Courseiva
Database Administration and CMDBmediumMultiple SelectObjective-mapped

SNOW-CSA Database Administration and CMDB Practice Question

A ServiceNow administrator is configuring Data Segmentation for CMDB. Which TWO statements are true about Data Segmentation? (Select exactly 2)

⚠ Common exam trap

Watch out — candidates often confuse Data Segmentation with field-level ACLs or assume it requires an additional license, when in fact it is a row-level security feature that is part of the base CMDB and works in conjunction with, not instead of, standard ACLs.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

It can be used to restrict access to CI records based on user criteria.

Data Segmentation in ServiceNow restricts access to CI records based on user criteria, such as business unit or location, by evaluating conditions against the user's session. This is a row-level security mechanism that filters which CI records a user can see, making Option B correct. It works alongside standard ACLs, which handle field- and record-level permissions, allowing administrators to layer both for granular control, confirming Option E.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • It can be applied to individual CI fields.

    Why it's wrong here

    Data Segmentation applies to entire records, not specific fields.

  • It can be used to restrict access to CI records based on user criteria.

    Why this is correct

    Data Segmentation allows record-level access based on user attributes.

  • It is configured in the Data Segmentation module under System Security.

    Why it's wrong here

    Data Segmentation is under CMDB > Data Segmentation.

  • It requires the subscription of a separate CMDB product license.

    Why it's wrong here

    Data Segmentation is included in the CMDB module.

  • It can be combined with standard ACLs for granular control.

    Why this is correct

    Data Segmentation works alongside ACLs to provide fine-grained access.

Visual reference

Source Router + ACL permit 10.0.0.0/8 deny any Server 10.0.0.5 ✓ 192.168.1.1 ✗ dropped ACLs evaluate top-down; first match wins — implicit deny all at end

About these practice questions

One of 504 original SNOW-CSA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This SNOW-CSA practice question is part of Courseiva's free ServiceNow certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SNOW-CSA exam.