Courseiva
Application Rules, ACL and NotificationseasyMultiple ChoiceObjective-mapped

SNOW-CSA Application Rules, ACL and Notifications Practice Question

A user reports that they are unable to see any records in the 'incident' table, even though they have the itil role. The administrator checks the ACLs and finds that there are no read ACLs defined for the incident table. What will happen?

⚠ Common exam trap

Many candidates assume the itil role provides blanket read access to the incident table, but ServiceNow requires explicit read ACLs to grant that access; without them, the implicit deny blocks all users, including itil role holders.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

No users can read any incident records.

In ServiceNow, if no read ACLs are defined for a table, the system defaults to a 'deny all' behavior. This means that no users, including those with the itil role, can read any records in the incident table. The itil role grants access to incident records only when a read ACL explicitly allows it; without any read ACL, the implicit denial takes effect.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The system will create a default read ACL that grants access to the itil role.

    Why it's wrong here

    Wrong: ServiceNow does not auto-generate ACLs.

  • All users can read all incident records.

    Why it's wrong here

    Wrong: No ACL means no access granted.

  • No users can read any incident records.

    Why this is correct

    Correct: No read ACL denies all read access.

  • Only users with the admin role can read incident records.

    Why it's wrong here

    Wrong: Admin role typically has a separate ACL, but it's not automatic.

Visual reference

Source Router + ACL permit 10.0.0.0/8 deny any Server 10.0.0.5 ✓ 192.168.1.1 ✗ dropped ACLs evaluate top-down; first match wins — implicit deny all at end

About these practice questions

Courseiva writes every SNOW-CSA question from scratch — 504 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This SNOW-CSA practice question is part of Courseiva's free ServiceNow certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SNOW-CSA exam.