ServiceNow Certified System Administrator CSA Practice Test 13
Question 120
A ServiceNow administrator encounters this situation: A technician uses an incident form's Save action and expects it to behave exactly like Update in every interface. What is the MOST appropriate response?
- Create a suitable form template containing approved default values and train agents when to apply it.
- Inspect the form fields and related lists to identify the underlying parent-child relationship before modifying schema.
- Share or publish the saved filter using the available sharing controls and validate permissions.
- Test the supported form action and navigation behavior for saving, updating and inserting in the target experience.
Explanation
Correct Answer
D:Test the supported form action and navigation behavior for saving, updating and inserting in the target experience. This action directly addresses the observed ServiceNow situation: A technician uses an incident form's Save action and expects it to behave exactly like Update in every interface. The relevant platform mechanism is that form submission actions may save the record and navigate differently depending on context and UI configuration. Without it, an agent can unintentionally navigate away or create an extra record if action semantics are assumed. A useful acceptance check is: The selected action persists the intended changes and produces the expected record/navigation result.
Incorrect Answers
A:That response addresses a different ServiceNow issue: Agents repeatedly fill the same incident category and assignment values when triaging similar recurring incidents. It would not directly resolve the current problem. Here the needed action is test the supported form action and navigation behavior for saving, updating and inserting in the target experience. because form submission actions may save the record and navigate differently depending on context and UI configuration.
B:That response addresses a different ServiceNow issue: A technician interprets a related-list entry as a field stored directly on the incident record. It would not directly resolve the current problem. Here the needed action is test the supported form action and navigation behavior for saving, updating and inserting in the target experience. because form submission actions may save the record and navigate differently depending on context and UI configuration.
C:That response addresses a different ServiceNow issue: A team saves a personal incident filter and expects every service agent to see it automatically. It would not directly resolve the current problem. Here the needed action is test the supported form action and navigation behavior for saving, updating and inserting in the target experience. because form submission actions may save the record and navigate differently depending on context and UI configuration.
Question 121
A ServiceNow administrator encounters this situation: A production instance reports update set preview collisions after another team changed the same UI action. What is the MOST appropriate response?
- Resolve detected update set conflicts and review target configuration before committing the promoted changes.
- Keep presentation rules separate from data security and enforce protected field access with appropriate ACLs.
- Capture supported configuration changes in an update set, review the contents and preview before controlled commit.
- Use an appropriate data migration method for business records; use update sets for supported configuration artifacts.
Explanation
Correct Answer
A:Resolve detected update set conflicts and review target configuration before committing the promoted changes. This action directly addresses the observed ServiceNow situation: A production instance reports update set preview collisions after another team changed the same UI action. The relevant platform mechanism is that preview and conflict resolution protect against overwriting environment-specific configuration or earlier approved work. Without it, unreviewed collision handling can revert a valid production customization. A useful acceptance check is: The resolved update set commits with approved outcomes and a regression test confirms both teams' required functions.
Incorrect Answers
B:That response addresses a different ServiceNow issue: An administrator uses a UI Policy to hide a confidential field and assumes external web services can no longer retrieve it. It would not directly resolve the current problem. Here the needed action is resolve detected update set conflicts and review target configuration before committing the promoted changes. because preview and conflict resolution protect against overwriting environment-specific configuration or earlier approved work.
C:That response addresses a different ServiceNow issue: An administrator manually copies configuration changes from development into production, missing several related artifacts. It would not directly resolve the current problem. Here the needed action is resolve detected update set conflicts and review target configuration before committing the promoted changes. because preview and conflict resolution protect against overwriting environment-specific configuration or earlier approved work.
D:That response addresses a different ServiceNow issue: A team expects an update set to transfer incident records and attachments along with a form modification. It would not directly resolve the current problem. Here the needed action is resolve detected update set conflicts and review target configuration before committing the promoted changes. because preview and conflict resolution protect against overwriting environment-specific configuration or earlier approved work.
Question 122
This control has not been applied: "Separate transaction-critical validation from suitable asynchronous or event-driven notification handling". The observed problem is: An administrator tries to notify managers from a synchronous before-insert rule and causes slow record saves. What is the MOST direct risk?
- Unreviewed collision handling can revert a valid production customization.
- Unnecessary synchronous integrations can make user-facing updates slow or unstable.
- Runaway execution may generate duplicate events, slow writes or make incident status unpredictable.
- An inherited rule can alter unrelated task processes when only incident behavior was intended.
Explanation
Correct Answer
B:Unnecessary synchronous integrations can make user-facing updates slow or unstable. This is the direct exposure in the stated situation: An administrator tries to notify managers from a synchronous before-insert rule and causes slow record saves. The reason is that business Rule timing determines whether work blocks a database transaction or runs after a commit. The recommended mitigation is separate transaction-critical validation from suitable asynchronous or event-driven notification handling. A controlled proof would be: A record saves promptly and a separate queued event delivers its notification after the approved trigger.
Incorrect Answers
A:That outcome is associated with a separate case: A production instance reports update set preview collisions after another team changed the same UI action. It is addressed by resolve detected update set conflicts and review target configuration before committing the promoted changes. The current missing control instead causes: Unnecessary synchronous integrations can make user-facing updates slow or unstable.
C:That outcome is associated with a separate case: A Business Rule updates the same incident record on every update and triggers endless changes. It is addressed by review Business Rule timing and guard conditions to avoid recursion and repeated self-triggering writes. The current missing control instead causes: Unnecessary synchronous integrations can make user-facing updates slow or unstable.
D:That outcome is associated with a separate case: A rule configured to run on all task updates unexpectedly modifies problems and change requests as well as incidents. It is addressed by scope Business Rule conditions and table inheritance deliberately to the intended record types. The current missing control instead causes: Unnecessary synchronous integrations can make user-facing updates slow or unstable.
Question 123
In this situation: A newly hired operations coordinator confuses ServiceNow's record system with a local ticket spreadsheet. The administrator proposes: Explain the Now Platform's cloud-based shared records, applications, role-controlled experiences and workflow capabilities before designing the service process. Which platform principle BEST justifies that action?
- A distinct instance separates experimentation and validation from production data and operational impact.
- Navigation personalization does not grant access and may differ per user even when the underlying roles are identical.
- A common platform stores work as related records and orchestrates processes across applications instead of maintaining isolated files.
- ServiceNow upgrades and managed applications depend on extension points that separate customer configuration from vendor-maintained code.
Explanation
Correct Answer
C:A common platform stores work as related records and orchestrates processes across applications instead of maintaining isolated files. This principle supports the proposed configuration: Explain the Now Platform's cloud-based shared records, applications, role-controlled experiences and workflow capabilities before designing the service process. The observed case is: A newly hired operations coordinator confuses ServiceNow's record system with a local ticket spreadsheet. Without the correct control, separate spreadsheets can produce conflicting status and leave task ownership untraceable. A concrete check is: A representative request can be created, assigned, updated and audited through related platform records.
Incorrect Answers
A:That principle applies to a different configuration case: A developer tests new automation directly in a live tenant and accidentally creates hundreds of real tasks. The related control is use an appropriate non-production ServiceNow instance with representative test data and controlled promotion into production. In the current problem, the more specific mechanism is: A common platform stores work as related records and orchestrates processes across applications instead of maintaining isolated files.
B:That principle applies to a different configuration case: A support team pins frequently used modules but new employees see different menus and assume permissions are broken. The related control is check user roles, personalized navigation favorites and application visibility separately before changing access controls. In the current problem, the more specific mechanism is: A common platform stores work as related records and orchestrates processes across applications instead of maintaining isolated files.
D:That principle applies to a different configuration case: A division wants to build an incident-tracking process by editing core product files rather than using configurable platform features. The related control is select supported configuration and scoped extension mechanisms in the Now Platform instead of modifying underlying product source files. In the current problem, the more specific mechanism is: A common platform stores work as related records and orchestrates processes across applications instead of maintaining isolated files.
Question 124
In this situation: A server-side Script Include uses a GlideRecord query without enforcing input validation and returns data beyond the caller's role. The administrator proposes: Validate parameters and use appropriate access-aware APIs and explicit authorization before returning record data. Which platform principle BEST justifies that action?
- Client scripts and server scripts run in different environments with different accessible objects and permissions.
- Business Rule timing determines whether work blocks a database transaction or runs after a commit.
- Scripted record operations must constrain user input and the set of records affected by each action.
- Server-side scripting can read and write platform records, but application authorization must be enforced at the service boundary.
Explanation
Correct Answer
D:Server-side scripting can read and write platform records, but application authorization must be enforced at the service boundary. This principle supports the proposed configuration: Validate parameters and use appropriate access-aware APIs and explicit authorization before returning record data. The observed case is: A server-side Script Include uses a GlideRecord query without enforcing input validation and returns data beyond the caller's role. Without the correct control, an untrusted input can expand the query and disclose unauthorized records. A concrete check is: A restricted caller receives only permitted records, while malformed parameters fail safely.
Incorrect Answers
A:That principle applies to a different configuration case: An administrator adds a client script that directly references server-only APIs and receives runtime errors. The related control is choose the correct client or server execution context and communicate through supported platform APIs when needed. In the current problem, the more specific mechanism is: Server-side scripting can read and write platform records, but application authorization must be enforced at the service boundary.
B:That principle applies to a different configuration case: An administrator tries to notify managers from a synchronous before-insert rule and causes slow record saves. The related control is separate transaction-critical validation from suitable asynchronous or event-driven notification handling. In the current problem, the more specific mechanism is: Server-side scripting can read and write platform records, but application authorization must be enforced at the service boundary.
C:That principle applies to a different configuration case: A scripted integration concatenates untrusted field values into a dynamically built query and updates unrelated records. The related control is use validated query construction and narrowly scoped record selection instead of untrusted concatenation. In the current problem, the more specific mechanism is: Server-side scripting can read and write platform records, but application authorization must be enforced at the service boundary.
Question 125
This control has not been applied: "Define assignment group and assignee conventions with controlled state transitions and task reporting". The observed problem is: An assignment group queue grows because new tasks are never given an accountable owner. What is the MOST direct risk?
- Unassigned tasks can remain unseen and breach operational commitments.
- A misleading aggregate can hide deterioration in a particular support group.
- Unfinished remediation tasks can be hidden by premature parent closure.
- Repeated manual entry can introduce inconsistent categories and slow response.
Explanation
Correct Answer
A:Unassigned tasks can remain unseen and breach operational commitments. This is the direct exposure in the stated situation: An assignment group queue grows because new tasks are never given an accountable owner. The reason is that task-based applications use assignment and state to communicate responsibility and work progress. The recommended mitigation is define assignment group and assignee conventions with controlled state transitions and task reporting. A controlled proof would be: A representative task enters the proper group queue, gains an owner and progresses through configured states.
Incorrect Answers
B:That outcome is associated with a separate case: A dashboard reports total closed incidents but leaders need a trend showing resolution performance by team. It is addressed by choose a metric, time basis, breakdown and supported Platform Analytics visualization with correct record filters. The current missing control instead causes: Unassigned tasks can remain unseen and breach operational commitments.
C:That outcome is associated with a separate case: An incident manager confuses child tasks with the parent incident and closes the parent before dependencies finish. It is addressed by model parent-child tasks and enforce required closure checks according to the workflow. The current missing control instead causes: Unassigned tasks can remain unseen and breach operational commitments.
D:That outcome is associated with a separate case: Agents repeatedly fill the same incident category and assignment values when triaging similar recurring incidents. It is addressed by create a suitable form template containing approved default values and train agents when to apply it. The current missing control instead causes: Unassigned tasks can remain unseen and breach operational commitments.
Question 126
To address the situation: A team needs a board showing tasks by state but manually duplicates incidents into a spreadsheet for each sprint. The team implements: "Configure a data-driven Visual Task Board aligned to the intended task table and grouping field". Which evidence BEST demonstrates the result?
- A test user sees the requested list columns and separate form fields in their expected positions.
- Moving an allowed card updates the intended underlying task state and remains consistent in the list.
- A controlled move changes the task field only on the configured data-driven board while freeform behavior remains appropriate.
- Only permitted users can invoke the action and a test incident produces the expected controlled workflow.
Explanation
Correct Answer
B:Moving an allowed card updates the intended underlying task state and remains consistent in the list. This result demonstrates that the control configure a data-driven Visual Task Board aligned to the intended task table and grouping field. works for the observed case: A team needs a board showing tasks by state but manually duplicates incidents into a spreadsheet for each sprint. The governing principle is that data-driven visual boards reflect underlying records rather than requiring copied task data. Otherwise, separate board copies can become stale and lead to conflicting status updates. Seeing only a configuration entry would not prove a working outcome.
Incorrect Answers
A:That observation would support the separate control configure list layout and form layout separately in the appropriate view. in the scenario: An administrator changes a list's displayed columns and expects the record form to rearrange automatically. It would not confirm the current implementation; the expected outcome is: Moving an allowed card updates the intended underlying task state and remains consistent in the list.
C:That observation would support the separate control choose between freeform and data-driven board behaviors based on whether card movement should update task records. in the scenario: A product owner creates a private freeform Visual Task Board and expects incident field values to change when cards move. It would not confirm the current implementation; the expected outcome is: Moving an allowed card updates the intended underlying task state and remains consistent in the list.
D:That observation would support the separate control configure a properly scoped form/UI action with role checks and reviewed server-side behavior. in the scenario: A team wants a form action that opens a validated follow-up workflow when a critical incident is resolved. It would not confirm the current implementation; the expected outcome is: Moving an allowed card updates the intended underlying task state and remains consistent in the list.
Question 127
This control has not been applied: "Configure decision logic on validated request variables with separate paths for required and skipped approval". The observed problem is: A fulfillment flow must request manager approval only when a hardware value exceeds an approved threshold. What is the MOST direct risk?
- An unbounded flow loop can create excessive executions and corrupt record history.
- A broken flow can block live approvals or create unintended tasks.
- High-value requests may bypass approval or low-value requests may be delayed unnecessarily.
- Requests can appear submitted while no delivery work occurs.
Explanation
Correct Answer
C:High-value requests may bypass approval or low-value requests may be delayed unnecessarily. This is the direct exposure in the stated situation: A fulfillment flow must request manager approval only when a hardware value exceeds an approved threshold. The reason is that conditional flow branches apply business policy to current request data rather than running the same tasks for all requests. The recommended mitigation is configure decision logic on validated request variables with separate paths for required and skipped approval. A controlled proof would be: Tests below and above the threshold follow their correct approval branches.
Incorrect Answers
A:That outcome is associated with a separate case: An admin adds a flow to incident updates that triggers itself every time it writes a status note. It is addressed by configure trigger conditions and guarded record updates to prevent recursive automation. The current missing control instead causes: High-value requests may bypass approval or low-value requests may be delayed unnecessarily.
B:That outcome is associated with a separate case: A workflow is changed directly in production without a test record or approval evidence. It is addressed by develop and test automation in an appropriate non-production environment, then promote reviewed changes through supported deployment mechanisms. The current missing control instead causes: High-value requests may bypass approval or low-value requests may be delayed unnecessarily.
D:That outcome is associated with a separate case: A submitted catalog request creates a request record but no task reaches the responsible fulfillment team. It is addressed by configure a supported service catalog fulfillment flow that creates properly assigned catalog tasks with lifecycle states. The current missing control instead causes: High-value requests may bypass approval or low-value requests may be delayed unnecessarily.
Question 128
In this situation: An administrator hides a sensitive field from a form and assumes users can no longer obtain its value via API. The administrator proposes: Configure field access control for sensitive data in addition to appropriate form presentation settings. Which platform principle BEST justifies that action?
- Conditional form behavior can change mandatory, read-only or visible states, but client behavior alone may not cover API writes.
- Dashboards are useful when their measures and grouping represent the business question rather than a raw record count.
- Form layout controls presentation of existing fields, while dictionary/schema changes alter their underlying definitions.
- Removing a field from a view is not equivalent to denying database record or API read access.
Explanation
Correct Answer
D:Removing a field from a view is not equivalent to denying database record or API read access. This principle supports the proposed configuration: Configure field access control for sensitive data in addition to appropriate form presentation settings. The observed case is: An administrator hides a sensitive field from a form and assumes users can no longer obtain its value via API. Without the correct control, a user could retrieve restricted values through other lists, scripts or web services. A concrete check is: A restricted identity cannot read the field through either form, list or API while authorized users can.
Incorrect Answers
A:That principle applies to a different configuration case: A coordinator wants the assignment group field mandatory only when an incident enters a specific state. The related control is configure an appropriate conditional client-side form policy and validate server-side data rules where needed. In the current problem, the more specific mechanism is: Removing a field from a view is not equivalent to denying database record or API read access.
B:That principle applies to a different configuration case: A dashboard reports total closed incidents but leaders need a trend showing resolution performance by team. The related control is choose a metric, time basis, breakdown and supported Platform Analytics visualization with correct record filters. In the current problem, the more specific mechanism is: Removing a field from a view is not equivalent to denying database record or API read access.
C:That principle applies to a different configuration case: An incident form must show a business service field for service-desk agents without changing the underlying field type. The related control is adjust the supported form layout or form designer for the intended view and verify role access. In the current problem, the more specific mechanism is: Removing a field from a view is not equivalent to denying database record or API read access.
Question 129
To address the situation: A team saves a personal incident filter and expects every service agent to see it automatically. The team implements: "Share or publish the saved filter using the available sharing controls and validate permissions". Which evidence BEST demonstrates the result?
- An authorized colleague can select the saved filter and sees only records allowed by their ACLs.
- A controlled test list contains only the intended active high-priority group incidents.
- Only permitted users can invoke the action and a test incident produces the expected controlled workflow.
- Applying the tag leaves priority unchanged unless the separately approved automation executes.
Explanation
Correct Answer
A:An authorized colleague can select the saved filter and sees only records allowed by their ACLs. This result demonstrates that the control share or publish the saved filter using the available sharing controls and validate permissions. works for the observed case: A team saves a personal incident filter and expects every service agent to see it automatically. The governing principle is that personal and shared list filters have different visibility and still obey record-level access controls. Otherwise, a personal filter can be invisible to teammates, while improper sharing can leak query context. Seeing only a configuration entry would not prove a working outcome.
Incorrect Answers
B:That observation would support the separate control build a list filter with properly grouped AND and OR conditions for state, priority and assignment group. in the scenario: An incident manager wants to see only active high-priority tickets assigned to their group, but opens an unfiltered global list. It would not confirm the current implementation; the expected outcome is: An authorized colleague can select the saved filter and sees only records allowed by their ACLs.
C:That observation would support the separate control configure a properly scoped form/UI action with role checks and reviewed server-side behavior. in the scenario: A team wants a form action that opens a validated follow-up workflow when a critical incident is resolved. It would not confirm the current implementation; the expected outcome is: An authorized colleague can select the saved filter and sees only records allowed by their ACLs.
D:That observation would support the separate control use tags for classification and visibility, and configure an explicit supported process rule if priority must change. in the scenario: An agent uses a colored tag to organize work and expects that tag to change the incident's priority automatically. It would not confirm the current implementation; the expected outcome is: An authorized colleague can select the saved filter and sees only records allowed by their ACLs.
Question 130
In this situation: A service desk creates a separate catalog item for each small hardware option and loses coherent bundle fulfillment. The administrator proposes: Use a suitable order guide or reusable variable set when one request needs coordinated related catalog items. Which platform principle BEST justifies that action?
- Catalog access controls availability by requester characteristics and should reflect business entitlement.
- Order guides and variable sets can reduce duplication and capture related requests in one guided experience.
- Well-scoped contextual data reduces friction while preserving privacy and access limits.
- Service Catalog approvals must control when side-effecting fulfillment starts rather than merely notify after the fact.
Explanation
Correct Answer
B:Order guides and variable sets can reduce duplication and capture related requests in one guided experience. This principle supports the proposed configuration: Use a suitable order guide or reusable variable set when one request needs coordinated related catalog items. The observed case is: A service desk creates a separate catalog item for each small hardware option and loses coherent bundle fulfillment. Without the correct control, duplicated items can generate inconsistent field choices and fragmented fulfillment. A concrete check is: A test order guide submits the intended related requests with consistent captured variables.
Incorrect Answers
A:That principle applies to a different configuration case: An employee can see an equipment catalog item although the department is not entitled to purchase it. The related control is configure appropriate catalog item and variable user criteria and verify access for allowed and denied audiences. In the current problem, the more specific mechanism is: Order guides and variable sets can reduce duplication and capture related requests in one guided experience.
C:That principle applies to a different configuration case: A Virtual Agent topic asks users for details already provided in their authenticated service portal session. The related control is use approved conversation context and validated variables to prefill supported fields without overexposing personal data. In the current problem, the more specific mechanism is: Order guides and variable sets can reduce duplication and capture related requests in one guided experience.
D:That principle applies to a different configuration case: A catalog item approval is sent only after its fulfillment task has already ordered a regulated device. The related control is place the required approval gate before fulfillment action and test rejected and approved paths. In the current problem, the more specific mechanism is: Order guides and variable sets can reduce duplication and capture related requests in one guided experience.