Courseiva
Application Rules, ACL and NotificationseasyMultiple ChoiceObjective-mapped

SNOW-CSA Application Rules, ACL and Notifications Practice Question

A system administrator needs to prevent users from deleting any records in the 'incident' table. Which method will achieve this most effectively?

⚠ Common exam trap

Test-takers frequently confuse 'write' ACLs with delete permissions, assuming that blocking write access also blocks deletions, but ServiceNow treats delete as a separate operation requiring its own ACL.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Create an application ACL on the incident table with the 'delete' operation set to 'no access'

An Application ACL with the 'delete' operation set to 'no access' explicitly denies the delete operation on the 'incident' table, regardless of any other ACLs or user roles. This is the most effective method to prevent record deletion because it directly targets the delete operation at the table level, overriding any inherited or role-based permissions.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Create a write ACL on the incident table with condition 'false'

    Why it's wrong here

    A write ACL controls create/update, not delete.

  • Create a read ACL on the incident table with condition 'false'

    Why it's wrong here

    A read ACL controls read access, not delete.

  • Set the incident table 'Update' access to 'none' in the table configuration

    Why it's wrong here

    Update access affects editing, not deleting.

  • Create an application ACL on the incident table with the 'delete' operation set to 'no access'

    Why this is correct

    Application ACLs can control delete operation and 'no access' denies it.

Visual reference

Source Router + ACL permit 10.0.0.0/8 deny any Server 10.0.0.5 ✓ 192.168.1.1 ✗ dropped ACLs evaluate top-down; first match wins — implicit deny all at end

About these practice questions

This SNOW-CSA question is part of Courseiva's 504-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This SNOW-CSA practice question is part of Courseiva's free ServiceNow certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SNOW-CSA exam.