Pass the ServiceNow Certified System Administrator CSA Questions and answers with CertsForce

Dot Walkingis a ServiceNow feature that allows you to access and includedata from related tableswhen creating reports, conditions, scripts, and business rules.

When working with records, each table has fields that may reference another table (e.g., anIncidentrecord has an " Opened by " field that references theUsertable).

Dot Walkingallows you to traverse these relationships by using adot (.) notationto pull in data from related tables.

Example: If you want toinclude the email address of the user who created an incident, you can reference it as:

How Dot Walking Works:CopyEdit

incident.opened_by.email

This is useful forreportingwhen you need to include data from multiple related tables without needing custom joins.

A. SQL→ Incorrect. ServiceNow does not use direct SQL queries for reports. It relies on GlideRecord and Dot Walking instead.

C. Outer Join→ Incorrect. ServiceNow does not provide traditional SQL joins for reports. Instead, it usesDot Walking and Database Views.

D. Joins→ Incorrect. While Database Views allow for joins,Dot Walking is the primary method used to include related table data in reports.

Moving configuration changes between ServiceNow instances (e.g., from Development to Test) involves a strict lifecycle using Update Sets . 13 The correct standard operating procedure to apply a remote update set is Retrieve, Preview, Commit .

1. Retrieve (The First Step):

Before you can do anything, the target instance (e.g., Production) must fetch the completed update set from the source instance (e.g., Development).

Action: You connect to the source instance and click " Retrieve Completed Update Sets. " This pulls the XML file into the sys_remote_update_set table on the target instance. The state becomes Previewed or Loaded .

2. Preview (The Validation Step):

Once retrieved, you must validate the data before committing it to the database.

Action: You select the retrieved update set and click Preview Update Set .

Purpose: This checks for potential conflicts (e.g., trying to update a record that doesn ' t exist or has been modified locally). You must resolve all errors before proceeding.

3. Commit (The Application Step):

After the preview is successful (no errors), the changes are ready to be written to the system.

Action: Click Commit Update Set .

Result: The system writes the changes to the local tables/database. The Update Set state changes to Committed .

Why the other orders are wrong:

You cannot Preview before you Retrieve (you don ' t have the file yet).

You should never Commit before Previewing (this skips the safety check for conflicts).

When you create a new table in ServiceNow,best practices for the navigation paneensure that the table is properlyorganized, accessible, and followsrole-based visibility standards.

Modulesallow users tonavigate directly to the tablefrom the left navigation pane.

Settingrole-based accessensures that only authorized users can view or use the table.

Navigate toSystem Definition > Modules, and definewho can accessthe module usingroles.

This ensuresconsistencyin navigation and makes it easier for users to locate the table.

Example:If you create a table " Project Tasks " , theApplication Menushould also be named " Project Tasks " .

This followsServiceNow UI best practicesfor organization.

1. Specify which Roles can see the Module (Correct - C)2. Create an Application Menu with the Same Name as the Table Label (Correct - E)

A. Set the filter condition on the Application Menu →Incorrect

Application Menus do not requirefilter conditions; they are forgrouping related modulesunder a category.

B. Set the font style on both the Application Menu and the Module →Incorrect

Font stylesare not customizable in the navigation pane.

D. Specify which Roles can see the Application Menu →Incorrect

TheApplication Menuitself is usually visible to all users unless restricted bymodule-level roles.

The best practice is torestrict roles at the module level(Correct Answer: C).

F. Create a Module with the Plural of the Table Label →Incorrect

While it isa common practice, it isnot a strict best practice.

Example: If your table is " Incident " , the module is typically named " Incidents " , but it’s not a mandatory rule.

Why Other Options Are Incorrect?

Managing Application Menus and Modules

Creating Tables and Modules

Official ServiceNow Documentation Reference:

InServiceNow Knowledge Management,User Criteriais used to controlwho can view, contribute, or editknowledge articles and knowledge bases.

Scenario Requirements Breakdown:TheHR Knowledge Baseis already restricted to HR department members.

Anew knowledge articleneeds to be published in theQuarterly Reviewcategory.

OnlyHR Managersshould be able to read this specific article.

Best Approach (Correct Answer: D)Torestrict access to the article itself(not the entire knowledge base or category), we:

Open the knowledge article

Go to the " Can Read " field

Add a User Criteria that includes the " HR Manager " group

Publish the article

This ensures thatonly HR Managers can read this specific articlewhile the rest of the HR departmentcannotsee it.

A. On the Knowledge Base, add User Criteria with a Manager Can Read script to the Can Read list, publish article to any category

This would restrictall articlesin the knowledge base, not just the single article.

B. Add User Criteria for HR Manager Group on the Category’s Can Read list

User criteria canonly be applied at the Knowledge Base or Article level, not at the category level.

C. On the Knowledge Article, add an Access Control for HR Manager Group on the Can Read list, then publish article to any category

ACLs (Access Controls)are not used forKnowledge Article permissions. User Criteria is the correct method.

Managing User Criteria in Knowledge Management

Restricting Article Access

Why Other Options Are Incorrect?Official ServiceNow Documentation Reference:

The fundamental difference between a Client Script and a Business Rule in ServiceNow lies in where they execute and when. A Client Script runs on the client side — that is, in the user ' s browser — and is primarily used to control UI behavior, validate data before submission, and enhance user interaction with forms. Client Scripts can run at different stages (onLoad, onChange, onSubmit), but they always execute within the browser environment.

A Business Rule, on the other hand, runs on the server side and executes when records are inserted, updated, deleted, or queried in the database. Business Rules are used for enforcing data integrity, automating server-side logic, and integrating with other systems. They can be set to run before or after a database action (before insert, after update, etc.).

Therefore, the correct statement is that Client Scripts execute on the client and Business Rules execute on the server.

✔Access Control Lists (ACLs)in ServiceNow definewho can read, write, create, or delete recordsin the system. ACLs apply to tables, fields, and UI elements.

Option A (Role Assignment Rules)is incorrect because rolesgrantaccess but do not define granular security controls.

Option B (Scripted User Rules)is incorrect because there is no such feature in ServiceNow.

Option C (CRUD Rules)is incorrect becauseCRUD (Create, Read, Update, Delete) permissionsare enforced through ACLs.

Option D (User Authentication Rules)is incorrect because authentication rules controllogin access, not data access.

???? Reference:ServiceNow Security & Access Control – ACLs & Security Rules

InServiceNow Knowledge Management, several features help supportcontinuous improvementof knowledge articles by allowing users to providefeedback, ratings, and flag issues. These features ensure that knowledge remainsaccurate, relevant, and usefulover time.

B. Add Comments

Allows users to provide feedback directly on knowledge articles.

Comments help knowledge managers refine content based on user suggestions.

D. Tag as Helpful

Users can mark an article as helpful, indicating that it provided useful information.

Helps knowledge managers assess the article’s effectiveness.

E. Flag Article

Users can flag an article if they find inaccuracies or outdated content.

Flags alert knowledge managers to review and update the content.

F. Rate with Stars

Users can rate an article using astar-based rating system(e.g., 1 to 5 stars).

This helps knowledge managers understand which articles arehigh-quality vs. low-quality.

A. Submit KB Errata

No such built-in feature exists in ServiceNow Knowledge Management.

C. CC Click Frowning Icon

No such feature exists. ServiceNow provides a " Helpful " or " Flag " option instead.

In the ServiceNow Shared Responsibility Model, the customer acts as the data controller . The customer determines why personal information is collected and how that information is processed within its ServiceNow environment. This includes decisions concerning collection, storage, use, sharing, retention, archiving, and destruction of data.

ServiceNow ' s official Shared Responsibility Model specifically identifies the customer as the data controller and states that the customer is responsible for meeting applicable privacy-law requirements in jurisdictions where it operates and collects personal data. The customer also remains the owner of the data stored in its ServiceNow instances.

ServiceNow, by contrast, generally performs the role of the data processor in this relationship. ServiceNow provides the platform and maintains appropriate controls designed to protect customer data while assisting customers in satisfying their data-protection obligations. ServiceNow does not decide the business purposes for which the customer ' s personal data is collected or processed.

Datacenter partners may participate in the infrastructure used to deliver cloud services, but that infrastructure role does not make them the customer ' s data controller within the ServiceNow Shared Responsibility Model.

Therefore, the distinction to remember for CSA purposes is: Customer = Data Controller; ServiceNow = Data Processor.

Study Guide Reference/Topics: Security and Access Control → Shared Responsibility Model → Data Privacy → Data Controller → Data Processor → Customer and ServiceNow Responsibilities.

AData Policyin ServiceNow is used to enforcemandatory and read-only field conditionsfor data that isentered manually through forms or imported into the system.

Data Policies apply to data coming from external sources, such asimports, web services (API), and integrations.

If a field is set asmandatoryin a Data Policy, recordscannot be imported unless that field contains a value.

This ensuresdata integrityby preventing incomplete or invalid data from entering the system.

If an administrator configures a Data Policy to make the " Caller " fieldmandatoryon theIncidenttable, any imported incidentswithout a Caller value will be rejected.

How Data Policies Enforce Mandatory Data on Import:Example Scenario:

Why " True " is the Correct Answer:Data Policies enforce mandatory fields for both UI entry and imports.

Why " False " is Incorrect:If Data Policies didnotenforce mandatory fields on imports, incomplete records could enter the system, leading to data integrity issues.

ServiceNow Documentation:Data Policies

CSA Exam Guide:CoversData Policy enforcement for UI forms and imports.

Reference from CSA Documentation:Thus, the correct answer is:

A. True

AnUpdate Setin ServiceNow is a mechanism thattracks and packages customizations and configuration changesso they can be transferred between instances (e.g., fromDevelopmenttoTestorProduction).

It is primarily used ininstance migrationandchange management, ensuring that changes made in one environment can beapplied consistentlyin another.

Tracks Customizations– Records changes to system configurations, such as Business Rules, Client Scripts, UI Policies, and Workflows.

Facilitates Deployment– Enables controlled migration of changes from one ServiceNow instance to another.

Reduces Manual Effort– Instead of manually reconfiguring settings in different environments, administrators can package updates into asingle unit.

Version Control– Ensures that onlyintended changesare moved between instances.

Key Features of Update Sets:

Why the Correct Answer is A:A. An Update Set allows administrators to group a series of changes into a named set and then move this set as a unit to other systems(Correct)

This accurately describes the primary function of anUpdate Set.

Administratorsgroupmultiple changes into anUpdate Set, export it, and apply it to another instance.

Example Workflow:

Admin makes configuration changes(e.g., modifies a Business Rule, updates a Workflow).

Update Set captures those changesin a structured format.

The Update Set is exportedfrom the Development instance.

The Update Set is importedinto the Testing/Production instance and applied.

Why the Other Options Are Incorrect:B. By default, an Update Set includes customizations, Business Rules, and homepages(Incorrect)

Update Setsdo include customizations and Business Rules, but theydo notinclude homepages by default.

Dashboards and homepagesrequire a separate process usingsys_portal_page and sys_ui_page tables.

C. An Update Set is a group of customizations that is moved from Production to Development(Incorrect)

Update Sets are typically movedfrom Development to Test/Production, not the other way around.

Best practice is to make changes inDevelopment, test them inTest/UAT, and then deploy them toProduction.

D. By default, the changes included in an Update Set are visible only in the instance to which they are applied(Incorrect)

This is misleading becausean Update Set can be exported and applied to multiple instances.

Once an Update Set isimported and committed, its changes become active in that instance.

Best Practices for Using Update Sets:✔Always preview an Update Set before committing itto ensure it contains the correct changes.

✔Use Named Update Sets, not the default " Default Update Set, " to track changes effectively.

✔Ensure all related changes are included(e.g., dependencies such as script includes and tables).

✔Test Update Sets in a sub-production instancebefore applying them inProduction.

In ServiceNow,Core Tablesare foundational tables that are included by default in the platform. These tables store essential records used across various applications and modules.

???? Key Core Tables in ServiceNow:

Task (task)– A core table that serves as the parent for several other tables, such as Incident, Change, and Problem.

User (sys_user)– Stores all user records in the instance.

Incident (incident)– A child table oftask, used to track issues and requests reported by users.

???? Why Option C is Correct?

User (sys_user)– Essential for user management in ServiceNow.

Task (task)– A fundamental table that many other tables extend from.

Incident (incident)– A widely used table in IT Service Management (ITSM), which extends fromtask.

???? Incorrect Options Explained:

A. Configuration, Connect, Chat– Configuration is broad and does not refer to a single table, and Connect and Chat are part of ServiceNow’s communication framework but are notcoretables.

B. Team, Party, Awards– These tables do not exist in ServiceNow’s core platform.

D. Work, Caller, Timecard– WhileCallermay refer to users, andTimecardis a table used in time-tracking applications, these are not considered core tables.

???? Reference:

Creating Tables in ServiceNow

ServiceNow Task Table Documentation

Understanding Core Tables in ServiceNow

In Visualization Designer, used in the Performance Analytics and Reporting space of ServiceNow, the " Preview " button is used to execute the current visualization setup and show how the filters and conditions apply to your data. This allows the report builder to validate the design without finalizing or publishing it.

Try: Not an available action in Visualization Designer.

Execute: More related to scripting or automation contexts.

Run: Used in reports or scripts but not the specific action in Visualization Designer.

When an item isordered from the Service Catalog, two main records are created in ServiceNow:

sc_req_item(Requested Item - RITM)

Representseach individual itemin the order.

Tracks the approval process, fulfillment, and delivery for that specific item.

sc_task(Service Catalog Task - SCTASK)

Used toassign workto different fulfillment teams (e.g., IT, HR).

A singlesc_req_itemmay generate multiplesc_taskrecords.

A user orders aMacBook Profrom the Service Catalog.

ARequest (REQ#)is created.

ARequested Item (RITM#)is generated to track the MacBook order.

One or moreService Catalog Tasks (SCTASK#)are created for fulfillment (e.g., Procurement, Shipping).

C. A change record

Change records (chg_request) are created only if thecatalog item is linked to Change Management, which is not always the case.

D. An Incident record

Incidents (incident) are created forissues or break/fix cases, not for service requests.

E. A problem record

Problem records (problem) are used forroot cause analysis, not service catalog requests.

TheDependency Viewgraphically representsConfiguration Items (CIs)and their relationships in ServiceNow’sConfiguration Management Database (CMDB). It provides an interactive visualization of dependencies and relationships between infrastructure components, helping administrators understand system architecture.

Displays CI relationships in an interactive graphical format.

Helps identifyupstream and downstream dependencies(e.g., how a failed server affects dependent applications).

Can be accessed via theConfiguration Item (CI) formunder theRelated Linkssection.

Used inImpact Analysisfor Change Management and Incident Management.

A. Schema Map– Used to visualizetable relationships, not CI dependencies.

C. Dependency Map– Not a ServiceNow term; the correct term isDependency View.

D. Database View– Used to createvirtual tablescombining data from multiple tables but does not display CI dependencies graphically.