Pass the ServiceNow Certified System Administrator CSA Questions and answers with CertsForce

Thesix methods available for user authenticationin ServiceNow are:

Local Database– The user authenticates using a username and password stored in theinstance database.

Multifactor Authentication (MFA)– The user provides their username, password, and apasscode(e.g., from Google Authenticator).

LDAP (Lightweight Directory Access Protocol)– The user authenticates using credentials stored in a corporateLDAP directory.

SAML 2.0 (Security Assertion Markup Language)– The user is authenticated via an externalSAML Identity Provider (IdP).

OAuth 2.0– The user authenticates via anOAuth identity provider(such as Google, Microsoft, or Facebook).

Digest Token Authentication– The user authenticates using anencrypted tokenrather than directly submitting a password.

Thus, the correct answer is:

A, B, C, D, E, F

ServiceNow supports multiple authentication methods to provideflexibility, security, and integration capabilitieswith external identity providers.

Local Database Authentication:

ServiceNow storesusernames and passwordsin the internal database.

Users authenticate directly with the instance.

This method is commonly used when no external authentication provider is configured.

Multifactor Authentication (MFA):

Enhances security by requiringtwo authentication factors:

Username and password(stored in the database).

Passcodefrom a registered device (such as Google Authenticator, Microsoft Authenticator).

MFA helpsprevent unauthorized accesseven if credentials are compromised.

LDAP Authentication:

Allows users toauthenticate against an external LDAP directory(such as Microsoft Active Directory).

The user must have amatching record in the ServiceNow user table ([sys_user]).

ServiceNowdoes not store passwordswhen using LDAP; it only validates credentials against the directory.

SAML 2.0 Authentication:

Users authenticate via aSAML Identity Provider (IdP)such asOkta, Microsoft Azure AD, or Ping Identity.

ServiceNow acts as aService Provider (SP)and does not store passwords.

ProvidesSingle Sign-On (SSO)capabilities.

OAuth 2.0 Authentication:

Allows authentication viaOAuth providers(Google, Facebook, Microsoft, etc.).

Users do not need to store passwords in ServiceNow; instead, authentication is delegated to theOAuth identity provider.

Digest Token Authentication:

Uses anencrypted token(instead of a plaintext password) to authenticate users.

Often used forAPI-based authenticationor scenarios where passwords should not be transmitted over the network.

Each method aligns with ServiceNow ' s authentication mechanisms as per official documentation.

ServiceNow supports a hybrid authentication approach, allowing multiple methods to coexist.

ServiceNow Docs – Authentication Methodshttps://docs.servicenow.com

ServiceNow Security Best Practices – Authentication & Access Controls

ServiceNow Developer Portal – SSO & OAuth Authentication

Why These Are the Correct Methods?References from Certified System Administrator (CSA) Documentation:

In ServiceNow, theService Catalogapplication allows administrators to create, configure, and manage catalog items that users can request. To create a new catalog item, administrators must access the correct module within theService Catalogapplication.

Maintain Categories (Option A)

This module is used to create and managecategorieswithin the Service Catalog.

Categories are used to organize catalog items into logical groups but do not allow the creation of actual catalog items.

Maintain Items (Option B)(Correct Answer)

This module is used tocreate, edit, and manage catalog itemsin the Service Catalog.

It provides options to define the item name, description, fields, workflows, and pricing details.

Administrators use this module when they want tobegin creating a new catalog item.

Content Items (Option C)

This module is related toContent Management System (CMS) and Knowledge Basebut is not used for creating standard Service Catalog items.

It allows administrators to create links to external content rather than actual requestable catalog items.

Items (Option D)

TheItemsmodule displays catalog items but does not allow an administrator to create new ones.

It is primarily forviewingitems rather than maintaining them.

Explanation of the Available Options:

The " Maintain Items " module is theonlymodule where administrators can create, edit, and manage catalog items in ServiceNow.

Other options either relate to categories, content management, or viewing existing items, making them incorrect choices.

Why is " B. Maintain Items " the Correct Answer?

ServiceNow Product Documentation - Service Catalog Administration???? https://docs.servicenow.com/bundle/tokyo-it-service-management/page/product/service-catalog-management/concept/service-catalog-management.html

ServiceNow CSA Exam Guide - Service Catalog & Request Fulfillment

ServiceNow Fundamentals Training - Creating and Managing Catalog Items

References from Official CSA Documentation:

n ServiceNow, theList Editorallows users to edit field values directly within a list without opening the record in a form. This feature is particularly useful for making quick modifications to multiple records without the need to open each one individually.

Users navigate to a list view of records (e.g., an incident list).

If a field is editable via the List Editor, clicking on it will allow inline editing.

After making changes, users can pressEnteror click outside the field to save.

Inline Editing:Users can modify fields directly from the list.

Multi-Row Editing:Certain fields support bulk updates.

Security Controls:Admins can control which fields are editable via List Editor through dictionary settings.

Audit and History Tracking:Changes made via List Editor are logged for tracking purposes.

A. Data Editor:No such term as " Data Editor " exists in ServiceNow.

B. Edit Menu:This does not refer to inline editing; instead, it ' s a general menu for editing options.

D. Form Designer:Used for configuring form layouts, not for inline editing.

ServiceNow Product Documentation → Lists and List Editing

ServiceNow CSA Exam Guide → Covers List Editor as a core feature of instance configuration.

How List Editor Works:Key Features of List Editor:Why Other Options Are Incorrect:Reference from CSA Documentation:This verifies thatList Editoris the correct answer.

AService Level Agreement (SLA)in ServiceNow is a tracking mechanism that ensures tasks are completed within a specified time frame. SLAs help inmonitoring and enforcing deadlinesfor various tasks, such as incidents, changes, or service requests.

Tracks Task Duration

SLAs calculate theelapsed timesince a task was created and determine if it meets or breaches the defined resolution targets.

Ensures Timely Completion

SLAs definestart, pause, and stop conditionsbased on specific criteria (e.g., an incident must be resolved within 8 hours).

Visual Indicators

SLAs includeprogress bars, warning alerts, and breach notificationsto help users track deadlines.

Works with Business Rules and Workflows

SLAs can triggerescalations, notifications, or automated actionsif a task is at risk of breaching the SLA.

A. Task Escalation Clock(Incorrect)

No such feature called " Task Escalation Clock " exists in ServiceNow. Escalations are handled usingSLA workflows and escalation rules.

C. Inactivity Monitor(Incorrect)

TheInactivity Monitoris used to detect when a task has not been updated for a specific period, but it does not enforce time-bound completion.

D. Response Time Clock(Incorrect)

No specific " Response Time Clock " exists in ServiceNow.Response SLAstrack thetime taken to acknowledge a task, but this is part of the broader SLA system.

E. Business Time Remaining(Incorrect)

This isnot a specific featurebut rather a calculated field within SLAs that shows the time remaining before an SLA breaches.

Service Level Agreements (SLA) Overview:https://docs.servicenow.com/en-US/bundle/utah-it-service-management/page/product/service-level-management/concept/c_ServiceLevelAgreements.html

How SLAs Work in ServiceNow:https://docs.servicenow.com/en-US/bundle/utah-it-service-management/page/product/service-level-management/concept/slas-how-work.html

Key Features of SLAs in ServiceNow:Incorrect Options:Official References from Certified System Administrator (CSA) Documentation:

In ServiceNow,UI Actionsare used toadd buttons, links, and context menu itemson forms and lists to enhance user interaction.

UI Actions provide interactive elementssuch asbuttons, links, and context menu optionson forms and lists.

UI Actions allow execution ofserver-side and client-side scripts, includingGlideAjax and GlideRecordcalls.

They can be configured to execute underspecific conditions, such asuser roles, field values, or record states.

Examples of UI Actions include:

Submit, Update, and Deletebuttons on forms.

Custom action buttonssuch as " Escalate Incident " or " Resolve Task " .

List context menu itemssuch as " Approve " or " Reject " for workflow items.

A. UI Policies:Used fordynamically showing, hiding, or making fields mandatory, butnot for adding buttons or links.

B. UI Settings:No such module in ServiceNow.

D. UI Config:Not a valid option; UI Actions, not " UI Config, " control buttons and menus.

UI Actions Overview:ServiceNow Docs

Configuring UI Actions for Forms and Lists

Why is the Correct Answer " UI Actions " ?Why Not the Other Options?References from the Certified System Administrator (CSA) Official Documentation:By usingUI Actions, developers canenhance the user experienceby providing interactivebuttons and menu optionsin ServiceNow.

InServiceNow Reporting,Function Fieldsare used toperform calculations, manipulate text, and transform datain a report. These fields allow users to applyarithmetic operations, coalescing, concatenation, and length calculationson existing data.

Arithmetic Operations– Performaddition, subtraction, multiplication, and divisionon numeric fields.

Coalesce– Combine multiple fields into one (useful for handling NULL values).

Concatenation– Join multiple string fields together (e.g., combining first and last names).

Length Calculation– Measure the length of a text field (e.g., checking character count in a description field).

Function fields aredesigned specifically for calculations and data transformationsin reports.

They allowadvanced data processing without requiring scripting.

A. Sourcing Fields→Incorrect

" Sourcing Fields " isnot a valid termin ServiceNow reporting.

C. Computational Fields→Incorrect

While this term sounds relevant,ServiceNow does not use " Computational Fields " in reporting.

D. Calculation Fields→Incorrect

" Calculation Fields " is not an official ServiceNow reporting term.

Function fields handle calculations, not a separate category called " Calculation Fields. "

Key Functions of Function Fields:Why is " B. Function Fields " the Correct Answer?Why the Other Options Are Incorrect?

ServiceNow Docs: Function Fields in Reportinghttps://docs.servicenow.com/en-US/bundle/utah-performance-analytics-and-reporting/page/use/reporting/concept/c_FunctionField.html

References from Certified System Administrator (CSA) Documentation:This confirms that " Function Fields " is the correct answerfor performingarithmetic, coalescing, concatenation, and length calculationsin reporting.

Access Control Rules (ACLs) are a fundamental security feature in ServiceNow that protect applications by identifying and restricting access to files and data. ACLs define which users or roles have permissions to create, read, write, or delete data within an application.

Understanding Access Control Rules (ACLs)ACLs in ServiceNow operate based on three key elements:

Object Type– Defines what is being secured (table-level or field-level access).

Operation– Specifies the type of access (Create, Read, Write, Delete, Execute, etc.).

Condition & Script– Determines when access is granted (role-based permissions or specific conditions).

Data Security:Ensures that only authorized users can access specific data.

Granular Access:Controls permissions at the table and field level.

Regulatory Compliance:Helps organizations maintain security standards and data protection laws.

ServiceNow applies ACLs from the most specific to the most general (Field-level → Table-level → Global-level).

If no ACL explicitly allows access, the system denies it by default (Deny by Default Policy).

ACLs can be role-based, condition-based, or script-based for advanced security configurations.

A. Application Configuration– This refers to application settings but does not control access to data.

B. Verbose Log– Logging helps in debugging but does not secure applications or restrict access.

D. Application Scope– Defines application boundaries but does not control data access permissions.

ServiceNow CSA Documentation: Access Control Rules (ACLs)

ServiceNow Security Best Practices: Security and Access Control

Why Access Control Rules are Important?How ACLs Work in ServiceNow?Incorrect Answer Choices Explanation:Official CSA Documentation Reference:

In ServiceNow,Import Setsallow administrators toimport and transform datafrom external sources into ServiceNow tables. The platform supports multiple file formats for importing data, includingXML, CSV, and Excel.

XML (Extensible Markup Language)

Used for structured data exchange between systems.

ServiceNow canimport XML filescontaining records formatted according to its schema.

CSV (Comma-Separated Values)

One of the most common formats for bulk data imports.

ServiceNow can processCSV filesand map them to target tables.

Excel (XLS/XLSX)

ServiceNow allows direct imports fromMicrosoft Excel spreadsheets.

Users can upload Excel files via the Import Set UI.

Supported Data Formats for Import Sets:

Import Data:The user uploads a supported file (XML, CSV, or Excel) into an Import Set table.

Mapping:The imported data is mapped to target tables using aTransform Map.

Transformation & Processing:Data is transformed, validated, and inserted into the correct destination tables.

How Import Sets Work in ServiceNow:

A. CSS, SOAP, and Excel→CSS is a styling language, and SOAP is a protocol, not a data format.

C. SOAP, REST, and XML→SOAP and REST areweb service protocols, not file formats used for import sets. XML is valid but alone is insufficient.

D. XML, SOAP, and CSS→SOAP and CSS are incorrect as they are not standard import file formats.

Why Other Options Are Incorrect:

ServiceNow Documentation:Importing Data into ServiceNow

CSA Exam Guide:Coverssupported data formats for Import Sets (XML, CSV, and Excel).

If a user reports that theycannot see certain modulesin theApplication Navigator, the best way to troubleshoot is toimpersonate the user. Impersonation allows an administrator to see exactly what the user seeswithout needing their password.

Click on your profile icon (top-right corner).

SelectImpersonate User.

Search for and select theuser’s name.

The instance will reload, and you will see the UI as the user experiences it.

Navigate to theApplication Navigatorand check for missing modules.

Once done, clickStop Impersonation.

Ensures security(no need to reset or look up passwords).

Speeds up troubleshootingby allowing admins to replicate user issues.

Helps verify role-based access permissions.

Steps to Impersonate a User in ServiceNow:Why is Impersonation Useful?

Incorrect Answer Choices Explanation:A. Look up their password, so you can login with their account

This is asecurity violationand not an acceptable practice.

B. Initiate a Connect Chat session

Chatting with the user can help gather information, but it does not allow you to see what they see.

C. Install the Bomgar plug-in

Bomgaris a remote support tool, but impersonation is thebuilt-inand recommended method for troubleshooting in ServiceNow.

E. Launch a NowChat window

NowChat is used forcustomer support and collaboration, not for verifying module visibility.

Impersonate Users in ServiceNow

User Roles and Permissions

Official CSA Documentation Reference:

InServiceNow,Visual Task Boards (VTBs)provide aKanban-style interfaceto manage and track work. There arethree main typesof Visual Task Boards, but " Feature " is notone of them.

Freeform Board (Valid Type)

Manually created boards wherecards can be moved freelywithout predefined conditions.

Users canadd and organize tasks as needed.

Example: Personal task management.

Guided Board (Valid Type)

Createdfrom a list viewandlinked to a ServiceNow table(e.g., Incident, Change, Task).

Cards on the boardautomatically updatebased on conditions.

Example: Managing Incidents or Change Requests.

Flexible Board (Valid Type)

Similar toGuided Boards, but allows users tomanually reordertasks within lanes.

Offers moreflexibilitywhile still being linked to a data source.

Example: Sprint Planning or ITSM Workflows.

" Feature " is NOT a Visual Task Board type in ServiceNow.

ServiceNow does use the term " Feature " in Agile Development (for tracking high-level product functionalities), but it is not related to VTBs.

Types of Visual Task Boards in ServiceNow:Why is " Feature " Incorrect?

Why Other Options Are Correct?Guided, Flexible, and Freeformare thethree valid typesof Visual Task Boards in ServiceNow.

Visual Task Boards Overview

ServiceNow Visual Task Boards

Types of Visual Task Boards

Creating and Using VTBs

References from ServiceNow CSA Documentation:

TheCommon Services Data Model (CSDM)is a standardized framework within ServiceNow that provides a shared set of service-related definitions across ServiceNow products and the platform. It ensures consistency inservice reporting, CMDB structure, and configuration strategies, enabling organizations to achieve awell-structured, scalable, and maintainable Configuration Management Database (CMDB).

Why is the Answer A. Common Services Data Model (CSDM)?The statements in the question directly align with the objectives of CSDM:

" A standard and shared set of service-related definitions across ServiceNow products and platform that will enable and support true service level reporting. "

CSDM provides a structured framework toalign services, applications, and infrastructurein a way that supports consistent reporting and governance.

It enablesaccurate service reportingby defining standardized relationships between services, applications, and technical components in the CMDB.

" A CMDB framework across our products and platform that will enable and support multiple configuration strategies. "

CSDM provides astructured CMDB frameworkthat definesbest practices for data organization and relationships within the CMDB.

It supports multiple configuration strategies, such asapplication-centric, service-centric, and infrastructure-centric approaches.

B. Information Technology Service Management (ITSM):

ITSM refers toprocesses for managing IT services, such as Incident, Problem, Change, and Service Request Management.

While ITSM benefits from CSDM, itdoes not define a structured CMDB frameworklike CSDM does.

C. Configuration Management Database (CMDB):

CMDB is a database that stores configuration items (CIs) and their relationships.

CSDMprovides structure and best practicesfor CMDB but is not the same as CMDB itself.

D. Information Technology Infrastructure Library (ITIL):

ITIL is aset of best practicesfor IT service management.

It provides general guidance onservice management and CMDB usage, butit is not a ServiceNow-specific frameworklike CSDM.

ServiceNow Common Services Data Model (CSDM) Overview:ServiceNow Documentation

CSDM and CMDB Best Practices Guide(ServiceNow Community and Knowledge Base)

CMDB and ServiceNow Data Model Best Practices

Why Not the Other Options?References from the Certified System Administrator (CSA) Official Documentation:CSDM is critical forensuring a structured and governed CMDB, enabling service visibility, and supporting ITSM and ITOM processes effectively.

AnAccess Control rule (ACL)in ServiceNow defineswho can access dataandwhat actions they can performon that data. Each ACL consists of three primary components:

Object being secured– The specific table, field, or record that the rule applies to.

Operation– The type of action that is being secured (e.g., Read, Write, Create, Delete).

Permissions required– The conditions, roles, or scripts that determine whether access is granted.

ACLs evaluatewhether a user has permissionto access a specific table, field, or action.

Thesecurity rules are processed from most specific to least specific(e.g., field-level > table-level).

Permissions can be granted based onroles, conditions, or custom scriptsusing GlideSystem (gs).

A. Groups, Conditional Expressions, and Workflows(Incorrect)

ACLs do not manageworkflowsor directly control group assignments.

B. Table Schema, CRUD, and User Authentication(Incorrect)

CRUD (Create, Read, Update, Delete) permissions are controlled by ACLs, butUser Authenticationis managed separately through login policies (LDAP, SSO, etc.).

D. security_admin(Incorrect)

security_adminis aspecial elevated rolerequired to modify security settings, but it is not what an ACL specifies.

Access Control Rules Overview:https://docs.servicenow.com/en-US/bundle/utah-platform-security/page/administer/security/concept/access-control-rules.html

Configuring ACLs in ServiceNow:https://docs.servicenow.com/en-US/bundle/utah-platform-security/page/administer/security/task/t_CreateOrModifyAnAccessControl.html

How ACLs Work in ServiceNow:Explanation of Incorrect Options:Official References from Certified System Administrator (CSA) Documentation:

Update Setsin ServiceNow are used tocapture configuration changesso they can be moved between instances (e.g., from development to production). However,new records, new groups, and modified Configuration Items (CIs) are not included in Update Setsby default because they are considereddata, not configuration changes.

New Records→ Data records (e.g., Incidents, Users, Groups) are not part of an Update Set.

New Groups→ Groups are data elements (stored in thesys_user_grouptable) and arenot includedin Update Sets.

Modified Configuration Items (CIs)→ CIs belong to theConfiguration Management Database (CMDB), and changes to CIs are considereddata, not configuration changes.

UI Policies, Business Rules, Client Scripts, Workflows, Forms, and Tables

Changes to system configuration (not transactional data)

Breakdown of Each Element:What is Captured in an Update Set?

Why " B. They are not captured in an Update Set " is Correct:New records, groups, and modified CIs are considered data, and Update Sets do not track data by default.

A. They are included in an Update Set→Incorrect because Update Setsdo not track data recordslike CIs, groups, or user records.

C. They are customizations→Customizations refer toconfiguration changes, but records and CIs are considereddata, not customizations.

D. They do not have anything in common→All three (new records, groups, and CIs) aredataelements, meaning they share the characteristic ofnot being included in Update Sets.

Why Other Options Are Incorrect:

ServiceNow Documentation:Update Sets and What They Capture

CSA Exam Guide:Coverswhat is and is not included in Update Sets.

Reference from CSA Documentation:Thus, the correct answer is:

B. They are not captured in an Update Set

In ServiceNow,Business Rulesare server-side scripts that executeat specific timesrelative to database operations. The " When " settingdetermineswhenthe Business Rule runs in relation to a record action (Insert, Update, Delete, Query).

Why is Option A Correct?Before

Executesbeforea record is saved to the database.

Used tovalidate data, modify values, or prevent an action(e.g., stopping an invalid update).

After

Executesaftera record is inserted, updated, or deleted.

Commonly used fortriggering notificationsor creating related records.

Async (Asynchronous)

Runsaftera database operation but executes inthe background.

Ideal forlong-running or performance-heavy tasks(e.g., integrating with external systems).

Display

Executesbefore a form loads, allowing modifications to fieldsbefore they are displayedto the user.

Typically used forpre-filling form fieldsbased on user roles or conditions.

Why Are the Other Options Incorrect?B. Prior to, Synchronous, on Update

" Prior to " is not a valid Business Rule execution timing.

" Synchronous " is a general term but isnot a specific execution timing optionin Business Rules.

" on Update " is a database operation,not an execution timing.

C. Insert, Update, Delete, Query

These aredatabase operationsthat trigger Business Rules,not execution timings.

Execution timing determineswhen(before, after, etc.), while these determinewhat triggers it.

D. Before, Synchronous, Scheduled Job, View

" Synchronous " is not a Business Rule timing option.

" Scheduled Job " refers toScheduled Jobs(not Business Rules).

" View " is a UI-related concept,not a Business Rule execution timing.

ServiceNow Business Rules - How They Work

ServiceNow Best Practices - Business Rule Execution Timing

ServiceNow Developer Documentation - Before, After, Async, and Display Business Rules

References to Official Certified System Administrator (CSA) Documentation: