SNOW-CSA Application Rules, ACL and Notifications Practice Question
Exhibit
ACL: sys_user
condition: gs.getUserID() == 'admin'
operation: write
script:
answer = gs.getUser().hasRole('admin');
if (answer) {
answer = gs.getUser().isMemberOf('admin_group');
}Refer to the exhibit. A user with the admin role but not a member of the admin_group is denied write access to the sys_user table. What is the most likely explanation?
⚠ Common exam trap
ServiceNow exams often test the misconception that ACL scripts only supplement role checks, when in fact a script returning false can override a valid role and deny access.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The ACL script overrides the condition and returns false because the user is not in admin_group.
The exhibit shows an ACL script that returns false if the user is not a member of the admin_group, regardless of the admin role. Since the user has the admin role but is not in admin_group, the script override forces the ACL to deny write access. This is the most likely explanation because the script condition takes precedence over the role requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The ACL script overrides the condition and returns false because the user is not in admin_group.
Why this is correct
Correct; the script sets answer to false, overriding any condition.
- ✗
The user has the admin role, but the admin_group does not exist.
Why it's wrong here
Incorrect; the group existence is not checked, only membership.
- ✗
The ACL requires both the admin role and membership in admin_group, but the condition only checks the role.
Why it's wrong here
Incorrect; the condition is not evaluated because the script runs.
- ✗
The condition gs.getUserID() == 'admin' evaluates to false for the user.
Why it's wrong here
Incorrect; the user is not named 'admin', but the condition is not evaluated because the script overrides it.
Visual reference
Go deeper
Related to this question
About these practice questions
This SNOW-CSA question is part of Courseiva's 504-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SNOW-CSA practice question is part of Courseiva's free ServiceNow certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SNOW-CSA exam.