrator is planning to use the CMDB Data Manager to perform data imports. Which THREE statements about the Data Manager are true? (Select exactly 3)

Accepted Answer

It can create relationships between CIs during import.. The CMDB Data Manager can create relationships between Configuration Items (CIs) during the import process. When importing data, you can specify relationship definitions in the import source or transform map, allowing the Data Manager to automatically link CIs (e.g., 'Runs on', 'Depends on') based on the imported data, which is essential for maintaining a complete and accurate CMDB.

Answer

It automatically reconciles imported CIs with existing CIs.

Answer

It can directly import data from external databases.

Question 3

Which THREE statements about Access Control Lists (ACLs) are true? (Choose THREE.)

Accepted Answer

ACLs can be defined for tables, records, fields, and scripts.. In ServiceNow, Access Control Lists (ACLs) can be defined to control access at multiple granularity levels: tables (entire table operations), records (specific rows), fields (individual columns), and scripts (execution of business rules or script includes). This allows administrators to enforce security policies precisely where needed.

Answer

An ACL can only have one role specified.

Answer

An ACL must have a script to evaluate conditions.

Question 4

A company wants to restrict access to CI records based on the business service they belong to. What feature should they use?

Accepted Answer

CMDB Data Segmentation. CMDB Data Segmentation (option C) is the correct feature because it allows administrators to restrict access to CI records based on the business service they belong to, using a segmentation rule that filters CIs by their 'business_service' field. This is specifically designed for multi-tenant or service-based access control in the CMDB, ensuring users only see CIs associated with their assigned business services.

Answer

ACLs on cmdb_ci table

Answer

CMDB Application Access Control

Answer

Condition-based ACLs

Question 5

Your company uses ServiceNow for IT Service Management. The 'incident' table has a custom 'create' ACL that restricts creation of incidents to users with the 'snc_internal' role. However, external users with the 'snc_external' role should also be able to create incidents via a portal. The portal uses a REST message that authenticates as a specific integration user. The integration user has the 'snc_internal' role. Despite the REST API call being successful, external users report that they cannot submit incidents through the portal. The system logs show that the REST API call returns a success, but the incident record is not created. What is the most likely cause?

Accepted Answer

The ACL is evaluated against the portal user, who lacks the 'snc_internal' role.. ServiceNow ACLs are evaluated against the user who initiated the request, not the integration user making the REST API call. In this scenario, the portal widget executes under the context of the portal user (who lacks 'snc_internal'), so the 'create' ACL on the 'incident' table checks that user's roles, not the integration user's roles. Even though the REST message authenticates as an integration user with 'snc_internal', the system logs a success for the API call itself, but the ACL evaluation fails silently when the record creation is attempted, resulting in no incident record being created.

Answer

The integration user's session has expired during the request.

Answer

The portal widget is using a different table name in the API call.

Answer

The REST API endpoint is mapped to the wrong table.

Question 6

A business rule runs on 'before update' of the 'incident' table and sets the 'assigned_to' field to the current user if the assignment group is empty. The rule is in the global scope. However, when a user from another application scope updates an incident via a web service, the field is not being set. What is the most likely cause?

Accepted Answer

The business rule is not configured to run in the 'System' (global) scope across all applications.. The business rule is in the global scope, but by default, business rules in the global scope only run for updates made within the global scope itself. When a user from another application scope updates an incident via a web service, the update originates from that other scope, and the global-scope business rule does not execute unless it is explicitly configured to run in the 'System' (global) scope across all applications. This is controlled by the 'Run in all scopes' checkbox on the business rule record.

Answer

The user making the web service call does not have the 'itil' role.

Answer

The business rule runs after the web service update and the field is already committed.

Answer

The business rule condition is incorrect for web service updates.

Question 7

A company wants to allow users to request software licenses through the service catalog. The request form should automatically populate the user's manager's email address. Which configuration option should the administrator use?

Accepted Answer

Use a default value on the variable with a script that retrieves the manager's email.. A default value on a catalog variable can use a script (e.g., gs.getUser().getManagerEmail()) to dynamically populate the manager's email address when the form loads. This approach directly meets the requirement without requiring additional triggers or lookups.

Answer

Use a Data Lookup definition on the catalog item.

Answer

Use a Flow Designer action to set the variable.

Answer

Use a Catalog Client Script with onChange catalog variable.

Question 8

The flow above is not creating the task record. The variables are not being populated. What is the most likely cause?

Accepted Answer

The catalog item does not have the specified short_description variable.. The flow references a variable named 'short_description' that does not exist on the catalog item. When a flow tries to read a variable that is not defined on the record, the variable resolves to null, causing the 'Create Record' action to fail silently or produce an empty field. This is a common misconfiguration where the variable name in the flow does not match the variable name defined on the catalog item.

Answer

The flow is not yet published.

Answer

The 'Create Record' action requires a 'number' field.

Answer

The trigger conditions are incorrectly referencing the catalog item.

Question 9

An administrator wants to allow end users to reset their own passwords using the 'Forgot Password' feature. Which configuration is required to enable this?

Accepted Answer

Activate the 'Password Reset' plugin.. The 'Forgot Password' feature in ServiceNow is implemented via a plugin called 'Password Reset' (com.snc.password_reset). This plugin must be activated to enable the self-service password reset functionality. Without activating this plugin, the feature is not available regardless of other configurations.

Answer

Assign the 'password_reset' role to end users.

Answer

Configure an email notification for reset password.

Answer

Set the 'Allow password reset' property to true.

Question 10

An organization needs to ensure that when a catalog item is ordered, a task is created for the IT team to provision the requested software. They want to use a flow to automate this. Which configuration should be used?

Accepted Answer

Use a Record Producer to create a task upon catalog item submission.. A Record Producer can be configured on a catalog item to automatically create a task (e.g., a Catalog Task or a custom task) upon submission. This is the native, out-of-box approach for generating tasks from catalog requests without requiring a separate flow or approval rule.

Answer

Add a 'Task' variable to the catalog item.

Answer

Create a Flow that triggers on 'Catalog Task' record creation.

Answer

Configure an approval rule to create a task.