SNOW-CSA Hard Questions — 25 Difficult Questions

Question 1

An organization is planning to implement CMDB for a large-scale environment with multiple data sources. They need to ensure that the most trustworthy data source takes precedence when conflicts occur. Which feature should they use?

Accepted Answer

Data Source Priority. Data Source Priority (Option D) is the correct feature because it allows administrators to define a hierarchy of data sources in the CMDB, ensuring that when multiple sources provide conflicting attribute values for the same CI, the source with the highest priority (lowest numeric value) is trusted and its data is used. This directly addresses the requirement to make the most trustworthy data source take precedence in a large-scale, multi-source environment.

Answer

Identification & Reconciliation engine

Answer

Reconciliation

Answer

Set source precedence in the CI class manager for each CI

Question 2

Which TWO of the following are valid ways to trigger a workflow from a catalog item? (Choose two.)

Accepted Answer

Set the 'Workflow' field on the catalog item to the desired workflow.. Option C is correct because the 'Workflow' field on the catalog item record directly associates a workflow with that item. When a user submits the catalog item, the platform automatically triggers the associated workflow on the generated sc_request record. This is the standard declarative method for linking a catalog item to a workflow without custom scripting.

Answer

On the catalog item form, go to the 'Workflow' tab and select a workflow.

Answer

Write a Business Rule on the 'sc_request' table that starts a workflow.

Answer

In the workflow editor, add a 'Execute Workflow' activity pointing to the catalog item.

Question 3

Refer to the exhibit. A catalog item has a variable 'department' (choice list with values 'IT', 'HR', 'Finance') and a variable 'cost_center' (choice list initially empty). The client script is supposed to add an option to 'cost_center' when 'department' is set to 'IT'. However, when a user selects 'IT', no new option appears. What is the most likely reason?

Accepted Answer

The variable 'cost_center' is not a 'Choice' variable type.. Option A is correct because the `g_form.addOption()` method only works on variables of type 'Choice' (or similar select-type variables like 'Select Box'). If 'cost_center' is not a Choice variable, the client script cannot dynamically add options to it, and the method call silently fails or has no effect. In ServiceNow, only choice-based variable types support runtime option manipulation via client-side APIs.

Answer

The script is a server-side script and cannot use 'g_form'.

Answer

The script needs to call 'g_form.clearOptions()' before adding options.

Answer

The method should be 'g_form.addOption()' with different syntax.

Question 4

Which THREE actions can be performed using UI policies? (Choose three.)

Accepted Answer

Make a field read-only. Option B is correct because UI policies can set the 'read-only' attribute on a field, preventing users from modifying its value based on conditions. This is a core function of UI policies, which control field behavior on a form without requiring server-side scripting.

Answer

Set a field's default value

Answer

Create a new field on the form

Question 5

An organization has a Service Level Agreement (SLA) defined on the Incident table with a condition of 'Category is Network' and a duration of 4 hours. The SLA is triggered when the incident state changes from 'New' to 'In Progress'. A network incident is created and assigned to the Network Support group. The incident state is changed to 'In Progress' immediately. After 3 hours, the incident is resolved. However, the SLA shows a breach despite the resolution being within 4 hours. What is the most likely cause?

Accepted Answer

The SLA stop condition is set to 'State is Resolved', but the SLA was paused due to a schedule (e.g., after-hours pause) and the pause time was not counted, causing the actual working time to exceed 4 hours.. Option A is correct because the SLA breach occurred despite the incident being resolved within 4 hours of moving to 'In Progress'. The most likely cause is that the SLA stop condition is set to 'State is Resolved', but the SLA was paused due to a schedule (e.g., after-hours pause) and the pause time was not counted, causing the actual working time to exceed 4 hours. In ServiceNow, SLA schedules define when the clock is running; if the incident was resolved during a pause period, the SLA timer would have stopped only when the schedule resumed, and the elapsed working time could exceed the 4-hour duration.

Answer

The SLA is assigned to the Network Support group, but the assignment group was changed during the incident.

Answer

The SLA duration is defined in business hours, and the incident was created after business hours, so the elapsed time counted only business hours, making the 4-hour window longer in real time.

Answer

The SLA condition 'Category is Network' was not evaluated correctly because the category field was updated after the SLA was triggered.

Question 6

An administrator is designing a catalog item for software requests. The item must capture the user's department automatically and pre-populate the cost center. Which feature should be used to achieve this?

Accepted Answer

Variable default value using system properties. Option C is correct because using a variable default value with a system property allows the catalog item to automatically populate the department and cost center fields based on the logged-in user's data. System properties can reference user attributes (e.g., sys_user.department) to dynamically set default values without requiring client-side scripts or UI policies.

Answer

Catalog Client Script

Answer

UI Policy

Answer

Client Script

Question 7

You are the ServiceNow administrator for a large enterprise with over 10,000 users. The company uses the Employee Center portal for self-service. Recently, users have reported that when they submit a catalog item, the confirmation page takes over 30 seconds to load, and sometimes they receive a timeout error. The issue only occurs for catalog items that have a workflow attached. The workflows are complex with multiple approval stages and notifications. The server logs show no errors, but the average response time for catalog item submissions with workflows is 45 seconds, compared to 5 seconds for items without workflows. The instance is running on a medium-sized node with default settings. You need to resolve the performance issue without changing the workflow logic or the user interface. What should you do?

Accepted Answer

Configure the workflows to run asynchronously. Option B is correct because configuring workflows to run asynchronously decouples the workflow execution from the synchronous HTTP request-response cycle. This means the catalog item submission completes immediately (within seconds), while the workflow runs in the background. This directly addresses the 45-second response time for items with workflows without altering the workflow logic or UI.

Answer

Disable all approval stages in the workflows

Answer

Upgrade the instance to a larger node size

Answer

Move the workflows to a separate instance

Question 8

A catalog item has multiple variables, and the administrator wants to show a variable only if a previous variable is set to a specific value. Which feature should be used?

Accepted Answer

UI Policy. A UI Policy is the correct feature because it allows an administrator to dynamically show or hide catalog item variables based on the value of a previous variable, without requiring any client-side scripting. UI Policies run on the client side and evaluate conditions in real-time, making them ideal for this declarative, condition-based visibility requirement.

Answer

Client Script

Answer

Catalog Client Script

Answer

Access Control List (ACL)

Question 9

Based on the exhibit, why did the identification rule fail?

Accepted Answer

The serial_number field is empty, but the rule requires it to be non-empty.. The identification rule fails because the serial_number field, which is defined as a required identifier field in the rule configuration, is empty in the incoming payload. ServiceNow CMDB identification rules use a set of fields to uniquely identify CI records; if any required field is missing or null, the rule cannot match or create a record, resulting in a failure. In this case, the payload contains the serial_number field but with no value, which the rule treats as a violation of its non-empty constraint.

Answer

The name field is missing from the payload.

Answer

The rule has a dependency that is not satisfied.

Answer

The ip_address field is not included in the identification rule.

Question 10

An administrator needs to provide a custom view for the Incident table that hides the 'Description' field and reorders fields for a specific group of users. The view should be accessible from the form context menu. Which approach should the administrator take?

Accepted Answer

Create a new view for the Incident table and assign it to a user criteria that includes the group.. Option C is correct because creating a new view for the Incident table and assigning it to a user criteria that includes the group allows the administrator to define a custom form layout (hiding the 'Description' field and reordering fields) that is automatically applied to all members of that group. Views are the native mechanism in ServiceNow for providing different form configurations to different users based on user criteria, and they are accessible from the form context menu via the 'View' option.

Answer

Create a UI Policy that hides the 'Description' field and reorders fields for the specific group.

Answer

Use the 'Personalize Form' option to rearrange fields and share the view with the group.

Answer

Write a Business Rule that updates the form configuration when the group members open a record.

Question 11

Which THREE of the following are valid ways to customize the form layout for a table in ServiceNow? (Choose three.)

Accepted Answer

Using the 'Form Layout' option from the table's context menu to add/remove fields.. Option A is correct because the 'Form Layout' option, accessible from the table's context menu (or via the 'Configure' > 'Form Layout' menu), allows administrators to add, remove, and reorder fields on a form. This directly modifies the underlying form XML configuration for the table, making it a standard and valid method for customizing form layout.

Answer

Using the 'Personalize Form' option to reorder fields for all users.

Answer

Writing a Client Script that sets the visibility of fields.

Question 12

An administrator creates a new ACL for the 'incident' table with type 'record', operation 'read', condition script 'current.assignment_group == gs.getUser().getMyGroups()', and requires role 'snc_internal'. A user with role 'snc_internal' who is a member of group 'Service Desk' can view incidents assigned to 'Service Desk' but cannot view incidents assigned to 'Network Support'. What is the most likely reason?

Accepted Answer

Another ACL with higher order denies read access to all incidents not matching the condition.. Option D is correct because ACLs in ServiceNow are evaluated in order of their 'order' field, and the first matching ACL (either allowing or denying access) determines the outcome. If another ACL with a higher order (lower numeric value) denies read access to incidents not matching the condition, that deny rule will take precedence over the new ACL, preventing the user from viewing incidents assigned to 'Network Support' even though the new ACL would allow it. The user's role and group membership are satisfied, so the issue lies in ACL ordering and a conflicting deny rule.

Answer

The condition script uses 'current.assignment_group' which returns a sys_id, but 'gs.getUser().getMyGroups()' returns a list of group names.

Answer

The condition script should use 'current.assignment_group.isOneOf(gs.getUser().getMyGroups())' instead.

Answer

The user does not have the 'snc_internal' role.

Question 13

A company wants to block all update operations on the 'problem' table for users with only the 'itil' role, except for the user who created the record. Which ACL configuration should be used?

Accepted Answer

Create an ACL with type 'record', operation 'write', role 'itil', condition script 'current.created_by != gs.getUserID()', and set 'Requires role' true.. Option C is correct because it uses a condition script that denies write access to users with the 'itil' role when the current record's creator is not the logged-in user. The ACL type 'record' with operation 'write' and 'Requires role' checked ensures that only users with the 'itil' role are evaluated, and the condition script 'current.created_by != gs.getUserID()' returns true for users who did not create the record, thus blocking their update operations. This matches the requirement to block all updates except for the record creator.

Answer

Create an ACL with type 'record', operation 'write', role 'itil', condition script 'current.assignment_group == gs.getUser().getMyGroups()', and set 'Requires role' true.

Answer

Create an ACL with type 'record', operation 'write', role 'itil', condition script empty, and uncheck 'Requires role'.

Answer

Create an ACL with type 'record', operation 'write', role 'itil', condition script 'current.created_by == gs.getUserID()', and set 'Requires role' true.

Question 14

A transform map for importing incidents uses a co-paste field mapping for 'short_description' that references the source field 'caller_id'. The import fails with the error shown. What is the most likely cause?

Accepted Answer

The import set does not contain a column named 'caller_id'. The error indicates that the transform map is trying to reference a source field named 'caller_id' via a co-paste field mapping, but the import set table does not contain a column with that name. Co-paste mappings combine source fields from the import set row, so if 'caller_id' is missing from the import set columns, the transform engine cannot find the data and fails. Option B correctly identifies that the import set lacks the required column.

Answer

The 'caller_id' field in the target table is read-only

Answer

The target table 'incident' does not have a 'caller_id' field

Answer

The co-paste function cannot combine more than two fields

Question 15

A junior administrator configures the above business rule and ACL. When a user without any role opens an incident with category 'database' and state 1, the priority is set to 1 correctly. However, the user cannot view the incident record. What is the most likely reason?

Accepted Answer

The ACL requires a role (empty role list means no role requirement? Actually requires role checked, but no roles listed means any authenticated user, but unauthenticated? The user has no role, and condition fails because assignment group mismatch.. Option C is correct because the ACL condition checks if the assignment group's sys_id matches a value, but the user has no role and the assignment group field likely stores the display value (group name) rather than the sys_id. This mismatch causes the ACL to deny read access, even though the business rule sets the priority correctly. The empty role list in the ACL means no roles are required, but the condition still fails due to the sys_id vs. display value mismatch.

Answer

The ACL condition uses sys_id of assignment group, but the field stores display value.

Answer

The business rule runs before insert, but the ACL check occurs after insert.

Answer

The business rule order (100) is too low and another rule overrides the priority.

Question 16

An administrator imports data from a CSV file into the 'cmdb_ci' table using a transform map. The import set row contains fields 'name', 'serial_number', and 'manufacturer'. The transform map has a field mapping for 'name' with a co-paste of 'name' and 'serial_number'. Another mapping for 'serial_number' uses a script to concatenate 'SN-' prefix. The 'manufacturer' field is not mapped. After the import, the resulting 'name' field contains 'Laptop123, SN-12345' and 'serial_number' contains 'SN-12345'. Which statement best describes the outcome?

Accepted Answer

The 'name' field contains 'Laptop123, SN-12345' and 'serial_number' contains 'SN-12345'. The transform map's field mapping for 'name' uses a co-paste of 'name' and 'serial_number', which concatenates the source values with a comma and space, resulting in 'Laptop123, SN-12345'. The mapping for 'serial_number' uses a script that adds the 'SN-' prefix to the source 'serial_number' value, producing 'SN-12345'. The unmapped 'manufacturer' field is simply ignored during import, causing no failure. Therefore, the outcome matches option B exactly.

Answer

The import fails because the 'manufacturer' field is not mapped

Answer

The 'name' field contains 'Laptop123, 12345' because the script for 'serial_number' overrides the co-paste for 'name'

Answer

The 'serial_number' field remains '12345' because the co-paste mapping for 'name' consumed the source field

Question 17

A developer writes the script include above to create an approval record. When the method is called from a business rule on the requested item table, the approval is created but assigned to the wrong user. What is the most likely cause?

Accepted Answer

The method uses gs.getUser() which returns the current user running the script, not the intended approver. The script uses `gs.getUser()` to set the approver, which returns the user currently running the script (the system user or the user triggering the business rule), not the intended approver. In ServiceNow, `gs.getUser()` retrieves the session user, which in a business rule context is the user who triggered the rule, not necessarily the user who should approve the request. To assign the correct approver, the script should reference a field from the current record (e.g., `current.approver`) or use a specific user sys_id.

Answer

The method should use 'new GlideRecord' instead of 'var gr'

Answer

The method is not using the correct GlideRecord table name

Answer

The method should call rec.update() after inserting the approval

Question 18

A user reports that after clicking 'New' on the incident module, the form loads but the 'Category' field is missing. Other users see the field. What is the most likely cause?

Accepted Answer

The user has a personal form layout that removed the field. Option C is correct because the user's personal form layout can override the default form view, removing fields like 'Category' for that specific user while others see the field. This is a common scenario where a user has customized their own form layout, either intentionally or accidentally, by dragging the field off the form or using the personalization options.

Answer

The field is hidden by a UI policy

Answer

The field is not in the default form view

Answer

The user's role does not have read access to the field

Question 19

An administrator needs to ensure that when a user changes the 'State' field to 'Resolved' on an incident form, the 'Resolution Notes' field becomes mandatory. What should be configured?

Accepted Answer

UI policy. A UI policy is the correct choice because it allows you to make a field mandatory based on a condition on the same form without requiring a server round-trip. When the 'State' field changes to 'Resolved', the UI policy can set the 'Resolution Notes' field to mandatory, and it runs client-side in real-time as the user interacts with the form.

Answer

Business rule

Answer

Client script with onChange event

Answer

Data policy

Question 20

A company wants to ensure that only authorized changes to the CMDB are allowed. Which THREE of the following mechanisms can help enforce this?

Accepted Answer

CMDB Health Definitions with remediation tasks. Option B is correct because CMDB Health Definitions can include remediation tasks that automatically or manually enforce compliance by correcting unauthorized changes to CI attributes. These tasks are triggered when a health score falls below a threshold, ensuring that only authorized modifications persist in the CMDB.

Answer

The Identification and Reconciliation Engine (IRE)

Answer

Scheduled Discovery jobs