Free Practice Questions for ServiceNow CSA Exam

In ServiceNow,Business Rulesare server-side scripts that executeat specific timesrelative to database operations. The"When" settingdetermineswhenthe Business Rule runs in relation to a record action (Insert, Update, Delete, Query).

Why is Option A Correct?Before

Executesbeforea record is saved to the database.

Used tovalidate data, modify values, or prevent an action(e.g., stopping an invalid update).

After

Executesaftera record is inserted, updated, or deleted.

Commonly used fortriggering notificationsor creating related records.

Async (Asynchronous)

Runsaftera database operation but executes inthe background.

Ideal forlong-running or performance-heavy tasks(e.g., integrating with external systems).

Display

Executesbefore a form loads, allowing modifications to fieldsbefore they are displayedto the user.

Typically used forpre-filling form fieldsbased on user roles or conditions.

Why Are the Other Options Incorrect?B. Prior to, Synchronous, on Update

"Prior to"is not a valid Business Rule execution timing.

"Synchronous"is a general term but isnot a specific execution timing optionin Business Rules.

"on Update"is a database operation,not an execution timing.

C. Insert, Update, Delete, Query

These aredatabase operationsthat trigger Business Rules,not execution timings.

Execution timing determineswhen(before, after, etc.), while these determinewhat triggers it.

D. Before, Synchronous, Scheduled Job, View

"Synchronous"is not a Business Rule timing option.

"Scheduled Job"refers toScheduled Jobs(not Business Rules).

"View"is a UI-related concept,not a Business Rule execution timing.

ServiceNow Business Rules - How They Work

ServiceNow Best Practices - Business Rule Execution Timing

ServiceNow Developer Documentation - Before, After, Async, and Display Business Rules

References to Official Certified System Administrator (CSA) Documentation:

TheServiceNow Virtual Agentis an AI-powered chatbot that assists userswithin a messaging interface(such as Microsoft Teams, Slack, or Service Portal). It helpsautomate resolutions and guide usersthrough common IT and HR issues.

Incident Auto-ResolutionallowsVirtual Agenttoautomatically detect, intercept, and resolve incidentsbefore they reach a human agent.

It appliesmachine learning (ML) and predefined rulesto determine whether a ticketcan be resolved through automation.

If an issuematches a known solution, the Virtual Agentprovides the resolution stepsto the user.

If self-resolution fails, the ticket isescalated to an agent.

It is anofficial feature in ServiceNow Virtual Agent.

It allows the chatbot tointercept incidentsand attempt resolution before escalation.

B. Ticket Resolver→Incorrect

"Ticket Resolver" isnot an official ServiceNow feature.

C. Virtual Agent Helper→Incorrect

No feature called "Virtual Agent Helper" exists in ServiceNow.

D. Web Intelligence→Incorrect

Web Intelligenceisnot related to ServiceNow Virtual Agent.

What is Incident Auto-Resolution?Why is "A. Incident Auto-Resolution" the Correct Answer?Why the Other Options Are Incorrect?

ServiceNow Docs: Virtual Agent & Incident Auto-Resolutionhttps://docs.servicenow.com/en-US/bundle/utah-virtual-agent/page/administer/virtual-agent/concept/incident-auto-resolution.html

References from Certified System Administrator (CSA) Documentation:This confirms that"Incident Auto-Resolution" is the correct answer, as it allowsVirtual Agent to intercept and resolve submitted incidents automatically.

Access Control Rules (ACLs) are a fundamental security feature in ServiceNow that protect applications by identifying and restricting access to files and data. ACLs define which users or roles have permissions to create, read, write, or delete data within an application.

Understanding Access Control Rules (ACLs)ACLs in ServiceNow operate based on three key elements:

Object Type– Defines what is being secured (table-level or field-level access).

Operation– Specifies the type of access (Create, Read, Write, Delete, Execute, etc.).

Condition & Script– Determines when access is granted (role-based permissions or specific conditions).

Data Security:Ensures that only authorized users can access specific data.

Granular Access:Controls permissions at the table and field level.

Regulatory Compliance:Helps organizations maintain security standards and data protection laws.

ServiceNow applies ACLs from the most specific to the most general (Field-level → Table-level → Global-level).

If no ACL explicitly allows access, the system denies it by default (Deny by Default Policy).

ACLs can be role-based, condition-based, or script-based for advanced security configurations.

A. Application Configuration– This refers to application settings but does not control access to data.

B. Verbose Log– Logging helps in debugging but does not secure applications or restrict access.

D. Application Scope– Defines application boundaries but does not control data access permissions.

ServiceNow CSA Documentation: Access Control Rules (ACLs)

ServiceNow Security Best Practices: Security and Access Control

Why Access Control Rules are Important?How ACLs Work in ServiceNow?Incorrect Answer Choices Explanation:Official CSA Documentation Reference:

AnUpdate SetinServiceNowis a mechanism for capturing and migratingcustomizations and configurationsfrom one instance to another (e.g.,Development → Test → Production).

What is Captured in an Update Set?Update Sets recordconfiguration changes, such as:

Tables & Database Schema Changes(e.g., new tables, modified fields)

Form Layout & UI Changes(e.g., changes in form views, UI policies)

Schedules(e.g., Scheduled Jobs, Business Rules with scheduled actions)

Client Scripts(e.g., JavaScript running on the client side)

Business Rules, UI Actions, UI Policies

Workflows, Script Includes, ACLs (Access Control Rules)

Email Notifications, Dictionary Entries, Application Menus

What is NOT Captured in an Update Set?Data Records (e.g., Incident, Change Request, CMDB data)

Group Memberships & User Data

System Properties (some properties may require manual migration)

Attachments & Scheduled Reports

B. Changes made to tables, forms, views, and fields(Incorrect)

Views and Fieldsare part of UI changes, butschedules and client scriptsare also included in Update Sets, makingOption A more complete.

C. Changes made to tables, forms, Business Rules, and data records(Incorrect)

Data records (actual table entries like incidents or change requests) are NOT captured in Update Sets.

D. Changes made to tables, forms, groups, and configuration items (CIs)(Incorrect)

Groups and CIs (CMDB data) are considered data and are NOT included in Update Sets.

Instead,CIs should be migrated using Import Sets or CMDB data export/import.

Why Other Options Are Incorrect?

Understanding Update Sets

Update Sets Overview

What Gets Captured in Update Sets?

Best Practices for Using Update Sets

References from ServiceNow CSA Documentation:

In ServiceNow, every record in a table has a unique 32-character identifier calledsys_id. This ID uniquely identifies a record and is stored in thesys_id fieldfor every table.

sys_id is a globally unique identifierassigned to every record in ServiceNow.

It is a 32-character hexadecimal string, ensuring uniqueness across instances.

It remains constant for a record, even if other fields in the record are modified.

sys_id is used in API calls, reference fields, and update setsto track records across environments.

A. sn_rec_id:No such field in ServiceNow.

B. rec_id:Not a valid field in ServiceNow.

C. u_id:Not a standard ServiceNow field. Custom fields may use "u_" prefix butu_id is not a system field.

E. sn_gu_id:No such field in ServiceNow.

F. sn_sys_id:No such standard field in ServiceNow.

G. id:Generic term, but not a standard field in ServiceNow.

ServiceNow Data Model and sys_id Explained: ServiceNow Docs

sys_id Best Practices for Data Management

Why is the Correct Answer "sys_id"?Why Not the Other Options?References from the Certified System Administrator (CSA) Official Documentation:Thesys_idis crucial for tracking and managing records efficiently in ServiceNow and plays a key role in integrations, workflows, and automation.

If a user reports that theycannot see certain modulesin theApplication Navigator, the best way to troubleshoot is toimpersonate the user. Impersonation allows an administrator to see exactly what the user seeswithout needing their password.

Click on your profile icon (top-right corner).

SelectImpersonate User.

Search for and select theuser’s name.

The instance will reload, and you will see the UI as the user experiences it.

Navigate to theApplication Navigatorand check for missing modules.

Once done, clickStop Impersonation.

Ensures security(no need to reset or look up passwords).

Speeds up troubleshootingby allowing admins to replicate user issues.

Helps verify role-based access permissions.

Steps to Impersonate a User in ServiceNow:Why is Impersonation Useful?

Incorrect Answer Choices Explanation:A. Look up their password, so you can login with their account

This is asecurity violationand not an acceptable practice.

B. Initiate a Connect Chat session

Chatting with the user can help gather information, but it does not allow you to see what they see.

C. Install the Bomgar plug-in

Bomgaris a remote support tool, but impersonation is thebuilt-inand recommended method for troubleshooting in ServiceNow.

E. Launch a NowChat window

NowChat is used forcustomer support and collaboration, not for verifying module visibility.

Impersonate Users in ServiceNow

User Roles and Permissions

Official CSA Documentation Reference:

InServiceNow, Favorites allow users to quickly access frequently usedmodules, records, lists, or reports. Favorites can be customized, including renaming them, changing their icons, or modifying their colors.

Changing the Label of a FavoriteTorename or edit a Favorite, you must use thePencil icon (✏️), which indicatesedit mode.

Navigate to theApplication Navigatoron the left-hand side.

Locate theFavoritessection.

Hover over the favorite item you want to rename.

Click on thePencil icon(✏️) to open the edit menu.

Update thelabel(name) and other properties like color or icon.

ClickSaveto apply changes.

A. Clock(Incorrect)

TheClock icontypically representsrecently accessed items, not Favorites.

B. Hamburger(Incorrect)

TheHamburger menu (☰)represents navigation menus but is not used to edit Favorites.

D. Three dots(Incorrect)

TheThree dots (⋮)often indicate a menu with additional options but do not specifically edit Favorites.

E. Triangle(Incorrect)

NoTriangle iconis used for renaming Favorites.

F. Star(Incorrect)

TheStar icon (⭐)is used toadd or removeFavorites, but not to rename them.

ServiceNow Favorites Overview:https://docs.servicenow.com/en-US/bundle/utah-platform-user-interface/page/administer/navigation-and-ui/task/t_CreateFavorites.html

Steps to Change the Label of a Favorite:Explanation of Incorrect Options:Official References from Certified System Administrator (CSA) Documentation:

AUI Policyis the preferredno-codeapproach in ServiceNow to dynamically control themandatory, read-only, or visibilitystate of form fields based on specified conditions. Unlike Client Scripts, which require JavaScript coding, UI Policies provide aneasy-to-configure, rule-based solution.

They allow administrators tocontrol form behaviorwithout scripting.

They arefaster and more efficientthan Client Scripts.

Theyrun on the client-side, meaning changes occur dynamically as users interact with the form.

Defineconditions(e.g., "Priority is High").

Setactions(e.g., make "Due Date" mandatory, read-only, or hidden).

Apply the UI Policy to the form automatically when the condition is met.

A. UI Action→ UI Actions create buttons, links, or context menu items; they do not control form fields.

B. Client Script→ While Client Scripts can achieve similar functionality, they require JavaScript coding, making them alow-coderather than ano-codesolution.

C. UI Script→ UI Scripts are reusable JavaScript libraries, not designed for controlling form fields.

D. UI Rule→ No such feature exists in ServiceNow.

In ServiceNow, users can log into theService Portalusingcertificate-based authentication methods. The two commonly supported methods are:

ACACis a smart card issued by theU.S. Department of Defense (DoD).

It is used by military personnel, contractors, and government employees for secure authentication.

ServiceNow supportsCAC authenticationby integrating with external identity providers.

APIV cardis used byU.S. federal agenciesfor authentication.

It followsFederal Information Processing Standard (FIPS) 201for identity verification.

ServiceNow allows users to log in using PIV authentication, ensuringsecure accessto government and enterprise systems.

1. Common Access Card (CAC) – (Correct Answer)2. Personal Identity Verification (PIV) – (Correct Answer)

Both CAC and PIV are widely recognized certificate-based authentication methodsused in ServiceNow for secure user authentication.

They provide multi-factor authentication (MFA)and meet federal security standards.

Why "C. CAC" and "E. PIV" are the Correct Answers?

A. Extended Validation Access (EVA) – Incorrect

No such authentication method exists in ServiceNow.Extended Validation (EV) certificatesare used for website security, not user authentication.

B. Organization Verification Card (OVC) – Incorrect

Not a recognized ServiceNow authentication method.

D. Domain Authentication Card (DAC) – Incorrect

No such authentication method exists in ServiceNow.

Explanation of Incorrect Options:

ServiceNow Docs: Common Access Card (CAC) Authentication

ServiceNow Docs: Personal Identity Verification (PIV) Authentication

ServiceNow CSA Study Guide – Authentication Methods in ServiceNow

References from Certified System Administrator (CSA) Documentation: