SNOW-CSA Practice Test 5 — 25 Questions

Question 1

Refer to the exhibit. An administrator sets the system properties as shown. What is the result?

Accepted Answer

It decreases security by disabling HTML escaping in UI.. Disabling HTML escaping in UI system properties (e.g., glide.ui.escape_text) means user-supplied input is rendered as raw HTML. This directly reduces security by making the instance vulnerable to cross-site scripting (XSS) attacks, as malicious scripts in input fields will not be escaped before display.

Answer

It increases security by escaping all text in UI.

Answer

It enables cross-site scripting protection.

Answer

It has no effect on security.

Question 2

Refer to the exhibit. A ServiceNow administrator has created an SLA definition for critical incidents. Which TWO statements accurately describe the behavior of this SLA?

Accepted Answer

The SLA will start when an incident with priority 1 is created.. The SLA definition is configured to start when an incident is created with priority 1, as indicated by the 'Start condition' set to 'Priority is 1' and 'Start type' set to 'Created'. Option E is correct because the 'Stop condition' is set to 'State is 6 (Resolved)', which means the SLA timer will stop once the incident reaches the Resolved state.

Answer

The SLA will reset if the incident priority changes to a higher value.

Answer

The SLA will pause when the incident is placed on hold (state=3).

Answer

The SLA applies to incidents with priority 1 and priority 2.

Question 3

Which TWO are best practices for managing catalog items in a ServiceNow instance?

Accepted Answer

Test catalog items in a sub-production instance before moving to production. Testing catalog items in a sub-production instance (e.g., a development or test instance) before moving them to production is a fundamental best practice in ServiceNow. This allows you to validate variable behavior, workflow logic, and UI policies without risking disruption to live users. ServiceNow recommends using update sets or application repositories to promote tested catalog items from a sub-production instance to production.

Answer

Assign each catalog item to exactly one category

Answer

Clone production catalog items to test instance for testing

Answer

Use database views to display catalog item details

Question 4

Which THREE of the following are best practices for CMDB data maintenance? (Choose exactly 3.)

Accepted Answer

Scheduled reconciliation to identify and merge duplicates. Option A is correct because scheduled reconciliation compares CMDB records against authoritative sources and identifies duplicate or stale CIs, allowing them to be merged or retired so the CMDB stays accurate and trustworthy. Option D is correct because regular data certification requires CI owners to review and attest to the accuracy of their records, which enforces accountability and catches data-quality drift before it affects ITIL processes like incident and change management. Option E is correct because imported data (for example, from discovery, asset feeds, or HR systems) becomes stale over time, so defining data refresh schedules keeps attributes such as owner, location, and status current. Option B is wrong because disabling discovery removes the automated source of truth and guarantees the CMDB will drift out of date, and Option C is wrong because manually updating all CI attributes is error-prone, unscalable, and defeats the purpose of automated discovery and reconciliation.

Answer

Disabling discovery for all CIs to prevent changes

Answer

Manually updating all CI attributes

Question 5

A scheduled job runs a transform map to import data into the CMDB from an external asset management system. The transform map has a field mapping that uses script to derive the CI class based on asset type. Recently, imports have been failing with a 'GlideRecord: Invalid table name' error. What is the most likely cause?

Accepted Answer

The script in the field mapping is returning a value that does not correspond to an existing table name.. The error 'GlideRecord: Invalid table name' indicates that the script in the field mapping is returning a string that does not match any existing table (class) in the CMDB. When a transform map uses a script to derive the CI class, the returned value must be a valid table name (e.g., 'cmdb_ci_server'). If the script returns a misspelled, malformed, or non-existent table name, GlideRecord fails to instantiate the record, causing the import to fail.

Answer

The external system is sending malformed data.

Answer

The scheduled job does not have the right roles.

Answer

The target table name in the transform map is misspelled.

Question 6

What is the default behavior of an ACL if no ACL record exists for a given operation?

Accepted Answer

Deny access.. In ServiceNow, ACLs follow a default-deny model: if no ACL rule matches a given operation (read, write, create, delete), access is denied. This is a fundamental security principle ensuring that only explicitly permitted operations are allowed, preventing accidental exposure of data or functionality.

Answer

Log the attempt and allow.

Answer

Prompt the user for confirmation.

Answer

Allow access.

Question 7

An administrator wants to create a dashboard with multiple reports that automatically refresh every 5 minutes. Which feature should be used?

Accepted Answer

Dashboard with auto-refresh property. A dashboard in ServiceNow can have its auto-refresh property set to a specific interval, such as every 5 minutes, which automatically refreshes all reports on the dashboard simultaneously. This meets the administrator's requirement without manual intervention or additional scheduling.

Answer

Homepage with iframe

Answer

Performance Analytics indicator

Answer

Report scheduling

Question 8

An import set transform map includes field maps with script actions. The import fails with 'Script execution error'. Where should the administrator look first?

Accepted Answer

System log. When a script action in a transform map field map throws an error, the system log (syslog) is the primary source for detailed JavaScript error messages, stack traces, and line numbers. Import set row errors only capture row-level failures like missing mandatory fields, not script execution details. The data source configuration and field map log do not store runtime script errors.

Answer

Import set row errors

Answer

Data source configuration

Answer

Transform map's field map log

Question 9

An administrator wants to add a new section to the incident form to group related fields. Which tool should they use?

Accepted Answer

Form Designer. The Form Designer is the correct tool because it allows administrators to add new sections to an incident form by dragging and dropping fields into a new section container. This is the dedicated interface for modifying form layouts, including creating sections to group related fields, without needing to write code or use other configuration tools.

Answer

Dictionary Override

Answer

Application Navigator

Answer

UI Policy

Question 10

A ServiceNow administrator wants to create a new form section that appears only when the 'State' field is set to 'In Progress'. Which configuration should be used?

Accepted Answer

Create a UI Policy with a condition on the 'State' field.. A UI Policy is the correct configuration because it allows an administrator to define conditions (e.g., 'State' is 'In Progress') that dynamically show or hide form sections, fields, or make fields mandatory/read-only on the client side without requiring a server round trip. This is the standard mechanism for controlling form section visibility based on field values in ServiceNow.

Answer

Create an Access Control Rule (ACL) on the form section.

Answer

Create a Business Rule that sets the section visibility.

Answer

Create a UI Action with a condition on the 'State' field.

Question 11

A user wants to view a daily trend of incidents created over the past month. Which report type is most appropriate?

Accepted Answer

Line chart with date series on x-axis and count on y-axis. A line chart with date series on the x-axis and count on the y-axis is the most appropriate report type for viewing a daily trend of incidents over the past month. Line charts are specifically designed to display data points over time, making trends clearly visible. While a bar chart could also show daily counts, line charts are more effective for trend analysis. List reports show raw data in tabular form and do not visualize trends. Pie charts are unsuitable because they represent proportions at a single point in time.

Answer

Bar chart grouped by day

Answer

List report

Answer

Pie chart

Question 12

Refer to the exhibit. This JSON represents a table schema. What is the data type of the 'short_description' field?

Accepted Answer

String. The 'short_description' field in a ServiceNow table schema is defined as a string data type because it stores alphanumeric text values, such as brief summaries or titles. In ServiceNow, string fields are used for textual data that does not require numeric operations, and they are typically mapped to the 'varchar' database column type.

Answer

Integer

Answer

Reference

Answer

Date

Question 13

Which TWO of the following are valid ways to add variables to a catalog item?

Accepted Answer

Variable Set. Option A, Variable Set, is correct because a variable set is a reusable container of variables that can be attached to a catalog item (via the 'Variable Sets' related list or the 'Add Variable Set' option in the Variable Editor), letting you add multiple variables to the item at once. Option C, Variable Editor, is correct because it is the interface used to create and add individual variables directly to a catalog item's question set. Option B, Catalog Client Script, is not a way to add variables; it only runs client-side JavaScript to control behavior of existing variables (e.g., onChange, onLoad, onSubmit). Option D, Order Guide, is a catalog item type that bundles multiple catalog items into a single ordering flow, not a mechanism for adding variables to an item. Option E, UI Policy, does not create variables; it dynamically makes existing variables mandatory, read-only, or visible based on conditions.

Answer

Catalog Client Script

Answer

Order Guide

Answer

UI Policy

Question 14

An administrator discovers that a scheduled discovery job is creating duplicate CI records for the same physical server. The server has two IP addresses (one for management, one for production). What is the most likely cause?

Accepted Answer

The identification rule for the CI class does not include a unique hardware identifier like serial number.. ServiceNow's CMDB uses identification rules to determine whether a discovered CI is new or matches an existing record. For a physical server with multiple IP addresses, the identification rule must include a unique hardware identifier such as a serial number (e.g., from SMBIOS) to prevent duplicate CIs. Without that, the system may treat each IP address as a separate CI, even though they belong to the same server.

Answer

The discovery schedule is set to run too frequently.

Answer

The discovery job is configured to scan only the management IP.

Answer

The server has too many IP addresses for discovery to handle.

Question 15

A system administrator has added new fields to the Incident table through the dictionary. Users report that they cannot see these fields when they open an incident record. The administrator confirms the fields exist and are correctly configured. What should the administrator check first?

Accepted Answer

Check the form layout for the Incident table form view.. The form layout determines which fields are visible on a given form view. Even if fields exist in the dictionary and are correctly configured, they will not appear on the form unless they have been added to the form layout for the specific view (e.g., the default form view). The administrator should check the form layout by navigating to the Incident table's form view and ensuring the new fields are placed on the form.

Answer

Inspect client scripts on the Incident table for hiding logic.

Answer

Verify the access controls (ACLs) for the new fields.

Answer

Review the data policy configuration for the table.

Question 16

A user has personalized their form by rearranging fields. The administrator wants to reset the form layout to the default for that user. What should the administrator do?

Accepted Answer

Delete the user's personalization from sys_user_preference. User-specific form layout customizations are stored in the sys_user_preference table. Deleting the relevant preference record for that user resets the form to the default layout without affecting other users or system-wide settings.

Answer

Set the form's 'Reset' attribute to true

Answer

Run a scheduled job to clear all user preferences

Answer

Use the 'Restore Default' button on the form

Question 17

An incident has state set to 'In Progress' (value 2). When the user loads the form or updates the state, what is the resulting form behavior?

Accepted Answer

The 'assigned_to' field is mandatory and the 'assignment_group' field is hidden. The UI Policy is configured to run when the state is 'In Progress' (value 2). It sets the 'assigned_to' field as mandatory and hides the 'assignment_group' field. Since UI Policies run on the client side when the form loads or the state changes, the resulting behavior is that 'assigned_to' becomes mandatory and 'assignment_group' is hidden. The Client Script does not override the UI Policy because UI Policies have higher priority in enforcing field behavior on the form.

Answer

The 'assigned_to' field is mandatory but the 'assignment_group' field remains visible

Answer

The 'assigned_to' field is not mandatory because the Client Script overrides the UI Policy

Answer

The 'assigned_to' field is mandatory and the 'assignment_group' field is hidden, but the Client Script causes an error

Question 18

A company wants to allow managers to view all incidents, but only their own direct reports' incidents to be editable. Which ACL approach is most efficient?

Accepted Answer

Create a read ACL for managers and a write ACL with a script condition checking manager relationship.. It uses a read ACL to grant all managers view access to all incidents, and a separate write ACL with a script condition that dynamically checks whether the incident's assigned user is a direct report of the current manager. This approach is efficient as it avoids duplicating ACLs per manager or per group, leveraging a single script condition to enforce the manager–direct report relationship at runtime.

Answer

Use a business rule to set a field indicating editable and use ACL on that field.

Answer

Use role-based ACLs and assign a separate role for each manager.

Answer

Create separate write ACLs for each manager's direct reports.

Question 19

Which UI element allows an administrator to add a new section to an existing form and populate it with fields?

Accepted Answer

Form Layout configuration. The Form Layout configuration is the correct UI element because it allows administrators to define the layout of fields on a form, including adding new sections and populating them with fields. This is done by dragging and dropping fields into the desired section within the Form Layout configuration page, which directly controls the form's structure.

Answer

Access Control Rule

Answer

UI Policy

Answer

Dictionary Entry

Question 20

A system administrator wants to add a choice list to a field that shows options depending on the value of another field. Which feature should be used?

Accepted Answer

Dependent choices. Dependent choices is a built-in feature that dynamically filters a choice list based on the value of a parent field. Option A (Reference field with cascading) is not a standard ServiceNow feature for choice lists. Option C (Client Script with GlideAjax) could be used but is not the built-in best practice for simple dependencies. Option D (UI Policy with onChange) can show or hide fields but cannot dynamically populate choice lists.

Answer

Reference field with cascading

Answer

Client Script with GlideAjax

Answer

UI Policy with onChange