ServiceNow CSA - Certified System Administrator - User Interface Navigation Administration Configuration

By Marcus Chen · Updated May 25, 2026

Questions25
Passing Score75%
Format100% Multiple Choice
Sessions Logged581
Your progressLog in / Register to track times taken, best score, questions mastered, and coverage on this quiz.
Rating
Community rating 4.6 out of 5 from 32 ratings.
4.6 (32)

Topics covered

This quiz

Uncategorized25 (100%)

Uncategorized25 questions

Discussion

Log in to post a comment, reply, or expand a question.

Q-8754

Question Q-8754 A company requires that every Incident must have a CI…

2 comments · last active May 30, 2026

  • meteorknife · May 29, 4:36 PM

    CI required before In Progress = before business rule, setAbortAction(true) if cmdb_ci empty. Works for UI and API.

  • Scrappy12345 · May 30, 8:36 AM

    UI Policy on state change doesn't stop REST updates. SLA pause isn't state enforcement.

Q-8745

Question Q-8745 During an upgrade to a new ServiceNow version, a customization…

3 comments · last active May 29, 2026

  • gijoejane · May 27, 2:53 AM

    Upgrade 'skipped' = customer changed same OOB record baseline also changed. Review Upgrade History → merge or revert — nothing is deleted.

  • SuperBellV · May 27, 4:53 PM

    New admins panic on skip count — it's a reconciliation queue, not data loss.

  • mikibronx · May 29, 6:53 AM

    We document every skip in CAB notes before prod upgrade weekend.

Q-8736

Question Q-8736 A ServiceNow administrator needs to allow a group of users…

2 comments · last active May 22, 2026

  • nofapletsgo · May 21, 1:32 PM

    Read-only on incident = ACL with Read on table tied to custom role. itil role is full CRUD on ITSM — wrong for view-only.

    +2 votes
  • popeto84 · May 22, 12:32 AM

    Display business rule hides UI; ACL blocks data at platform. Security question always picks ACL.

Q-8740

Question Q-8740 A user reports that a list view for the Change…

2 comments · last active May 21, 2026

  • Lowzix · May 20, 10:04 PM

    Group default list layout: create named view via Configure > List Layout as admin, set as default through view selector — not personal list personalization.

  • CandyAndCyanide · May 21, 9:04 PM

    Impersonation is great for verifying what each role actually sees after you set the view.

Q-8738

Question Q-8738 An administrator notices that users can see a "Salary" field…

2 comments · last active May 19, 2026

  • missionoflove · May 18, 1:15 PM

    Salary on HR case — field-level ACL on read for hr_manager. UI Policy hides visually but data still hits browser/API without ACL.

  • brachyrhamphus · May 19, 6:15 AM

    Never delete dictionary fields in prod to 'hide' sensitive data. ACL is the control.

Q-8750

Question Q-8750 What is the purpose of the "Update Set" feature in…

2 comments · last active May 18, 2026

  • duther1 · May 17, 9:08 PM

    Update Sets capture CONFIG changes dev→test→prod — not transactional data. XML export/import is the promotion vehicle.

  • legalthrowawayphila · May 18, 5:08 AM

    Batch field update across records is NOT what Update Set means — common beginner trap.

Q-8747

Question Q-8747 An administrator wants to prevent users from submitting an Incident…

2 comments · last active May 17, 2026

  • Silver0123 · May 17, 4:01 AM

    Short description mandatory: UI Policy works in UI only. Data Policy enforces on REST/import too — exam picks D (both, C preferred for API).

    +2 votes
  • missionoflove · May 17, 11:01 PM

    onSubmit client script can block submit but won't stop integration inserts — know the layers.

Q-8752

Question Q-8752 An organization wants to create a structured "IT Help" service…

2 comments · last active May 16, 2026

  • millbilliken · May 15, 4:42 PM

    Catalog visibility by department = User Criteria on Available For field. Purpose-built for sc_cat_item audience, cleaner than ACL hacks.

  • lisadaniellee · May 16, 5:42 PM

    Separate catalogs per dept is operational nightmare at 15 items — criteria scales better.

Q-8749

Question Q-8749 A user complains that when they open an incident assigned…

2 comments · last active May 15, 2026

  • Nutmegh · May 14, 6:46 PM

    itil user can view but not edit — check write ACLs with conditions (assigned to, state, group). Resolved/closed can be read-only too but ACL is 'most likely' per rationale.

  • lsdmeththrowaway · May 15, 3:46 PM

    Domain separation usually blocks view entirely, not edit-only weirdness.

Q-8757

Question Q-8757 A major incident has been resolved, and the team needs…

2 comments · last active May 15, 2026

  • luv2play · May 15, 4:17 AM

    PIR after major incident → Problem Management for structured RCA, not just resolution notes field.

  • eeyore49 · May 15, 2:17 PM

    KB article documents solution; Problem drives investigation workflow and known error linkage.

Q-8748

Question Q-8748 A ServiceNow instance needs to import user data nightly from…

2 comments · last active May 15, 2026

  • nicholaskno · May 14, 9:44 PM

    Nightly HR CSV from SFTP = Import Set + Transform Map + Scheduled Import. REST endpoint alone doesn't pull the file.

  • LondonPenPals · May 15, 9:44 AM

    IntegrationHub SFTP spoke is valid in real life but CSA baseline answer is the three-piece import stack.

Q-8759

Question Q-8759 A company has acquired a new subsidiary and needs to…

2 comments · last active May 11, 2026

  • sergiodxd · May 10, 12:07 AM

    Acquired subsidiary data isolation = Domain Separation. Scoped apps isolate code; RBAC alone doesn't partition tenant data.

  • gun_thusiast_merica · May 11, 4:07 AM

    Cross-domain access is grantable but default is hard separation per org entity.

Question catalog for this preview

Catalog listing of the 5 preview questions for this quiz.

Question 1

A developer needs to debug a server-side script in ServiceNow. Which tool allows them to run GlideRecord scripts interactively against live data without creating a formal script record?

Answer choices

  • A. JavaScript Debugger in the browser developer tools

  • B. Script Editor with syntax highlighting

  • C. Scripts - Background (System Definition > Scripts - Background) (Correct)

  • D. Business Rule Preview mode

Explanation

Scripts - Background (navigate to System Definition > Scripts - Background, or type `sys.scripts.do` in the navigator) is ServiceNow's interactive server-side scripting console. Developers can write and execute arbitrary server-side JavaScript including GlideRecord queries, GlideSystem calls, and other server APIs against live instance data immediately. The output is displayed in the console. This is the primary debugging tool for server-side logic. The browser's JavaScript Debugger (option A) only handles client-side scripts. Business rules don't have a "preview" mode for execution.

Question 2

A user complains that when they open an incident assigned to them, they can see the record but cannot update any fields. The user has the `itil` role. What is the MOST likely cause?

Answer choices

  • A. The incident is in "Resolved" or "Closed" state and is read-only by platform default

  • B. An ACL write rule is preventing the user from updating the record (Correct)

  • C. The user's browser cache is corrupted

  • D. The incident record belongs to a different domain in a multi-domain instance

Explanation

While options A and D are plausible in specific environments, the MOST likely cause in a standard scenario where a user with the `itil` role can VIEW but not EDIT is an ACL write restriction. ACLs can be configured to allow read but deny write based on conditions (e.g., only the assigned user can edit, or only certain states allow editing). The administrator should inspect the ACL rules for the Incident table's write permission. Option A is possible if state-based read-only is configured, but that would typically show a message. Domain separation (option D) would more likely prevent viewing entirely.

Question 3

A company has acquired a new subsidiary and needs to keep their ServiceNow data completely separate from the parent company's data while operating in the same instance. Which ServiceNow feature addresses this requirement?

Answer choices

  • A. Scoped Applications to isolate application logic

  • B. Domain Separation to partition data, processes, and configurations by organizational entity (Correct)

  • C. Update Sets to separate configuration changes

  • D. Role-based access control with custom roles for each entity

Explanation

Domain Separation is ServiceNow's enterprise feature for multi-tenant data and configuration isolation within a single instance. Each domain (parent company, subsidiary) maintains its own set of records, configurations, and processes. Users in one domain cannot see another domain's data unless explicitly granted cross-domain access. This is the correct architectural solution for acquired subsidiary isolation. Scoped Applications (option A) isolate application code and configuration but don't partition data. RBAC (option D) can restrict access but doesn't provide true data partitioning. Domain Separation is specifically designed for this organizational segmentation requirement.

Question 4

A manager wants a report that shows the number of open incidents grouped by priority and assignment group, refreshed every morning at 8 AM and emailed to her team. Which combination of ServiceNow features accomplishes this?

Answer choices

  • A. A performance analytics widget on a dashboard, manually shared each day

  • B. A report with appropriate grouping conditions, saved and added to a Scheduled Report that sends via email (Correct)

  • C. A list view exported to Excel manually each morning

  • D. A gauge widget that displays live counts without email capability

Explanation

ServiceNow Reports can be created with group-by conditions (Priority, Assignment Group) and filtered for open state. Once saved, reports can be added to Scheduled Reports (under Reports > Scheduled) which run on a defined schedule (daily at 8 AM) and automatically email the output to specified recipients. Performance Analytics widgets require a separate PA license and are for trend analysis over time. Manual exports do not meet the automation requirement.

Question 5

An administrator wants to prevent users from submitting an Incident form if the "Short Description" field is empty. What is the CORRECT way to enforce this?

Answer choices

  • A. Create a UI Policy that makes the field mandatory (required)

  • B. Create a Client Script of type "onSubmit" that checks the field value and returns false if empty

  • C. Add a Data Policy that marks the Short Description field as mandatory

  • D. Both A and C are correct but C is preferred for API/import enforcement (Correct)

Explanation

UI Policies enforce mandatory fields in the browser UI—they prevent form submission visually. However, UI Policies only affect the Service Portal or desktop UI and don't apply to API calls or data imports. Data Policies apply across all ingestion paths including REST API, imports, and direct database operations. For comprehensive enforcement, Data Policies are preferred. In practice, many organizations use both: UI Policy for user-friendly real-time feedback and Data Policy for platform-wide enforcement. The question specifically says "prevent users from submitting"—both approaches work, but Data Policy is architecturally superior.