Courseiva

CIS-HR · topic practice

Security And Data Protection practice questions

Practise ServiceNow Certified Implementation Specialist - Human Resources (CIS-HR, HR Service Delivery) (CIS-HR) Security And Data Protection practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security
20 questionsDomain: Security And Data Protection

What the exam tests

What to know about Security And Data Protection

Security And Data Protection questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common Security And Data Protection exam traps

  • Answering from memory before reading the full scenario.
  • Missing a constraint such as cost, availability, security, scope or command context.
  • Choosing a broad answer when the question asks for the most specific fix.
  • Ignoring why the wrong options are tempting.

Practice set

Security And Data Protection questions

20 questions · select your answer, then reveal the explanation

When configuring 'HR Security Profiles', what is the purpose of the 'Apply to' field?

Which THREE of the following are primary methods for enforcing data protection within the HR Service Delivery application?

A user in the HR department reports they cannot see records in the 'HR Tasks' list, despite having the 'hr_task_reader' role. What is the most likely cause?

An HR Administrator needs to configure data masking for the 'SSN' field in the HR Profile (sn_hr_core_profile) table. Which feature should be used to ensure the data is masked for all users except those with the 'hr_admin' role?

Which role is required to modify HR security configurations in a scoped application without having full system admin access?

You need to restrict access to a specific HR Case so that only members of the 'Payroll' assignment group can view it. Which security mechanism should you configure?

Question 7hardmultiple choice
Study the full ACL explanation →

You are configuring Delegated Development for an HR team member. You want to grant them permissions to create and modify HR Service Portal widgets, but you must prevent them from modifying the underlying HR security ACLs. Which scope role should be assigned to the developer?

An HR administrator needs to restrict access to sensitive employee medical records so that only the HR Benefits team can view them, even though other HR staff have the 'sn_hr_core.case_reader' role. Which security mechanism should be implemented?

Where do you go to view the HR Security Profiles assigned to a specific user?

What role is required for a user to manage 'HR Criteria' records?

Which of the following is true regarding 'HR Scoped Roles'?

You need to ensure that 'Payroll' employees cannot see 'Employee Relations' cases. What is the standard ServiceNow best practice for this?

If a user has both the 'hr_admin' and 'sn_hr_core.admin' roles, which role takes precedence for HR data security?

An organization requires that HR case data be encrypted at rest. What platform feature must be enabled?

To ensure that HR case 'Work Notes' are hidden from the employee portal, what should you configure?

When configuring 'Delegated Developer', what privilege allows a user to modify 'HR Service' definitions?

Which module contains the 'HR Security' configuration settings?

Question 18hardmultiple choice
Read the full VPN explanation →

You need to allow HR managers to view sensitive employee information only while they are on the corporate VPN. What security tool is best suited for this?

Question 19hardmultiple choice
Study the full ACL explanation →

If an HR table has a 'Read' ACL for the 'hr_admin' role, and you want to grant a new group 'HR_Auditors' access, what should you do?

Who can modify HR Security Profiles?

Free account

Track your progress over time

Create a free account to save your results and see which topics improve across sessions.

Focused Security And Data Protection sessions

Start a Security And Data Protection only practice session

Every question in these sessions is drawn from the Security And Data Protection domain — nothing else.

Related practice questions

Related CIS-HR topic practice pages

Move into related areas when this topic feels solid.

Frequently asked questions

What does the CIS-HR exam test about Security And Data Protection?
Security And Data Protection questions test whether you can apply the concept in context, not just recognise a definition.
How should I use these practice questions?
Select your answer before revealing the explanation. Then read why each option is right or wrong — this active recall approach builds retention far faster than re-reading notes.
Can I practise just Security And Data Protection questions in a focused session?
Yes — the session launcher on this page draws every question from the Security And Data Protection domain. Use a 10-question session first to gauge your baseline, then move to 20 or 30 once the weak spots are clear.
Where can I practise other CIS-HR topics?
Use the topic links above to move to related areas, or go back to the CIS-HR question bank to see all topics.
Are these real exam questions or dumps?
These are original practice questions written to test the same concepts the CIS-HR exam covers. They are not copied from any real exam or dump site.