ServiceNow CSA - ServiceNow Certified System Administrator

AnAccess Control rule (ACL)in ServiceNow defineswho can access dataandwhat actions they can performon that data. Each ACL consists of three primary components:

Object being secured– The specific table, field, or record that the rule applies to.

Operation– The type of action that is being secured (e.g., Read, Write, Create, Delete).

Permissions required– The conditions, roles, or scripts that determine whether access is granted.

ACLs evaluatewhether a user has permissionto access a specific table, field, or action.

Thesecurity rules are processed from most specific to least specific(e.g., field-level > table-level).

Permissions can be granted based onroles, conditions, or custom scriptsusing GlideSystem (gs).

A. Groups, Conditional Expressions, and Workflows(Incorrect)

ACLs do not manageworkflowsor directly control group assignments.

B. Table Schema, CRUD, and User Authentication(Incorrect)

CRUD (Create, Read, Update, Delete) permissions are controlled by ACLs, butUser Authenticationis managed separately through login policies (LDAP, SSO, etc.).

D. security_admin(Incorrect)

security_adminis aspecial elevated rolerequired to modify security settings, but it is not what an ACL specifies.

Access Control Rules Overview:https://docs.servicenow.com/en-US/bundle/utah-platform-security/page/administer/security/concept/access-control-rules.html

Configuring ACLs in ServiceNow:https://docs.servicenow.com/en-US/bundle/utah-platform-security/page/administer/security/task/t_CreateOrModifyAnAccessControl.html

How ACLs Work in ServiceNow:Explanation of Incorrect Options:Official References from Certified System Administrator (CSA) Documentation:

Importing data into ServiceNow from a spreadsheet involves a structured process to ensure data integrity and proper mapping. The three main steps in the process are:

The first step in importing data into ServiceNow is to load the spreadsheet into an Import Set table.

This can be done through theSystem Import Sets > Load Datamodule.

The system will create a temporary table (Import Set) where the data will be staged before being transformed into target tables.

ATransform Mapis required to map fields from the Import Set table to the target table in ServiceNow.

Transform Maps define how data from the source (Import Set table) will be transferred and transformed into the destination table (e.g., Incident, User, CMDB, etc.).

The Transform Map allows for additional transformations such ascoalescing records(to avoid duplicates) and scripting for data manipulation.

After configuring the Transform Map, the final step is toRun Transform, which applies the mappings and moves the data from the Import Set table to the target table.

This process ensures that the imported data is correctly integrated into the ServiceNow instance and adheres to the configured rules.

Option A: "Select Data Source, Schedule Transform"– Incorrect because selecting a data source is part of data import, but "scheduling" a transform is not a required step in the standard import process.

Option C: "Define Data Source, Select Transform Map, Run Transform"– Incorrect because "Define Data Source" is more relevant when setting up external data imports. The process must begin with "Load Data" rather than defining the data source.

Option D: "Select Import Set, Select Transform Map, Run Transform"– Incorrect because an Import Set must first be created by loading data before it can be selected.

ServiceNow Docs: Importing Data Overview

ServiceNow Docs: Creating a Transform Map

ServiceNow Docs: Running a Transform Map

Step 1: Load DataStep 2: Create Transform MapStep 3: Run TransformWhy Other Options Are Incorrect?References from Certified System Administrator (CSA) Documentation:

When creating acustom table in ServiceNow, the platform automatically assigns a table name prefixed with"u_"to differentiatecustomtables fromout-of-the-box (OOB) tables.

The default prefix"u_"is applied to allcustom global tables.

The table name follows the format:"u_" + [custom name].

Example:

If you create a table named"abc", the system assigns it the table name:u_abc.

All custom tables created by usersautomatically receive the "u_" prefix.

Prevents conflicts withServiceNow’s internal tables.

Ensurescustom tables are easy to identify.

Naming Convention for Custom Tables:Why "C. u_abc" is Correct?

A. snc_abc – Incorrect

"snc_" is not used for custom tables; it is reserved forinternal ServiceNow functionality.

B. abc – Incorrect

Custom tablesdo not use raw names; they always include a prefix (u_).

D. sys_abc – Incorrect

"sys_" is reserved forsystem tables(e.g.,sys_user,sys_db_object).

Explanation of Incorrect Options:

ServiceNow Docs: Creating Custom Tables

ServiceNow CSA Study Guide – Table Administration

ServiceNow Product Documentation: Understanding Table Naming Conventions

References from Certified System Administrator (CSA) Documentation:

ServiceNow provides multiplesecurity-related modulesthat aSystem Administratorfrequently uses to manage access, authentication, and overall system security.

Why These Options Are Correct?A. System Properties > Security

This module allowsadministrators to configure general security settings, including password policies, session timeout, and encryption settings.

It helps manage security parameters at a system-wide level.

E. System Security > Access Control (ACL)

Access Control Lists (ACLs)define what data users can access, modify, and delete within the instance.

ACLs operate at thetable, field, and record levels, ensuring proper role-based access control (RBAC).

This is one of themost commonly usedsecurity modules by admins.

G. System Security > High Security Settings

High Security Settings (previously known as Security Hardening)enforce strict security controls, such as requiring multi-factor authentication (MFA) and enforcing strict password policies.

It is often used for compliance withsecurity regulationslike HIPAA, GDPR, and ISO 27001.

Why the Other Options Are Incorrect?B. Utilities > Migrate Security

This optiondoes not existin ServiceNow. There is no"Migrate Security"under Utilities.

C. System Security > Security

There is no"System Security > Security"module in ServiceNow. The correct structure isSystem Security > Access ControlorSystem Properties > Security.

D. Self-Service > My Access

This is aself-service modulefor end users to request and review their access.

It isnota tool thatSystem Administratorsuse to manage security settings.

F. Password Management > Security Questions

This is used to configuresecurity questions for password recoverybut isnot a core security modulethat admins frequently use.

General Security Settings in ServiceNow

ServiceNow Access Control (ACL) Best Practices

ServiceNow System Security and Role Management

References to Official Certified System Administrator (CSA) Documentation:

AnUpdate Setin ServiceNow is a mechanism used tocapture configuration changes(such as UI policies, business rules, client scripts, and more) from one instance and move them to another. This ensures that customizations and modifications can be transferred across different ServiceNow instances efficiently.

The process ofretrieving an Update Setfrom another instance follows these key steps:

Verify Update Set is Complete

Before moving an Update Set, it must be marked asCompleteto ensure that all related changes are included.

Navigate toSystem Update Sets > Local Update Setsand confirm that the status is set toComplete.

If the status isIn Progress, the Update Set cannot be retrieved.

Retrieve Update Set

In thetarget instance, navigate toSystem Update Sets > Retrieved Update Sets.

Click"Retrieve Update Set"and provide the remote instance’s URL where the update set exists.

The system will fetch the Update Set from the source instance.

Preview Update Set

Before applying changes, ServiceNow provides apreview optionto check for potential errors or collisions with existing customizations.

Click"Preview Update Set"to initiate validation.

The preview will highlight any skipped records, collisions, or missing dependencies.

Commit Update Set

If the preview is successful (i.e., no critical errors), click"Commit Update Set"to apply the changes to the instance.

Once committed, the changes in the Update Set will be merged into the system's configuration.

"Commit" is the correct final step– after previewing, the Update Set must becommittedto take effect.

"Apply" is incorrect– ServiceNow does not use "Apply" in the Update Set process; instead, it uses "Commit."

"Test Connection" is not part of the Update Set retrieval process– it is relevant forMID Server connectivitybut not for Update Sets.

Why the Correct Answer is "D. Verify Update Set is Complete, Retrieve, Preview, Commit"Thus, the correct sequence is:

✔Verify Update Set is Complete → Retrieve → Preview → Commit

ServiceNow CSA Official Documentation– Update Set Management

ServiceNow Docs - Update Sets(Search for "Update Set Lifecycle")

ServiceNow Community Best Practices on Update Sets

ServiceNow Community(Search for "Best Practices for Update Sets")

ServiceNow Learning Portal - Admin Fundamentals

Available via ServiceNow Now Learning Platform(Look under "Instance Configuration" and "Update Sets")

References from Certified System Administrator (CSA) Documentation:

InServiceNow Flow Designer, adata pillrepresentsvariables, record fields, or outputs from previous stepsthat can be used dynamically in the flow.

Data pillsallow flow designers to referencerecord datawithout manually specifying table fields.

Dragging a data pillonto a flow step ensures that the correct values areautomatically mappedfrom the referenced record.

This is the recommended method for using record datawithin a flow.

Why is Option D Correct?

Why Are the Other Options Incorrect?A. Drag the table icon onto the flow definition

IncorrectbecauseFlow Designer does not use table iconsfor referencing records.

Instead, it utilizesdata pills and actionsto retrieve and manipulate record data.

B. Use the condition builder to specify the desired values

Incorrectbecause thecondition builderis used fordecision logic(e.g., If-Else conditions), not for referencing record data.

C. Specify the source table on the data pill related list

Incorrectbecause youcannot manually specifya table in a data pill.

Data pills areautomatically createdwhen an action retrieves data from a record.

E. Add the table reference using the slush bucket

Incorrectbecauseslush bucketsare used in ServiceNow for selecting multiple items (e.g., roles, groups),not for referencing record data in a flow.

ServiceNow Flow Designer - Using Data Pills

ServiceNow Flow Designer - Best Practices for Record Referencing

ServiceNow ITSM - Automating Workflows with Flow Designer

References to Official Certified System Administrator (CSA) Documentation:

When usingHigh Security Settingsin ServiceNow, administrators often gaintemporary elevated privileges. To revert to normal security levels, they mustlog out and back into refresh their session.

High Security Settingsprovide elevated security configurations and mayoverride standard role-based access controls.

Logging outclears any temporary security settingsand restores normal administrator privileges.

This is therecommended practiceafter making security changes.

Why is Option B Correct?

Why Are the Other Options Incorrect?A. Select Normal role

Incorrectbecausethere is no "Normal" rolein ServiceNow.

C. Use System Administration > Normal Security module

Incorrectbecausethere is no "Normal Security" modulein ServiceNow.

D. Select Global Update Set

Incorrectbecause Update Sets controlcustomizations and configurations,not security settings.

E. End Impersonation

Incorrectbecause ending impersonation onlyswitches back to the admin accountif you were impersonating a user.

Itdoes not resetsecurity settings from High Security Mode.

ServiceNow CSA Guide - High Security Settings

ServiceNow Best Practices - Managing Security Configurations

References to Official Certified System Administrator (CSA) Documentation:

AReference fieldin ServiceNow allows you tolook up values from another table, effectively creating a relationship between two tables. When a user selects a value in a reference field, they are selecting a record from the referenced table.

Stores asys_id(unique identifier) of a record from another table.

Displays a user-friendly label from the referenced record.

Allowsdot-walking, enabling access to related fields from the referenced table.

Incident Table (source table)→ Contains a"Caller"field that references theUser Table(sys_user).

TheCallerfield allows users to select a user from theUser Table.

B. Verity→ Not a valid field type in ServiceNow.

C. Options→ Options are typically used in choice lists, not for referencing another table.

D. Selections→ No such field type exists in ServiceNow.

E. Dot Walk→ Dot-walking is afeaturethat allows accessing related fields but is not a field type itself.

F. Lookup→ While "Lookup Select Box" exists, it functions differently by filtering choices rather than directly referencing another table.

AService Level Agreement (SLA)in ServiceNow is a tracking mechanism that ensures tasks are completed within a specified time frame. SLAs help inmonitoring and enforcing deadlinesfor various tasks, such as incidents, changes, or service requests.

Tracks Task Duration

SLAs calculate theelapsed timesince a task was created and determine if it meets or breaches the defined resolution targets.

Ensures Timely Completion

SLAs definestart, pause, and stop conditionsbased on specific criteria (e.g., an incident must be resolved within 8 hours).

Visual Indicators

SLAs includeprogress bars, warning alerts, and breach notificationsto help users track deadlines.

Works with Business Rules and Workflows

SLAs can triggerescalations, notifications, or automated actionsif a task is at risk of breaching the SLA.

A. Task Escalation Clock(Incorrect)

No such feature called "Task Escalation Clock" exists in ServiceNow. Escalations are handled usingSLA workflows and escalation rules.

C. Inactivity Monitor(Incorrect)

TheInactivity Monitoris used to detect when a task has not been updated for a specific period, but it does not enforce time-bound completion.

D. Response Time Clock(Incorrect)

No specific "Response Time Clock" exists in ServiceNow.Response SLAstrack thetime taken to acknowledge a task, but this is part of the broader SLA system.

E. Business Time Remaining(Incorrect)

This isnot a specific featurebut rather a calculated field within SLAs that shows the time remaining before an SLA breaches.

Service Level Agreements (SLA) Overview:https://docs.servicenow.com/en-US/bundle/utah-it-service-management/page/product/service-level-management/concept/c_ServiceLevelAgreements.html

How SLAs Work in ServiceNow:https://docs.servicenow.com/en-US/bundle/utah-it-service-management/page/product/service-level-management/concept/slas-how-work.html

Key Features of SLAs in ServiceNow:Incorrect Options:Official References from Certified System Administrator (CSA) Documentation:

InServiceNow, administrators canreuse the same notification contentacross multiple channels (such asemail, SMS, and push notifications) by usingCommon Notification Content.

Consistency Across Channels

Ensures that the same message format is used acrossemail, SMS, and push notifications.

Easier Maintenance

Instead ofcreating separate contentfor each channel, administrators can manage all notification content from one place.

Dynamic Content

Supports variables and dynamic placeholders to customize messages based on recipient data.

A. Configure Default notification content

Incorrect: There is no "default notification content" feature in ServiceNow.

B. Enable Actionable notification content

Incorrect: Actionable notifications allow users totake actions directly from the notification, but they do not manage common content.

D. Set up Related notification content

Incorrect: No such feature as "Related notification content" exists in ServiceNow.

Key Features of Common Notification Content:Why Other Options Are Incorrect?

Common Notification Content Overview

ServiceNow Notification Management

Setting Up Common Notification Content

Creating Reusable Notification Content

References from ServiceNow CSA Documentation: