SNOW-CSA Application Rules, ACL and Notifications Practice Test 3 — 15 Questions

Question 1

A user is able to view records in the Incident table but cannot edit them. Which ACL type is preventing the edit?

Accepted Answer

write. (write). In ServiceNow, the write ACL controls the ability to update or edit existing records. Since the user can view records (read ACL allows this) but cannot edit them, the write ACL is the one blocking the operation. The write ACL is evaluated when a user attempts to modify a record after it has been created.

Answer

read

Answer

create

Answer

delete

Question 2

A notification is configured to send an email when an incident is assigned to a user. However, users are receiving duplicate emails. Which of the following is the most likely cause?

Accepted Answer

The notification has 'Who will receive' set to both 'Assigned user' and 'User in group'.. When 'Who will receive' is set to both 'Assigned user' and 'User in group', the notification can be sent to the same user twice if that user is both the assigned user and a member of the group. This is a common cause of duplicate emails in ServiceNow notifications, as the system evaluates each recipient list independently and sends separate emails.

Answer

The notification is triggered by a business rule that runs on after update.

Answer

The notification has two separate conditions that both evaluate to true.

Answer

The notification is set to 'Send for each record' and the record is being updated multiple times.

Question 3

An ACL on the Incident table has a script condition that returns true if the user is in the role 'incident_manager'. A user with the 'incident_manager' role still cannot update incidents. What could be the issue?

Accepted Answer

The script has a syntax error but is still returning false.. If the script condition has a syntax error, it will not execute properly and will return false by default, even if the user has the 'incident_manager' role. In ServiceNow, ACL script conditions that fail due to syntax errors are treated as false, denying access. The user's role is irrelevant if the condition itself does not evaluate to true.

Answer

The ACL is set to 'read' instead of 'write'.

Answer

The user also has a role that explicitly denies access.

Answer

The ACL has a condition order that is not correct.

Question 4

A before business rule on the Change Request table is supposed to set the 'risk' field based on the 'impact' and 'urgency' fields. The rule uses the current.update() method. However, when the rule runs, it causes a recursive loop. What is the best solution?

Accepted Answer

Use current.setValue() instead of current.update().. Current.update() triggers the business rule again on the same record, causing a recursive loop. Using current.setValue() only modifies the field in memory without writing to the database, so it does not re-trigger the business rule. This is the standard pattern for avoiding recursion in before business rules when setting field values.

Answer

Use current.update() with a query to avoid recursion.

Answer

Add a condition to check if the risk field is already set.

Answer

Set the business rule to run after instead of before.

Question 5

Which table field in a notification record defines the email subject?

Accepted Answer

Subject. In ServiceNow notification records, the 'Subject' field (option B) directly defines the email subject line. This field supports template variables and scripted expressions to dynamically generate the subject content based on the record data. The other fields serve different purposes: Short description is a summary of the notification, Title is not a standard field in notification records, and Name is the unique identifier for the notification record itself.

Answer

Short description

Answer

Title

Answer

Name

Question 6

A company wants to allow managers to view all incidents, but only their own direct reports' incidents to be editable. Which ACL approach is most efficient?

Accepted Answer

Create a read ACL for managers and a write ACL with a script condition checking manager relationship.. It uses a read ACL to grant all managers view access to all incidents, and a separate write ACL with a script condition that dynamically checks whether the incident's assigned user is a direct report of the current manager. This approach is efficient as it avoids duplicating ACLs per manager or per group, leveraging a single script condition to enforce the manager–direct report relationship at runtime.

Answer

Use a business rule to set a field indicating editable and use ACL on that field.

Answer

Use role-based ACLs and assign a separate role for each manager.

Answer

Create separate write ACLs for each manager's direct reports.

Question 7

A catalog client script is supposed to show a variable when another variable equals 'Yes'. The script runs on 'onChange' of the first variable. However, the second variable does not appear. What is a possible cause?

Accepted Answer

The client script is not set to 'All' catalog items.. A client script that is not set to run on 'All' catalog items will only execute on the specific catalog item it was created for. If the script is scoped to a different item, the onChange event for the first variable on the current item will not trigger the script, so the second variable will never be shown. In ServiceNow, catalog client scripts must be explicitly associated with the correct catalog item or set to 'All' to apply globally.

Answer

The g_form.setDisplay() method is used incorrectly.

Answer

The condition is written with 'g_form.getValue' for the wrong variable.

Answer

The script is set to 'onLoad' instead of 'onChange'.

Question 8

What is the default behavior of an ACL if no ACL record exists for a given operation?

Accepted Answer

Deny access.. The default behavior of an ACL is to deny access if no ACL record exists. This is a security measure. Therefore option C is correct. Options A, B, and D are incorrect because they do not reflect the default deny behavior.

Answer

Log the attempt and allow.

Answer

Prompt the user for confirmation.

Answer

Allow access.

Question 9

A business rule is configured to run on 'after' update. Which TWO of the following conditions would cause the rule to execute? (Select two.)

Accepted Answer

The condition checkbox is unchecked (no condition).. When the condition checkbox is unchecked, the business rule has no condition script, so it always executes on the specified event (after update). Option D is correct because a condition script that returns true explicitly tells the rule to run. The 'after' update timing means the rule runs after the database write, but the condition still controls whether execution occurs.

Answer

The condition script returns false.

Answer

The condition checkbox is checked but script returns false.

Answer

The table is not the specified table.

Question 10

An ACL on the Task table has a role condition requiring the 'itil' role. A user with the 'itil' role is trying to update a task but is denied. Which TWO factors could be causing this? (Select two.)

Accepted Answer

The update operation requires a specific condition script that returns false.. Even if the role condition is satisfied, a condition script on the ACL can independently evaluate to false, denying the update. Option D is correct because multiple ACLs on the same table are evaluated; if any other ACL explicitly denies write access, the overall result is denial, regardless of the role condition.

Answer

The user also has a role that denies access.

Answer

The record is locked by another user.

Answer

The ACL is set to 'Create' instead of 'Write'.

Question 11

A notification is set to send an email when an incident is updated with 'Urgency' = 'High'. The notification is not sending. Which THREE of the following could be the cause? (Select three.)

Accepted Answer

The notification has a condition that also checks 'State' which is not met.. A notification's condition can include multiple fields, such as 'State' in addition to 'Urgency'. If the condition requires 'State' to be a specific value that is not met when the incident is updated, the notification will not trigger. This is a common misconfiguration where the condition logic is more restrictive than intended.

Answer

The email notification system is configured with SMTP but the mail server is unreachable.

Answer

The incident record is being updated by a web service that does not trigger business rules.

Question 12

Refer to the exhibit. The business rule is set to run 'before' update. When a user changes the state to 'Resolved' (value 3), the comments field is updated. However, the change does not appear on the form after save. What is the most likely reason?

Accepted Answer

The script uses current.update() causing recursion and rollback.. Calling current.update() inside a 'before' business rule triggers the same business rule again, causing recursion. ServiceNow detects this recursion and rolls back the update to prevent an infinite loop, so the comment field change is not saved. A 'before' business rule should modify fields directly without calling update(), as the system handles the save automatically.

Answer

The state condition is incorrect because state 3 is not 'Resolved'.

Answer

The script should use current.setValue() instead of assignment.

Answer

The business rule should be 'after' instead of 'before'.

Question 13

Refer to the exhibit. This ACL is applied to the Incident table for 'write' operation. A user is editing their own incident but is still denied. What is the issue?

Accepted Answer

The script returns true but another ACL denies.. When an ACL is applied to a table for 'write' operations, multiple ACLs can evaluate the same operation. Even if one ACL (the one shown) returns true, another ACL on the same table for the same operation may return false, causing the overall write to be denied. The exhibit shows a script that checks `current.caller_id == gs.getUserID()`, which should allow the user to edit their own incident, but another ACL with a higher order or a different condition is blocking the write.

Answer

The script returns false because current.caller_id is not the user's sys_id.

Answer

The ACL is set to 'read' instead of 'write'.

Answer

The user does not have the necessary role.

Question 14

Refer to the exhibit. This condition script is used in a notification. For which states will the notification trigger?

Accepted Answer

Both state 2 and state 3. The condition script uses `current.state.changesTo(3)` which returns true only when the state transitions to 3 from a different state. Since the script also includes `current.state == 2`, the notification triggers for state 2 as well. Therefore, both state 2 and state 3 will cause the notification to fire.

Answer

Only state 3

Answer

Only state 2

Answer

Neither state 2 nor state 3

Question 15

A user reports that they are unable to see any records in the 'incident' table, even though they have the itil role. The administrator checks the ACLs and finds that there are no read ACLs defined for the incident table. What will happen?

Accepted Answer

No users can read any incident records.. In ServiceNow, if no read ACLs are defined for a table, the system defaults to a 'deny all' behavior. This means that no users, including those with the itil role, can read any records in the incident table. The itil role grants access to incident records only when a read ACL explicitly allows it; without any read ACL, the implicit denial takes effect.

Answer

The system will create a default read ACL that grants access to the itil role.

Answer

All users can read all incident records.

Answer

Only users with the admin role can read incident records.