Courseiva
Application Rules, ACL and NotificationsmediumMultiple ChoiceObjective-mapped

SNOW-CSA Application Rules, ACL and Notifications Practice Question

Exhibit

(function evaluateRule(current, user) {
    if (current.caller_id == user.sys_id) {
        return true;
    }
    return false;
})(current, user);

Refer to the exhibit. This ACL is applied to the Incident table for 'write' operation. A user is editing their own incident but is still denied. What is the issue?

⚠ Common exam trap

A common mix-up: candidates assume a single ACL's result determines access, but ServiceNow evaluates all matching ACLs in order, and a 'false' from any ACL (unless overridden) will deny the operation, even if another ACL returns 'true'.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The script returns true but another ACL denies.

When an ACL is applied to a table for 'write' operations, multiple ACLs can evaluate the same operation. Even if one ACL (the one shown) returns true, another ACL on the same table for the same operation may return false, causing the overall write to be denied. The exhibit shows a script that checks `current.caller_id == gs.getUserID()`, which should allow the user to edit their own incident, but another ACL with a higher order or a different condition is blocking the write.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The script returns false because current.caller_id is not the user's sys_id.

    Why it's wrong here

    For the user's own incident, caller_id should match.

  • The ACL is set to 'read' instead of 'write'.

    Why it's wrong here

    The ACL is configured for write operation.

  • The user does not have the necessary role.

    Why it's wrong here

    No role is required as the script allows access.

  • The script returns true but another ACL denies.

    Why this is correct

    A more specific ACL can override this one.

Visual reference

Source Router + ACL permit 10.0.0.0/8 deny any Server 10.0.0.5 ✓ 192.168.1.1 ✗ dropped ACLs evaluate top-down; first match wins — implicit deny all at end

About these practice questions

Courseiva writes every SNOW-CSA question from scratch — 504 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This SNOW-CSA practice question is part of Courseiva's free ServiceNow certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SNOW-CSA exam.