Pass the ServiceNow Certified System Administrator CSA Questions and answers with CertsForce

Scripts that run in thebrowser (client-side)help controlUI behavior, form validation, and field interactionsin real-time without needing a server request.

Types of Client-Side Scripts in ServiceNow:Client Scripts

Run directly in the user's browser.

Used for form validation, auto-populating fields, or UI interactions.

Example:

javascript

CopyEdit

functiononLoad() {

g_form.setValue('priority','2');

}

UI Policies

Controlfield visibility, mandatory status, and read-only statedynamically.

Example: Ifcategory = Hardware, makeSerial Number field mandatory.

B. Access Control Scripts →Incorrect

Access Control Lists (ACLs)runserver-side, not in the browser.

C. Script Includes →Incorrect

Script Includesrunserver-sideand are used for reusable functions and API logic.

D. Business Rules →Incorrect

Business Rulesalso run on theserver, not in the browser.

Why Other Options Are Incorrect?

Client Scripts Overview

UI Policies in ServiceNow

Official ServiceNow Documentation Reference:

Toaccess reportsin ServiceNow, users navigate to:

????Reports > View / Run

Displaysall reports availableto the user.

Allowsrunning, modifying, and creating new reports(if permissions allow).

Users canfilter reports by category(e.g., incidents, requests, changes).

Key Features of "View / Run" Module:

B. Reports > Homepage →Incorrect

No such module named "Reports > Homepage."

C. Self-Service > My Reports →Incorrect

TheSelf-Service moduleis primarily for end users, not for accessing platform-wide reports.

D. Report > Overview →Incorrect

"Overview" providesreporting summariesbut does not list all available reports.

Why Other Options Are Incorrect?

Running and Managing Reports

Official ServiceNow Documentation Reference:

✔Access Control Lists (ACLs)in ServiceNow definewho can read, write, create, or delete recordsin the system. ACLs apply to tables, fields, and UI elements.

Option A (Role Assignment Rules)is incorrect because rolesgrantaccess but do not define granular security controls.

Option B (Scripted User Rules)is incorrect because there is no such feature in ServiceNow.

Option C (CRUD Rules)is incorrect becauseCRUD (Create, Read, Update, Delete) permissionsare enforced through ACLs.

Option D (User Authentication Rules)is incorrect because authentication rules controllogin access, not data access.

????Reference:ServiceNow Security & Access Control – ACLs & Security Rules

InServiceNow,Access Control Rules (ACLs)are used togrant or restrict permissionsfor performing actions on a table or field.

To allow a user with theitilrole tocreate Incident records, the correctAccess Control Rulemust:

Apply to theincidenttable

Grant the "create" operation

Be restricted to users with the "itil" role

Breaking Down the Correct ACL Configuration:ACL Field

Correct Value

Name

incident.None(applies to the table-level, not a field)

Operation

create(allows creating new records)

Role

itil(only users with the itil role can create incidents)

incident.None→Applies to the entire table(for record creation).

incident.*→Applies to all fieldsin the table (not needed for create operations).

Why is "incident.None" used instead of "incident.*"?

A. Name:incident”; Permission: write; Role: itilIncorrect– The "write" permissionallows editing existing records, butdoes not allow creating new ones.

B. Name:incident Any, Operation: write, Permission: itilIncorrect– There is no such name format"incident Any"in ACLs. Also, "write" does not allow record creation.

C. Name:incident.*; Operation: write; Permission: itilIncorrect– "incident.*" appliesto all fields in the table, but doesnot apply to record creation.

D. Name:incident None, Permission: create: Role: itilIncorrect– The correct format uses"Operation: create", not "Permission: create".

Incorrect Answer Choices Analysis:

ServiceNow Docs – Access Control Rules????How ACLs Work

ServiceNow Docs – Configuring ACLs for Tables and Fields????Table-Level vs Field-Level ACLs

Official ServiceNow Documentation References:

When using theData Pill Pickerin Flow Designer,dot-walkingis used to access fields inrelated tables.

The shortcut fordot-walkingin theData Pill Pickeris:????Ctrl<and Ctrl>

Dot-walkingallows users toaccess fields in referenced records.

For example, if you have anIncidentrecord with aCallerfield (which references thesys_usertable), you candot-walkto theCaller’s emailusing:

What is Dot-Walking?CopyEdit

incident.caller.email

This is useful whenbuilding conditions, flows, and reportsin ServiceNow.

A. Arrows– Arrow keys are used for navigation, but they do not support dot-walking.

B. Plus, Minus– These keys arenot used for dot-walkingin ServiceNow.

C. Ctrl C, Ctrl– These are copy-paste shortcuts, unrelated to dot-walking.

E. Shift F4, Shift F5– These do not have any function related to dot-walking.

ServiceNow Dot-Walking & Data Pill Picker

ServiceNow CSA Training Module:"Using Dot-Walking in Flow Designer and Reporting"

Why Other Answers Are Incorrect:References from Certified System Administrator (CSA) Official Documentation:

In ServiceNow,tablesfollow an inheritance model, where tables can be extended from other tables. The distinction betweenBase Class tablesandParent Class tablesis as follows:

Base Class Table:

ABase Class table is not extended from any other table.

It exists at the top level in the table hierarchy.

Example:Task [task],Configuration Item [cmdb_ci]are base tables.

Parent Class Table:

AParent Class table may be extended from another tablebut also has tables extending from it.

It acts as a bridge between the base table and other extended tables.

Example:Change Request [change_request]extends fromTask [task], makingTaskthe base class andChange Requesta parent class to other change-related tables.

A. Base Class tables always have tables extended from them, Parent tables do not have tables extended from them.

Incorrect because not all base tables have extensions.

Parent tablesdohave extended tables.

C. Extended tables can be extended from Parent tables or Base tables, but they cannot be extended from both.

Incorrect because extended tables caninheritfrom other extended tables in a multi-level hierarchy.

D. Extended tables are always extended from Parent tables, Extended tables are usually extended from Base tables.

Incorrect becauseextended tables can come from either Base or Parent tables, not just Parent tables.

Table Inheritance in ServiceNow

Extending Tables

Definitions:Why Other Options Are Incorrect?Official ServiceNow Documentation Reference:

To monitor which users are performing impersonations in a ServiceNow instance, administrators can activate thesystem propertyglide.sys.log_impersonation. When enabled, this property logs impersonation activities in the system logs, providing full traceability of who is impersonating whom.

Here’s how it works:

By default, impersonation is not loggedunless this system property is explicitly activated.

Once enabled, all impersonation activities are recordedin thesyslogtable (System Log > All), making it easy to track when and by whom impersonations were performed.

This helps in security audits and compliance tracking, ensuring that only authorized users impersonate others in the system.

????Steps to Enable Logging of Impersonations:

Navigate toSystem Definition > System Properties.

In the filter navigator, search forglide.sys.log_impersonation.

Set the value totrue.

Save the changes.

????Alternative Verification Methods:

Check logs manually: Navigate toSystem Logs > Alland filter logs bymessagecontaining"impersonation".

Audit the impersonation role assignments underSystem Security > Roles.

????Reference:

ServiceNow KB Article:KB0717055 – How to Log Impersonations

ServiceNow Docs: Logging and Monitoring in ServiceNow

Understanding Data Imports in ServiceNow:

When importing data into ServiceNow, you need to determine how incoming datamatches existing recordsto avoid duplication.

Coalescing fieldsare used to identify whether anincoming record already existsin the target table.

Why "Coalesce Fields" is the Correct Answer:

Coalescing means using specific fields as unique identifiersto determine if a record should beupdatedorinserted as a new record.

If a match is found based on the coalesce field, ServiceNowupdatesthe existing record.

If no match is found, anew record is inserted.

Why Other Answers Are Incorrect:

A. Match Fields→ Not an official ServiceNow term related to import sets. Matching is done through coalescing, but "Match Fields" is not the correct terminology.

C. Key Fields→ This is a general database term, but in ServiceNow, "Coalesce Fields" is the term used for identifying unique keys during imports.

D. Sys IDs→ TheSys IDis a unique identifier for each record in ServiceNow, but it is not used for coalescing unless explicitly set as the coalesce field.

Best Practice Solution:

Set asingleormultiplefields ascoalesce fieldsin theTransform Mapto ensure proper data deduplication.

Navigate toSystem Import Sets → Transform Maps, select the relevant transform map, and mark the coalescing fields.

When importing data into ServiceNow via anImport Set, the system determines whether to update existing records or create new ones based on theCoalescefield setting.

If noCoalesce Fieldis defined,ServiceNow treats every imported row as a new record.

The import process doesnotcheck for existing records, meaning no records in the target table are updated.

This can result induplicate entriesif the imported data includes records that already exist in the target table.

ACoalesce Fieldis used tomatchincoming data to existing records.

If a matching record is found, it is updated instead of inserting a new one.

If no matching record is found, a new record is created.

Behavior When No Coalesce Field is Specified:How Coalescing Works:Incorrect Answers Explanation:A.All rows are rejected from the import, as coalesce field is required

This is incorrect because the import does not require a coalesce field to proceed. The system will still import all rows.C.Duplicate rows are rejected from the import

Without a coalesce field, duplicates arenotrejected. Instead, every row is inserted as a new record, even if it already exists in the target table.D.All rows are treated as new records, but errors will be flagged in the import log

Errors are only flagged in cases ofdata mismatches, validation failures, or incorrect mappings, not just because coalescing is missing.

ServiceNow Documentation→ "Importing Data - Coalescing Best Practices"

ServiceNow Import Set Documentation→ "Understanding Import Set Behavior Without Coalescing"

References from Certified System Administrator (CSA) Documentation: