SNOW-CSA Database Administration and CMDB Practice Question
An administrator is asked to design a solution to prevent unauthorized changes to the CMDB. The requirement is that any update to a CI's critical attributes (e.g., serial number, model) must be logged and require an approval. Which approach should be taken?
⚠ Common exam trap
Many exam-takers confuse 'audit' (which only logs changes) with 'approval' (which prevents changes), leading them to select Option D, or they mistakenly think database triggers (Option B) are a valid ServiceNow mechanism when the platform explicitly prohibits direct database operations.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a business rule that fires on update, checks the previous values, and sends an approval request.
A business rule that fires 'on update' with a condition checking previous values of critical attributes (e.g., serial number, model) can trigger an approval request via an approval engine or flow. This approach directly enforces the requirement that updates to those specific fields require approval before the change is committed, without relying on external modules or triggers that may bypass ServiceNow's native approval framework.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure the CMDB to use 'Data Certification' and require approval for attribute changes.
Why it's wrong here
Data certification is for periodic review, not real-time blocking.
- ✗
Use a database trigger that captures changes and creates a change request.
Why it's wrong here
Database triggers are not supported in ServiceNow.
- ✓
Create a business rule that fires on update, checks the previous values, and sends an approval request.
Why this is correct
A business rule with approval workflow can prevent unauthorized updates in real time.
- ✗
Set field-level audit on the critical fields and use the 'Audit' module to report changes.
Why it's wrong here
Audit only logs, does not prevent changes.
Go deeper
Related to this question
About these practice questions
One of 504 original SNOW-CSA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SNOW-CSA practice question is part of Courseiva's free ServiceNow certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SNOW-CSA exam.