Courseiva
UI, Navigation and FormshardMultiple ChoiceObjective-mapped

SNOW-CSA UI, Navigation and Forms Practice Question

Exhibit

(function() {
    if (gs.hasRole('admin')) {
        return true;
    }
    return false;
})()

Refer to the exhibit. This is a script used in an ACL on the 'incident' table with 'type' set to 'record' and 'operation' set to 'read'. What is the effect of this ACL?

⚠ Common exam trap

The trap here is that candidates often misinterpret a deny rule as a grant rule, thinking the ACL 'grants read access to admin' when it actually denies access to non-admin users, with admin access being the default behavior when no deny applies.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Denies read access to non-admin users

The ACL script uses `gs.getUser().hasRole('admin')` to check if the current user has the 'admin' role. If the user is not an admin, the script returns `false`, which denies read access. This effectively restricts read access to admin users only, denying it to all non-admin users. Option C correctly describes this behavior.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Grants read access only to admin

    Why it's wrong here

    This is partially true but incomplete; the ACL also denies non-admin (default deny).

  • Denies read access to everyone

    Why it's wrong here

    Admin users are granted access.

  • Denies read access to non-admin users

    Why this is correct

    Non-admin users get false, so they are denied read access.

  • Grants read access to everyone

    Why it's wrong here

    The script returns false for non-admin users, so they are denied.

Visual reference

Source Router + ACL permit 10.0.0.0/8 deny any Server 10.0.0.5 ✓ 192.168.1.1 ✗ dropped ACLs evaluate top-down; first match wins — implicit deny all at end

About these practice questions

One of 504 original SNOW-CSA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This SNOW-CSA practice question is part of Courseiva's free ServiceNow certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SNOW-CSA exam.