Pass the ServiceNow Certified System Administrator CSA Questions and answers with CertsForce

InServiceNow Flow Designer,local flow variablesare accessed in theData Panel as data pills.

Local Flow Variables:

These aretemporary variablesthat storedataduring the execution of a flow.

Can be used topass valuesbetween actions within the same flow.

Accessing Local Variables in the Data Panel:

TheData Panelcontainsdata pills, which representstored values.

Flow variables appear asblue data pillsthat can bedragged and droppedinto different actions.

Example: A variable storingUser IDcan be dragged into an"Assign Task"action to assign a task dynamically.

Why Data Pills?

Data pills act astokensrepresenting values that update dynamically during flow execution.

Ensuresreusabilityandautomationacross multiple actions.

How Flow Variables Work in Flow Designer:Why Option D (As data pills) is Correct?Flow variables appear as "data pills" in the Data Panel, which can be dragged into flow actions.

Why Other Options Are Incorrect?A. As newly generated icons→ Incorrect

No "icons" are generated; flow variables are represented asdata pills.

B. As scratchpad variables→ Incorrect

Scratchpad variablesexist inBusiness Rules, butnot in Flow Designer.

C. As new tabs→ Incorrect

Flow variables donot appear as tabs; they appear in theData Panel as data pills.

ServiceNow Docs – Flow Designer: Using Data Pillshttps://docs.servicenow.com

ServiceNow Learning – Working with Flow Variables and Data Panel

ServiceNow Developer Portal – Flow Designer Best Practices

References from Certified System Administrator (CSA) Documentation:

Update Setsin ServiceNow are used tocapture configuration changesso they can be moved between instances (e.g., from development to production). However,new records, new groups, and modified Configuration Items (CIs) are not included in Update Setsby default because they are considereddata, not configuration changes.

New Records→ Data records (e.g., Incidents, Users, Groups) are not part of an Update Set.

New Groups→ Groups are data elements (stored in thesys_user_grouptable) and arenot includedin Update Sets.

Modified Configuration Items (CIs)→ CIs belong to theConfiguration Management Database (CMDB), and changes to CIs are considereddata, not configuration changes.

UI Policies, Business Rules, Client Scripts, Workflows, Forms, and Tables

Changes to system configuration (not transactional data)

Breakdown of Each Element:What is Captured in an Update Set?

Why "B. They are not captured in an Update Set" is Correct:New records, groups, and modified CIs are considered data, and Update Sets do not track data by default.

A. They are included in an Update Set→Incorrect because Update Setsdo not track data recordslike CIs, groups, or user records.

C. They are customizations→Customizations refer toconfiguration changes, but records and CIs are considereddata, not customizations.

D. They do not have anything in common→All three (new records, groups, and CIs) aredataelements, meaning they share the characteristic ofnot being included in Update Sets.

Why Other Options Are Incorrect:

ServiceNow Documentation:Update Sets and What They Capture

CSA Exam Guide:Coverswhat is and is not included in Update Sets.

Reference from CSA Documentation:Thus, the correct answer is:

B. They are not captured in an Update Set

TheCMDB Builderis the primary tool used inServiceNow’s Configuration Management Database (CMDB)for creating and managingdependencies between Configuration Items(CIs). It provides agraphical interfacethat allows administrators and CMDB managers to visualize and define relationships between CIs efficiently.

Visual Representation of CI Dependencies:

CMDB Builder provides agraphical interfacethat allows users tocreate, modify, and deleterelationships between Configuration Items (CIs).

It helps in identifyingimpact analysisandservice dependenciesby mapping CIs and their relationships.

Supports Complex CI Relationships:

Allows definingparent-child,peer, anddependencyrelationships between CIs.

Helps in ensuring the accuracy ofservice mapsandIT asset relationships.

Drag-and-Drop Functionality:

Users candrag and dropCIs onto the builder canvas andconnect them using predefined relationships.

Integration with CMDB Relationship Rules:

CMDB Builder adheres toCMDB relationship rulesto ensure that onlyvalidrelationships are created.

Impact and Root Cause Analysis:

Helps introubleshooting IT incidentsby showing thedependencies between services.

Useful inchange managementto predict potentialimpactson downstream services before making changes.

Key Features of CMDB Builder:

A. CI Relationship Editor:

TheCI Relationship Editorallows users toview and edit relationshipsbetween CIs in atabular formatbutdoes not provide a graphical dependency visualizationlike CMDB Builder.

It is moremanual and less interactivecompared to CMDB Builder.

C. CI Service Manager:

CI Service Manageris used for managingCI service mappingsbut isnot primarily a tool for creating dependencies between CIs.

It is more focused ondefining service-level relationshipsrather thanbuilding CMDB dependency models.

D. CI Class Manager:

CI Class Manageris used formanaging CI classes, attributes, and extending CMDB class structures.

It is not used forcreating dependencies between configuration items.

Why Other Options Are Incorrect:

ServiceNow CMDB Guide:CMDB Builder Overview

ServiceNow Best Practices for CMDB:CMDB Relationship Management

ServiceNow Admin Documentation:Understanding CMDB Dependency Management

References from the Certified System Administrator (CSA) Documentation:

Final Answer:CMDB Builder (Option B) is the correct answer, as it is the primary tool used to create, manage, and visualize dependencies between CIs in ServiceNow's CMDB.

In ServiceNow,UI PoliciesandData Policiesserve different but complementary purposes in controlling data behavior and enforcing business rules.

UI Policies are client-side rules that dynamically change form behavior based on user interactions.

They enable administrators to show/hide fields, make fields read-only, or set fields as mandatory dynamically.

UI Policies only apply when a user is interacting with a form through the ServiceNow UI (Client-side execution).

These policies do not enforce rules if data is added via an Import Set, API, or background script.

Data Policies enforce rulesserver-side, meaning they applyregardless of how data is entered(e.g., form submission, Import Sets, SOAP/REST API calls, or Business Rules).

They ensure data integrity by making fields mandatory, setting read-only properties, or applying other restrictions.

Data Policies can apply conditions globally, unlike UI Policies, which work only in the UI context.

UI Policies:Data Policies:Key Differences:Feature

UI Policy

Data Policy

Scope

Affects only forms (Client-side)

Affects all data entry points (Server-side)

Execution Location

Runs in the browser

Runs on the server

Triggers

User interaction on the form

Any data entry method (Forms, Import Sets, API, etc.)

Enforcement

Works only when using the UI

Applies even when data is added outside the UI

"Data Policies run regardless of how data is entered into ServiceNow"→Correct, because Data Policies enforce rules whether the data is entered via UI, API, Import Sets, or other means.

"UI Policies are used for form interactions"→Correct, because UI Policies apply only to client-side form behavior.

Option A: Incorrect. UI Policies are not set by web services; they are applied when interacting with forms.

Option B: Incorrect. While some Data Policies can be converted into UI Policies, the reverse is not true in all cases.

Option D: Incorrect. UI Policies and Data Policies operate independently, and Data Policies do not depend on UI Policies running first.

Why Option C is Correct:Why Other Options are Incorrect:

InServiceNow, administrators canreuse the same notification contentacross multiple channels (such asemail, SMS, and push notifications) by usingCommon Notification Content.

Consistency Across Channels

Ensures that the same message format is used acrossemail, SMS, and push notifications.

Easier Maintenance

Instead ofcreating separate contentfor each channel, administrators can manage all notification content from one place.

Dynamic Content

Supports variables and dynamic placeholders to customize messages based on recipient data.

A. Configure Default notification content

Incorrect: There is no "default notification content" feature in ServiceNow.

B. Enable Actionable notification content

Incorrect: Actionable notifications allow users totake actions directly from the notification, but they do not manage common content.

D. Set up Related notification content

Incorrect: No such feature as "Related notification content" exists in ServiceNow.

Key Features of Common Notification Content:Why Other Options Are Incorrect?

Common Notification Content Overview

ServiceNow Notification Management

Setting Up Common Notification Content

Creating Reusable Notification Content

References from ServiceNow CSA Documentation:

TheFlow Designermodule in ServiceNow is used to create and manageautomationsthat involve business logic such asapprovals, tasks, notifications, and integrations. It provides ano-code/low-codeenvironment where users can define automated workflows without needing to write scripts.

Automates Processes– Handles approvals, notifications, and task assignments.

No-Code Interface– Users can build workflows using adrag-and-dropinterface.

Replaces Legacy Workflows– Flow Designer is themodernalternative to Workflow Editor.

Integrates with Spokes– Can connect to other systems usingIntegration Hub.

Triggers– Define when a flow starts (e.g., record changes, schedules, API calls).

Actions– Define what happens (e.g., create a task, send an email, update a record).

Conditions– Add logic to control execution paths.

B. Process Automation > Flow Administration→ Used formanaging existing flows, not creating new ones.

C. Process Automation > Workflow Editor→ This is thelegacyworkflow automation tool, replaced by Flow Designer.

D. Process Automation > Process Flow→ No such module exists in ServiceNow.

E. Process Automation > Active Flows→ Displaysalready running flows, but does not allow new flow creation.

In ServiceNow, theApplication Navigatorallows users to browse and accessApplications and Modules. Toexpand or collapsethe Application Navigator, users interact with theApplication Menu icon (☰), commonly known as the "Hamburger" menu.

Locate thethree-line "Hamburger" icon (☰)at the top-left of theApplication Navigator.

Double-clickorsingle-clickto expand/collapse the list of applications and modules.

A. Star(Incorrect)

TheStar icon (⭐)representsFavorites, allowing users to mark frequently used modules for quick access.

B. Clock(Incorrect)

TheClock icon (⏱️)is forRecently Viewed Items, showing the user's most recent navigations.

D. Funnel(Incorrect)

TheFunnel icon (????)is afilterused to refine search results or application lists, not to expand/collapse the navigator.

Navigating the Application Menu:https://docs.servicenow.com/en-US/bundle/utah-platform-user-interface/page/administer/navigation-and-ui/concept/c_NavigationAndTheUserInterface.html

How to Expand/Collapse Applications & Modules:Explanation of Incorrect Options:Official References from Certified System Administrator (CSA) Documentation:

On theReports pagein ServiceNow, different sections allow users to seewhich reports are visibleto various audiences.

Why These Options Are Correct?C. My reports

Displaysreports created by the logged-in user.

These reports areprivateunless explicitly shared.

E. Dashboards

Dashboardsconsolidate multiple reports andmake them visible to specific audiences.

Users canshare dashboardswith groups or individuals.

F. Global

Global reportsare available toall users with reporting access.

These reports arenot restrictedto a specific user or group.

I. All

The"All" sectionlistsevery report the user has access to, including:

Personal reports

Shared reports

Global reports

Reports from dashboards

Why the Other Options Are Incorrect?A. Group

There isno "Group" sectionin the Reports page.

However, reports can beshared with groups, but there is no direct"Group" view.

B. Department

Departments do not determine report visibilityin the Reports page.

Report access is controlled byroles, users, and groups, not departments.

D. Team

Teams are not a standard report visibility categoryin ServiceNow.

Reports are shared atuser, role, and global levels, not by "Team."

G. Admin

There isno "Admin" sectionin the Reports page.

However,Admins can access all reportsvia the"All" section.

H. Analytics

Analytics is a separate modulein ServiceNow, primarily used forPerformance Analytics (PA)anddashboards.

It is not a standardreport visibility section.

J. Company

There isno "Company" sectionin the Reports page.

Reports can beshared at a global level, but not specifically by "Company."

ServiceNow Reports - Managing Visibility and Access

ServiceNow Reporting Guide - Sections of the Reports Page

ServiceNow Dashboards and Report Sharing Best Practices

References to Official Certified System Administrator (CSA) Documentation:

Access Control Rules (ACLs) are a fundamental security feature in ServiceNow that protect applications by identifying and restricting access to files and data. ACLs define which users or roles have permissions to create, read, write, or delete data within an application.

Understanding Access Control Rules (ACLs)ACLs in ServiceNow operate based on three key elements:

Object Type– Defines what is being secured (table-level or field-level access).

Operation– Specifies the type of access (Create, Read, Write, Delete, Execute, etc.).

Condition & Script– Determines when access is granted (role-based permissions or specific conditions).

Data Security:Ensures that only authorized users can access specific data.

Granular Access:Controls permissions at the table and field level.

Regulatory Compliance:Helps organizations maintain security standards and data protection laws.

ServiceNow applies ACLs from the most specific to the most general (Field-level → Table-level → Global-level).

If no ACL explicitly allows access, the system denies it by default (Deny by Default Policy).

ACLs can be role-based, condition-based, or script-based for advanced security configurations.

A. Application Configuration– This refers to application settings but does not control access to data.

B. Verbose Log– Logging helps in debugging but does not secure applications or restrict access.

D. Application Scope– Defines application boundaries but does not control data access permissions.

ServiceNow CSA Documentation: Access Control Rules (ACLs)

ServiceNow Security Best Practices: Security and Access Control

Why Access Control Rules are Important?How ACLs Work in ServiceNow?Incorrect Answer Choices Explanation:Official CSA Documentation Reference: