ServiceNow CSA Questions Answers

AUI Policyis the preferredno-codeapproach in ServiceNow to dynamically control themandatory, read-only, or visibilitystate of form fields based on specified conditions. Unlike Client Scripts, which require JavaScript coding, UI Policies provide aneasy-to-configure, rule-based solution.

They allow administrators tocontrol form behaviorwithout scripting.

They arefaster and more efficientthan Client Scripts.

Theyrun on the client-side, meaning changes occur dynamically as users interact with the form.

Defineconditions(e.g., "Priority is High").

Setactions(e.g., make "Due Date" mandatory, read-only, or hidden).

Apply the UI Policy to the form automatically when the condition is met.

A. UI Action→ UI Actions create buttons, links, or context menu items; they do not control form fields.

B. Client Script→ While Client Scripts can achieve similar functionality, they require JavaScript coding, making them alow-coderather than ano-codesolution.

C. UI Script→ UI Scripts are reusable JavaScript libraries, not designed for controlling form fields.

D. UI Rule→ No such feature exists in ServiceNow.

In ServiceNow, asys_idis aunique 32-character identifier(UUID - Universally Unique Identifier) that is automatically assigned to every record in the system.

It isa unique 32-character alphanumeric string(e.g.,5137153cc611227c000bbd1bd8cd2005).

Every record in every table in ServiceNow has asys_idfield.

Thesys_id remains the same across instances if the record is transferred via an Update Set.

It helpsuniquely identifyrecords and is used in scripting, APIs, and database relationships.

In theIncident [incident]table, an incident record might have:

Number:INC0012345

sys_id:9d72f6141b122200d37a85e15b2d6fe6

Key Characteristics of sys_id:Example:

Thesys_id is always 32 characters long.

It is acritical part of the ServiceNow database structure.

Used forrelationships, APIs, scripting, and querying records.

Why "A. Unique 32-character identifier that is assigned to every record" is Correct?

B. A client-side Business Rule – Incorrect

Business Rulesdo not generate sys_ids; they control logic execution.

C. A server-side Business Rule – Incorrect

Business Rules are used for automation, but sys_id is a system-generated field.

D. Unique 64-character identifier that is assigned to every record – Incorrect

The correct length of sys_id is32 characters, not 64.

Explanation of Incorrect Options:

ServiceNow Docs: Understanding sys_id

ServiceNow CSA Study Guide – Database Architecture

ServiceNow Product Documentation: Unique Identifiers in ServiceNow

References from Certified System Administrator (CSA) Documentation:

AnAccess Control rule (ACL)in ServiceNow defineswho can access dataandwhat actions they can performon that data. Each ACL consists of three primary components:

Object being secured– The specific table, field, or record that the rule applies to.

Operation– The type of action that is being secured (e.g., Read, Write, Create, Delete).

Permissions required– The conditions, roles, or scripts that determine whether access is granted.

ACLs evaluatewhether a user has permissionto access a specific table, field, or action.

Thesecurity rules are processed from most specific to least specific(e.g., field-level > table-level).

Permissions can be granted based onroles, conditions, or custom scriptsusing GlideSystem (gs).

A. Groups, Conditional Expressions, and Workflows(Incorrect)

ACLs do not manageworkflowsor directly control group assignments.

B. Table Schema, CRUD, and User Authentication(Incorrect)

CRUD (Create, Read, Update, Delete) permissions are controlled by ACLs, butUser Authenticationis managed separately through login policies (LDAP, SSO, etc.).

D. security_admin(Incorrect)

security_adminis aspecial elevated rolerequired to modify security settings, but it is not what an ACL specifies.

Access Control Rules

Configuring ACLs in

How ACLs Work in ServiceNow:Explanation of Incorrect Options:Official References from Certified System Administrator (CSA) Documentation: