Core Application Development →hardMultiple ChoiceObjective-mapped

SNOW-CAD Core Application Development Practice Question

Exhibit

Refer to the exhibit.

ACL configuration:

Name: Incident - Read - Custom
Type: record
Operation: read
Table: incident
Condition: gs.getUser().getManagerID() == current.assigned_to
Script:
answer = true;

The ACL is meant to allow users to read an incident only if they are the manager of the assigned user. However, users who are not managers can also read the incident. What is the flaw?

⚠ Common exam trap

It's easy for candidates to assume a script that returns true for the intended condition automatically denies access for others, but ServiceNow requires an explicit else statement to set answer = false; otherwise, the script's return value is undefined, which is often treated as true.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The script should include an else statement that sets answer = false

When an ACL condition script runs, it must explicitly set the answer variable to true or false. If the script lacks an else statement that sets answer = false, the script returns undefined (or the last evaluated expression) for non-matching conditions, which ServiceNow treats as true, inadvertently granting read access to unauthorized users. Adding an else statement that sets answer = false ensures that only users who satisfy the manager condition are granted read access.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
The operation should be 'write' not 'read'
Why it's wrong here
Incorrect; the requirement is about reading.
✗
The table should be 'sys_user'
Why it's wrong here
Incorrect; table is correct.
✗
The condition in the ACL condition field should be removed and replaced with the script
Why it's wrong here
Incorrect; the condition is redundant with the script, but the main issue is the script.
✓
The script should include an else statement that sets answer = false
Why this is correct
Correct; the script currently always sets answer = true, so it grants access unconditionally.

Visual reference

Go deeper

SNOW-CAD Core Application Development Practice Question

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question