SNOW-CSA Hard Questions — 25 Difficult Questions

Question 1

The error log entry above appears when processing an SLA for an incident. What does this indicate?

Accepted Answer

The SLA schedule is incorrectly configured. The error log entry indicates that the SLA schedule is incorrectly configured. In ServiceNow, SLAs rely on a defined schedule (e.g., 8x5 or 24x7) to calculate response and resolution times. If the schedule is missing, misconfigured, or has overlapping entries, the SLA engine cannot compute timers, resulting in an error during processing.

Answer

The SLA has breached its response time

Answer

The SLA definition's condition is not satisfied

Answer

The SLA response time has exceeded the target

Question 2

A catalog item uses a workflow that includes a 'Wait for Condition' activity. The condition checks if a custom table record 'approval_status' equals 'approved'. Requests are not progressing past this activity even though the record is updated. What could be the issue?

Accepted Answer

The 'Check Condition' property of the activity is set to 'After Update', but the record was already updated before the workflow reached this activity.. The 'Wait for Condition' activity's 'Check Condition' property determines when the condition is evaluated. If set to 'After Update', the condition is only checked when the record is updated after the workflow reaches this activity. If the record was already updated before the workflow reached the 'Wait for Condition' activity, the condition will never be re-evaluated, causing the workflow to stall indefinitely.

Answer

The 'Wait for Condition' activity is not in the same application scope as the custom table.

Answer

The user updating the record does not have the 'workflow_admin' role.

Answer

The custom table record is not related to the catalog item.

Question 3

Which TWO conditions must be true for an SLA to start tracking on an incident? (Choose two.)

Accepted Answer

The SLA definition is set to Active. An SLA definition must be set to 'Active' for it to start tracking on an incident. Only active SLA definitions are evaluated and applied to records; inactive definitions are ignored by the system. This ensures that only intended and configured SLAs are enforced.

Answer

The incident is assigned to a group

Answer

The incident is in a state of 'New'

Answer

The SLA definition has a business schedule attached

Question 4

An organization uses ServiceNow Discovery to populate the CMDB. They notice that some CIs are missing required relationships after discovery. What is the most likely reason?

Accepted Answer

The discovery probes and sensors are not configured to create relationships.. Discovery probes and sensors are responsible for collecting data from devices, but they do not automatically create relationships unless specifically configured to do so. If the probes and sensors lack the necessary configuration to identify and record relationships, the discovered CIs will remain isolated in the CMDB. This is the most common cause of missing relationships after a Discovery run.

Answer

The discovered CIs are in different classes that do not have relationship rules.

Answer

The IRE is set to 'reconcile only' and not 'create'.

Answer

The relationship type is not defined in the CMDB.

Question 5

A CMDB administrator is planning to use the CMDB Data Manager to perform data imports. Which THREE statements about the Data Manager are true? (Select exactly 3)

Accepted Answer

It can create relationships between CIs during import.. The CMDB Data Manager can create relationships between Configuration Items (CIs) during the import process. When importing data, you can specify relationship definitions in the import source or transform map, allowing the Data Manager to automatically link CIs (e.g., 'Runs on', 'Depends on') based on the imported data, which is essential for maintaining a complete and accurate CMDB.

Answer

It automatically reconciles imported CIs with existing CIs.

Answer

It can directly import data from external databases.

Question 6

Which THREE statements about Access Control Lists (ACLs) are true? (Choose THREE.)

Accepted Answer

ACLs can be defined for tables, records, fields, and scripts.. In ServiceNow, Access Control Lists (ACLs) can be defined to control access at multiple granularity levels: tables (entire table operations), records (specific rows), fields (individual columns), and scripts (execution of business rules or script includes). This allows administrators to enforce security policies precisely where needed.

Answer

An ACL can only have one role specified.

Answer

An ACL must have a script to evaluate conditions.

Question 7

Which TWO options are true regarding import set transform maps?

Accepted Answer

Transform scripts can access both source and target records. Transform scripts in ServiceNow run during the transform map execution and have access to both the source record (via the 'source' object) and the target record (via the 'target' object). This allows scripts to read, compare, and modify data from both sides, enabling complex data transformation logic.

Answer

Transform maps run in the context of the source table

Answer

Each field mapping can have a unique coalesce field

Answer

Import sets automatically deduplicate based on sys_id

Question 8

Refer to the exhibit. An administrator created a catalog item using a record producer. When a user submits the request, the record producer fails to create the requested item. The log shows a missing mandatory field error. What is the most likely cause?

Accepted Answer

A mandatory field in the target table is not mapped by the record producer.. The error message 'missing mandatory field' directly indicates that a field in the target table, which is required (mandatory), has not been mapped by the record producer. In ServiceNow, when a record producer creates a record, it must map variables or fields to all mandatory fields in the target table; if any mandatory field is left unmapped, the system will fail to insert the record and log this specific error.

Answer

The record producer is not mapped to the correct table.

Answer

The 'model' variable is not mapped to a field in the target table.

Answer

The record producer is inactive.

Question 9

An administrator needs to create a UI action that appears on the form context menu for the Incident table, but only when the record is in 'In Progress' state. Which configuration is required?

Accepted Answer

Set the condition on the UI action to 'current.state == 2'. UI actions can have a condition field that evaluates server-side JavaScript. Setting the condition to 'current.state == 2' ensures the UI action appears only when the Incident record's state field equals the 'In Progress' value (typically 2 in the default state model). This is the standard, built-in mechanism for controlling UI action visibility based on record data.

Answer

Create a UI policy that changes the form when state is 'In Progress'

Answer

Write an ACL on the UI action table

Answer

Assign the UI action to a role that only users in this state have

Question 10

During form submission, a mandatory field is not highlighted in red, and the form submits without requiring it. The field is made mandatory by a UI Policy that checks a condition set by a Client Script on form load. What is the most likely issue?

Accepted Answer

The UI Policy runs before the Client Script. The UI Policy runs before the Client Script, so when the UI Policy evaluates its condition to determine whether to make the field mandatory, the Client Script has not yet set the condition variable. As a result, the UI Policy condition fails, the mandatory attribute is not applied, and the form submits without requiring the field. The correct order of execution is UI Policy conditions first, then Client Scripts, then UI Policy actions.

Answer

A Data Policy overrides the mandatory attribute

Answer

The UI Policy is set to OnSubmit

Answer

The UI Policy runs after the Client Script

Question 11

A system administrator needs to hide the 'Delete' button on the incident form for users with the 'itil' role, but allow it for administrators. What is the best approach?

Accepted Answer

UI policy with role condition. A UI Policy with a role condition is the best approach because it dynamically controls the visibility of the 'Delete' button on the incident form based on the user's role. UI Policies run client-side and can hide or show fields and buttons without requiring a page refresh, making them ideal for form-level UI changes. By setting the condition to 'role=itil' and the action to 'Hide', the button will be hidden for itil users but remain visible for administrators who do not have that condition applied.

Answer

Modify the form view to remove the button

Answer

Business rule checking role

Answer

ACL with condition on role

Question 12

An administrator needs to grant a group of users the ability to create and edit forms using the Form Designer, but not to publish them globally. Which role(s) should be assigned?

Accepted Answer

form_builder. The `form_builder` role grants users the ability to create and edit forms using the Form Designer, but it does not include the `form_builder.publish_global` permission, which is required to publish forms globally. In contrast, the `personalize_form` role allows personalization of forms (e.g., adding fields, adjusting layout) but does not provide access to the Form Designer. Therefore, to meet the requirement of using the Form Designer without global publishing, the `form_builder` role is appropriate.

Answer

personalize_form

Answer

ui_policy_admin

Answer

admin

Question 13

A catalog item uses Flow Designer to send an email notification when the state changes to 'fulfilled'. The flow uses a trigger 'State changed' on the requested item table. However, the email is not sent. The flow logs show the trigger fired. What is the most likely issue?

Accepted Answer

The flow action 'Send Email' is not configured with a valid recipient. The most common reason a flow trigger fires but the email is not sent is that the 'Send Email' action lacks a valid recipient. In Flow Designer, the 'Send Email' action requires a recipient (e.g., user, group, or email address) to be explicitly defined; if the recipient field is empty or references a non-existent variable, the action will execute without sending the email, and no error will be logged in the flow logs.

Answer

The trigger is set to 'State changed' but the state field is not properly referenced

Answer

The flow is set to 'Deactivated'

Answer

The email notification is blocked by an email property

Question 14

A business rule set to run 'async' is supposed to update a large number of child records. The administrator notices that the updates are not being applied consistently. What is the most likely reason?

Accepted Answer

The async queue processes multiple instances simultaneously, causing race conditions. When a business rule is set to run 'async', it executes asynchronously via the system's queue. If the business rule updates a large number of child records, multiple instances of the same async business rule can be processed simultaneously by different queue workers. This concurrency can lead to race conditions, where one instance reads stale data or overwrites changes made by another instance, resulting in inconsistent updates.

Answer

The business rule condition is incorrect

Answer

The system property 'glide.sys.schedulers.max_threads' is set too low

Answer

The business rule is running 'before' instead of 'after'

Question 15

An ACL has a condition script that returns true if the user is a member of the 'service_desk' group and the record's 'state' is 'New'. The ACL type is 'read'. A user in the 'service_desk' group reports that they cannot see a record with state 'New'. What is the most likely cause?

Accepted Answer

The condition script does not have a default return false statement, so it returns undefined.. In ServiceNow, ACL condition scripts that lack an explicit return statement will return undefined, which is a falsy value. When the condition script returns undefined, the ACL does not grant read access, effectively denying the user from seeing the record even though they meet the intended group and state criteria. This is a common pitfall where developers forget to add a default return true or return false at the end of the script.

Answer

The ACL is defined on a different table that extends 'incident'.

Answer

The script uses gs.hasRole('service_desk') which checks role, not group membership.

Answer

Another read ACL exists that explicitly denies read access to the 'service_desk' group.

Question 16

An SLA definition is configured to start when an incident's state changes to 'In Progress'. However, the SLA is not starting for incidents that are moved to 'In Progress'. The incident's assignment group is 'IT Support' and the SLA condition includes an additional filter: 'category = network'. What is the most likely cause?

Accepted Answer

The incident's category is not 'network'.. The SLA condition includes an additional filter requiring 'category = network'. If the incident's category is not set to 'network', the SLA will not start regardless of the state change to 'In Progress'. This is because SLA conditions in ServiceNow are evaluated as a whole; all conditions must be met for the SLA to begin.

Answer

The SLA schedule is set to 24x7 but the incident was created outside business hours.

Answer

The SLA definition has a pause condition that triggers on state change.

Answer

The SLA definition is on the 'task' table instead of 'incident'.

Question 17

During peak usage, the Employee Center portal becomes slow. The administrator wants to improve performance without changing the user interface. What is the best practice approach?

Accepted Answer

Enable caching for widgets. Enabling caching for widgets reduces server load and improves page load times by storing rendered widget output in memory, allowing subsequent requests to serve cached content without re-executing the underlying scripts or queries. This directly addresses performance degradation during peak usage without altering the user interface, making it the best practice approach.

Answer

Increase the instance size

Answer

Remove all widgets from the homepage

Answer

Disable the search feature

Question 18

A company is implementing a CMDB cleanup strategy and needs to identify CIs that are no longer in use. Which THREE methods can help identify outdated CIs? (Select three.)

Accepted Answer

Reviewing CI last discovered date.. The 'Last Discovered' date field on a CI record indicates when the CI was last seen by a discovery probe. If this date is significantly old, it suggests the CI may no longer be active or in use, making it a reliable method for identifying outdated CIs during a CMDB cleanup.

Answer

Checking CI status field for 'Retired'.

Answer

Manually auditing each CI in the CMDB.

Question 19

A notification is configured to send an email when an incident is assigned to a user. However, users are receiving duplicate emails. Which of the following is the most likely cause?

Accepted Answer

The notification has 'Who will receive' set to both 'Assigned user' and 'User in group'.. When 'Who will receive' is set to both 'Assigned user' and 'User in group', the notification can be sent to the same user twice if that user is both the assigned user and a member of the group. This is a common cause of duplicate emails in ServiceNow notifications, as the system evaluates each recipient list independently and sends separate emails.

Answer

The notification is triggered by a business rule that runs on after update.

Answer

The notification has two separate conditions that both evaluate to true.

Answer

The notification is set to 'Send for each record' and the record is being updated multiple times.

Question 20

An administrator notices that a scheduled flow designed to send approval reminders is not triggering. The flow is set to run on the sysapproval_approver table with a condition of 'state = requested'. What is the most likely cause?

Accepted Answer

The flow's trigger type is 'Data Trigger' and not scheduled. A scheduled flow that is not triggering on the sysapproval_approver table despite a valid condition most likely has its trigger type set to 'Data Trigger' instead of 'Scheduled'. A scheduled flow requires the trigger type to be explicitly set to 'Scheduled' to run at defined intervals; if it is set to 'Data Trigger', it will only execute on record creation or update, not on a time-based schedule.

Answer

The flow is deactivated

Answer

The flow is scoped incorrectly

Answer

The condition is incorrect