Courseiva
Application Rules, ACL and NotificationsmediumMultiple ChoiceObjective-mapped

SNOW-CSA Application Rules, ACL and Notifications Practice Question

An ACL on the Incident table has a script condition that returns true if the user is in the role 'incident_manager'. A user with the 'incident_manager' role still cannot update incidents. What could be the issue?

⚠ Common exam trap

A common mix-up: candidates assume a valid role assignment guarantees access, overlooking that ACL script conditions must execute without errors and return true for the ACL to grant access.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The script has a syntax error but is still returning false.

If the script condition has a syntax error, it will not execute properly and will return false by default, even if the user has the 'incident_manager' role. In ServiceNow, ACL script conditions that fail due to syntax errors are treated as false, denying access. The user's role is irrelevant if the condition itself does not evaluate to true.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The ACL is set to 'read' instead of 'write'.

    Why it's wrong here

    The ACL type is separate; if it were read, the user couldn't view, but they can view.

  • The user also has a role that explicitly denies access.

    Why it's wrong here

    Role-based denial is not typical; ACL evaluation does not use deny roles.

  • The script has a syntax error but is still returning false.

    Why this is correct

    A syntax error in the script may cause it to return false, denying access.

  • The ACL has a condition order that is not correct.

    Why it's wrong here

    Condition order affects evaluation but not correctness of a single ACL.

Visual reference

Source Router + ACL permit 10.0.0.0/8 deny any Server 10.0.0.5 ✓ 192.168.1.1 ✗ dropped ACLs evaluate top-down; first match wins — implicit deny all at end

About these practice questions

One of 504 original SNOW-CSA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This SNOW-CSA practice question is part of Courseiva's free ServiceNow certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SNOW-CSA exam.