SNOW-CSA Application Rules, ACL and Notifications Practice Test 5 — 15 Questions

Question 1

A ServiceNow administrator is configuring an Access Control Rule (ACL) on the 'u_vehicle' table. The requirement is that only users with the 'fleet_manager' role can delete records, and the ACL must also enforce that the record's 'status' field is 'Retired' before deletion is allowed. Which TWO configurations are necessary to meet these requirements? (Choose two.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Create an ACL with operation 'delete', type 'record', and a role condition requiring 'fleet_manager'.. To meet the requirements, you need an ACL that grants delete permission to users with the fleet_manager role. Additionally, you must enforce the condition that the record's status is 'Retired' before deletion. This can be achieved by creating a delete ACL with a role condition and adding a script condition that checks the current record's status. Together, these two configurations ensure that only authorized users can delete records, and only when the status is Retired.

Answer

Set the ACL's 'Advanced' flag to true and use a script that checks both role and status.

Answer

Configure a business rule that aborts deletion if status is not 'Retired'.

Answer

Create a field-level ACL on the 'status' field with write access for 'fleet_manager'.

Question 2

A ServiceNow administrator creates a notification on the 'incident' table that sends an email to the assignment group when an incident is assigned. The administrator wants to ensure that the notification is only sent if the incident is not already assigned to the same group. Which condition should be used in the notification?

Accepted Answer

current.assignment_group.changes(). The 'changes()' method is the most reliable way to detect if a field value has changed. In this scenario, it ensures the notification is sent only when the assignment group is modified, such as when it is first set or changed to a different group. If the incident is already assigned to the same group, the field does not change, so no notification is sent. This meets the requirement precisely.

Answer

previous.assignment_group != current.assignment_group

Answer

!current.assignment_group.nil()

Answer

current.assignment_group.nil()

Question 3

A custom table 'u_purchase_order' has an ACL that grants read access to users with the 'procurement' role. A user with the 'procurement' role reports they cannot see any records on the table. Upon investigation, the administrator finds that the table's read ACL is active and the user has the role. What is the most likely cause?

Accepted Answer

A field-level ACL on a field in the table denies read access, causing the entire record to be hidden.. Field-level ACLs can override table-level ACLs. If a user does not have read access to a specific field, the entire record becomes invisible in lists and forms, even if the table ACL grants read. This is a frequent pitfall when troubleshooting access issues, as administrators may focus only on table-level ACLs and overlook field-level restrictions.

Answer

A parent table ACL denies access, and ACLs are evaluated in a hierarchical manner.

Answer

The ACL condition is set to 'false' or a script that evaluates to false.

Answer

The user's role is inherited from a group, but the ACL requires the role directly on the user record.

Question 4

A notification is configured on the 'incident' table to send an email when an incident is assigned to a user. The notification uses the 'Assigned to' field in the 'Who will receive' section. Which of the following best describes when this notification will be sent?

Accepted Answer

When the 'Assigned to' field changes from empty to a user, or from one user to another.. Notifications are triggered based on the conditions defined in the 'When to send' section. When the 'Who will receive' field is set to a field like 'Assigned to', the notification is sent to the user in that field whenever the notification's trigger conditions are met. Typically, this is when the assigned to field changes, including both initial assignment and reassignment.

Answer

When an incident is created and the 'Assigned to' field is populated.

Answer

Only when the 'Assigned to' field changes from empty to a user for the first time.

Answer

When any field on the incident record changes, as long as 'Assigned to' is not empty.

Question 5

An administrator creates a before business rule on the 'incident' table that runs on update. The script checks if the 'Priority' field is changed to '1 - Critical' and, if so, sets the 'Assignment group' to 'Network'. After testing, the administrator finds that the assignment group is not being set. What is the most likely reason?

Accepted Answer

The script is not setting the assignment group correctly because it is using the wrong field name or value.. When a before business rule does not produce the expected change, the first thing to check is the script logic, including field names and values. Common mistakes include using the wrong field name, not using the correct sys_id for a reference field, or not properly detecting the change. In this scenario, the script likely has a typo or incorrect value assignment.

Answer

The script is using the 'current' object to check the new value, but should use 'previous' to compare.

Answer

The business rule is set to run before the update, but the 'current' object does not yet reflect the new value.

Answer

The business rule is missing a condition to check if the Priority field has changed.

Question 6

Which TWO conditions must be met for a business rule to execute on a table? (Choose TWO.)

Accepted Answer

The business rule must be associated with a table.. Option A is correct because a business rule is table-scoped: it only runs when it is defined on (associated with) the table whose records trigger it, and it fires on the specified insert, update, delete, query, or display events for that table. Option B is correct because the rule's condition (the filter/condition script) must evaluate to true for the triggering record, and an empty condition is treated as always true, so the rule executes. Option C is incorrect because roles are not required in the Condition tab; role restrictions are optional and belong to access control, not a mandatory execution condition. Option D is incorrect because an 'Advanced' script is only one possible action type; a rule can run with a simple field-value action or a script, so an advanced script is not required. Option E is incorrect because order controls the sequence in which multiple rules run, not whether a rule executes; there is no requirement that the order be less than 100.

Answer

The business rule must have at least one role specified in the 'Condition' tab.

Answer

The business rule must have an 'Advanced' script defined.

Answer

The business rule must have an order less than 100.

Question 7

An administrator creates a notification for the 'incident' table to send an email when the state changes to 'resolved'. The notification works for most users, but some users report not receiving the email. What is the most likely cause?

Accepted Answer

The users have set their 'Notification' preference to 'Do not send' for that type.. The most likely cause is that the users have configured their personal Notification preference to 'Do not send' for that notification type. In ServiceNow, users can override system-level notification settings by setting their preference to suppress specific notification types, which would prevent the email from being sent even though the notification is active and properly configured.

Answer

The notification weight is set too high.

Answer

The notification is not set to 'Active'.

Answer

The notification does not have an email template selected.

Question 8

A business rule is set to run on 'before update' on the 'incident' table. The script updates 'current.description' and then calls 'current.update()'. What is the likely outcome?

Accepted Answer

The script causes a recursion error or multiple updates.. In ServiceNow, calling `current.update()` inside a 'before update' business rule triggers a recursive loop because the update operation re-invokes the same business rule. The platform detects this recursion and typically throws an error or causes multiple updates, leading to the described outcome. Option B is correct because the script explicitly calls `current.update()`, which is prohibited in before business rules to prevent infinite loops.

Answer

The description is updated and no error occurs.

Answer

The script fails silently because current.update() is not allowed in before business rules.

Answer

The script runs but the description is not updated.

Question 9

Based on the exhibit, who will receive the email notification?

Accepted Answer

The caller only.. The exhibit shows that the 'Caller' checkbox is selected in the notification's 'Who will receive' configuration, while the 'Assigned user' checkbox is not selected. In ServiceNow, when only the 'Caller' option is checked, the notification is sent exclusively to the user listed as the caller on the record, regardless of who the record is assigned to.

Answer

No one receives the email.

Answer

The assigned user only.

Answer

Both assigned user and caller.

Question 10

Which THREE of the following are true regarding business rules and their execution order?

Accepted Answer

After business rules run after the database write operation.. Option A is correct because after business rules execute after the database write operation has completed, allowing them to perform follow-up actions such as updating related records or sending notifications once the primary record is persisted. Option C is correct because before business rules run before the database write operation, which lets them validate data and potentially block the save if conditions are not met. Option D is correct because before display business rules run when the record is loaded into a form, enabling the system to modify field values or visibility before the user sees the form. Option B is incorrect because before business rules can indeed prevent the record from being saved by failing validation or aborting the operation. Option E is incorrect because async business rules run asynchronously in a separate transaction after the triggering event, not in the same transaction.

Answer

Before business rules cannot prevent the record from being saved.

Answer

Async business rules run in the same transaction as the triggering event.

Question 11

A ServiceNow administrator is troubleshooting a notification issue. The company has a 'Customer Satisfaction Survey' notification that is supposed to send an email to the 'caller' of an incident when the incident state changes to 'Resolved' (state=6). The notification is configured with table 'incident', condition 'state changes to 6', and recipient 'caller'. However, the email is not being sent. The administrator checks the system log and finds no errors. The notification has an advanced script that checks if the 'caller' has a valid email address. The script is: if (current.caller_id.email == '') { return false; }. The administrator confirms that the caller's email field is populated. What is the most likely reason the notification is not sending?

Accepted Answer

The advanced script should be removed because it is blocking valid emails.. The advanced script in the notification must explicitly return true to send the email. If no value is returned, the notification is suppressed. The script only returns false when the email is an empty string; otherwise it falls through without returning a value, which blocks the notification even when the caller has a valid email. Removing the script eliminates this blockage and allows the notification to send as intended. The condition 'state changes to 6' correctly triggers on transition to Resolved, and the recipient field 'caller' is properly configured. The other options suggest changes that would not fix the real issue.

Answer

The notification condition should be 'state is 6' rather than 'state changes to 6'.

Answer

The script should check for null instead of empty string.

Answer

The recipient field should use the email field directly instead of the reference 'caller'.

Question 12

Drag and drop the steps to configure an inbound email action in ServiceNow into the correct order.

Accepted Answer

1. Create a new inbound email action record. 2. Define the conditions (table, type, condition script). 3. Write the action script. 4. Save and activate the inbound action.. The correct sequence for configuring an inbound email action in ServiceNow is to first create the action record, then define the conditions (such as the table and condition script), then write the action script that processes incoming emails, and finally save and activate the action. This order ensures that all necessary fields are properly set and the action works as intended.

Answer

1. Write the action script. 2. Create a new inbound email action record. 3. Define the conditions. 4. Save and activate.

Answer

1. Create a new inbound email action record. 2. Write the action script. 3. Define the conditions. 4. Save and activate.

Answer

1. Define the conditions. 2. Create a new inbound email action record. 3. Write the action script. 4. Save and activate.

Question 13

Match each ServiceNow module to its function.

Accepted Answer

Incident Management: Restores normal service operation as quickly as possible. Correct matches: Incident Management restores service, Problem Management finds root causes, Change Management manages changes. Distractors swap Service Catalog and Knowledge Management definitions.

Answer

Service Catalog: Stores knowledge articles for self-help

Answer

Knowledge Management: Provides a menu of services users can request

Question 14

A system administrator notices that users in the 'itil' role can see the 'cost' field on the 'cmdb_ci_server' table, but the requirement is to hide it from all except users with the 'cmdb_admin' role. The administrator has already created an ACL with 'read' operation, type 'record', condition 'current.cost' (no script) and granted 'no access' to all roles. However, the field is still visible. What is missing?

Accepted Answer

The ACL type must be 'field' instead of 'record'. A 'record' ACL controls access to the entire record, but the requirement is to hide a specific field ('cost') from certain roles. To control visibility at the field level, the ACL type must be 'field', not 'record'. A 'record' ACL determines whether a user can see or interact with the whole record, while a 'field' ACL governs access to individual fields. Since the 'cost' field is still visible, the existing 'record' ACL is not applied to the field itself, allowing the 'itil' role to see it via default field-level access.

Answer

The ACL condition should use a script instead of a condition

Answer

The ACL must be set to 'mandatory'

Answer

The user must be removed from the 'itil' role

Question 15

Which of the following best describes the purpose of a 'Script Include' in ServiceNow?

Accepted Answer

To encapsulate reusable server-side logic. A Script Include in ServiceNow is designed to encapsulate reusable server-side logic that can be called from other server-side scripts, such as Business Rules, Scheduled Jobs, or other Script Includes. It promotes code modularity and reusability by defining functions or classes that execute on the server instance, not on the client. Option D correctly identifies this core purpose.

Answer

To run automated actions on a schedule

Answer

To set field values dynamically based on conditions

Answer

To define client-side behavior when a form loads