In ServiceNow, ataskis a record that represents work that needs to be completed. It follows a lifecycle where it is:

Created– A task is generated, either manually or automatically (e.g., an incident, change request, or problem record).

Worked Upon– Users perform necessary actions, update statuses, and progress the task towards resolution.

Closed– Once completed, the task reaches a closed state, indicating that no further action is needed.

Tasks in ServiceNow are derived from theTask [task]table.

Common task-based records includeIncidents, Change Requests, Problems, and Service Requests.

Tasks follow a defined workflow and state transitions (e.g., New → Work in Progress → Resolved → Closed).

Key Features of a Task:

A. Report:

A report is a visualization of data and does not follow a lifecycle involving work or closure.

B. Workflow:

A workflow definesprocess automationand the movement of tasks, but it is not something that gets " worked upon " directly like a task.

C. Event:

Events are system-generated triggers that notify or automate actions, but they do not have a structured lifecycle like a task.

Why Other Options Are Incorrect:

ServiceNow Documentation:Task Management in ServiceNow

CSA Exam Guide:Coverstask recordsas fundamental entities that go through a lifecycle.

Reference from CSA Documentation:Thus, the correct answer isD. Task.

InServiceNow,Access Control Rules (ACLs)define thepermissionsrequired for users to interact with records, fields, or UI actions. ACLs are enforced at thedatabase leveland are evaluatedbefore granting accessto a user.

Access Control rules can be configured usingthree primary permission requirements:

Rolesdefine aset of permissionsassigned to users.

Access Control rules canrequire users to have a specific role(e.g.,admin,itil,catalog_admin) to perform an action on a table, field, or record.

Example:

A rule might state:Only users with theitilrole can read theIncidenttable.

Conditional expressionsallow access based on a specified condition.

These conditions areevaluated at runtime, and access is granted if they are met.

Example:

A condition could be: " Allow access if the record ' s ' State ' field is ' New ' " .

This would mean that users can only modify records if their state is " New " .

Scriptsallow advanced, custom logic to determine access.

ACLs supportserver-side scripts(written in JavaScript) that use thegs.hasRole(),currentobject, or other logic to evaluate whether a user should have access.

Example:

1. Roles (Correct -)2. Conditional Expressions (Correct -)3. Scripts (Correct -)javascript

CopyEdit

// Allow access only if the user is the requester of the record

answer = current.requested_for== gs.getUserID();

Scripts provideflexibilityby allowing complex access conditions beyond simple roles or expressions.

C. Assignment Rules(Incorrect)

Assignment Rulesare used toautomatically assign recordsto users or groups based on conditions.

They do not defineaccess control permissions.

E. User Criteria(Incorrect)

User Criteriais used inService CatalogandKnowledge Base (KB)to control access to catalog items or knowledge articles.

It isnot usedfor ACLs at the table/field level.

F. Groups(Incorrect)

Groupsare collections of users but cannot be directly used in ACLs.

Instead,roles(which are often assigned to groups) are used to define ACL permissions.

Why Other Options Are Incorrect?

ServiceNow Product Documentation - Access Control Rules

Access Control Rules Overview

Defining Access Control Rules

ServiceNow Security Model

Role-Based Access

Scripted ACLs

References from ServiceNow CSA Documentation:

TheBasic Configuration UI 16 modulein ServiceNow allows administrators to make basic UI customizations without needing to modify code or system properties manually. These settings apply to theoverall look and feelof the instance.

Banner Image (Option A)

Allows admins to change theServiceNow banner logoat the top of the page.

This is useful for branding the instance with a company’s logo.

Browser Tab Title (Option C)

Changes thetitle displayed on the browser tabwhen accessing the ServiceNow instance.

Helps customize the instance’s branding for different user environments (e.g., " IT Service Portal " instead of " ServiceNow " ).

System Date Format (Option D)

Allows admins toset the date formatdisplayed across the instance.

Helps standardize date display based on organizational or regional preferences (e.g.,MM/DD/YYYY vs. DD/MM/YYYY).

Customizable Elements via Basic Configuration UI 16:

Why Are the Other Options Incorrect?B. Record Number Format

Incorrect:The format of record numbers (such asINC0010001 for incidents) is controlled viaSystem Definition → Number MaintenanceandNOTin Basic Configuration UI 16.

E. Form Header Size

Incorrect:The form header size isnot directly customizable through Basic Configuration UI 16.

Form layout and styling changes are managed throughUI Policies, Client Scripts, or custom CSS configurations.

Reference from Certified System Administrator (CSA) Documentation:???? ServiceNow Docs – Basic Configuration UI 16

???? ServiceNow UI Customization Documentation

" Basic Configuration UI 16 provides a simple way to modifybanner images, browser titles, and system-wide date formats. "

Conclusion:The correct answers are:

A. Banner Image(Customizes the instance’s logo)

C. Browser Tab Title(Changes the browser tab text)

D. System Date Format(Sets the instance-wide date format)

???? Understanding Basic Configuration UI 16 is important for ServiceNow administratorsto quickly apply branding and instance-wide display settings without modifying system properties manually.

InServiceNow, theService Catalogis the primary module where users canorder services and productsoffered by various departments. The Service Catalog provides acentralized portalfor users to browse and requestIT, HR, Facilities, Finance, and other departmental servicesin a structured and automated way.

TheService Catalogis aself-service interfacewhere users can request predefined services, products, and resources.

It acts as adigital storefrontfor an organization ' s internal and external services.

Each service request follows aworkflowthat may includeapprovals, task assignments, and fulfillment processes.

Service Offerings:

Users can requesthardware (laptops, mobile devices, monitors), software, access permissions, or HR-related services (e.g., PTO requests, onboarding).

Structured Request Fulfillment:

Each request follows aworkflowwith assigned tasks to the appropriate fulfillment teams.

Example: A request for anew laptopis routed toIT Supportfor approval and processing.

Automation and Approvals:

Some catalog items requiremanagerial or departmental approvalsbefore fulfillment.

Example: Requesting access torestricted applicationsmight need approval from anIT admin.

Integration with Incident, Change, and Asset Management:

The Service Catalog can triggerchange requests, incidents, and asset updatesas part of the fulfillment process.

Access Through the Self-Service Portal:

Users can access theService Catalogvia theSelf-Service Portalfor quick and easy navigation.

What is the Service Catalog?Key Features of the Service Catalog:

Why Option A (Service Catalog) is Correct?TheService Catalogis the correct place toorder services and productsoffered by different departments in ServiceNow.

It provides astructured and automatedway to request, approve, and fulfill service requests.

Why Other Options Are Incorrect?B. Self-Service– TheSelf-Service Portalprovides access to the Service Catalog but is not where services are ordered directly.

C. Service Department– No such module exists in ServiceNow. Departments use theService Catalogto provide services.

D. Customer Service– TheCustomer Service Management (CSM)module is forexternal customers, not internal service requests.

ServiceNow Docs – Service Catalog Overviewhttps://docs.servicenow.com

ServiceNow Learning – Self-Service & Service Catalog Best Practices

References from Certified System Administrator (CSA) Documentation:

In ServiceNow,Tables & Columnsis the module that allows administrators to view and managefield settingsfor a table. This module provides a list of tables in the system along with details about theircolumns (fields), data types, and attributes.

Displaysall fields (columns)within a selected table.

Showsdata types, attributes, and configurationsof each field.

Allows admins toadd, modify, or removefields.

Provides details onrelationships between tables(e.g., reference fields, one-to-many relationships).

Navigate to:System Definition > Tables & Columns

Select a table to view itsfield settings.

B. Access Control – Incorrect

This module managessecurity rules (ACLs)for accessing records but does not display table field settings.

C. Columns and Fields – Incorrect

No such module exists in ServiceNow.

D. Tables and Fields – Incorrect

The correct module name is " Tables & Columns " , not " Tables and Fields " .

ServiceNow Docs: System Definition – Tables & Columns

ServiceNow CSA Study Guide – Table Administration

ServiceNow Product Documentation: Managing Fields in a Table

Key Features of the " Tables & Columns " Module:How to Access Tables & Columns in ServiceNow:Explanation of Incorrect Options:References from Certified System Administrator (CSA) Documentation:

In ServiceNow, theService Catalogis a structured collection of IT and business services that users can request. It is designed to provide a self-service experience for end-users, streamlining service requests and automating fulfillment processes. The main components of a Service Catalog include:

Record Producers– These are simplified forms that allow users to create records in various tables without requiring direct access to those tables. They enable users to submit requests or incidents through the catalog in a user-friendly manner.

Order Guides– These facilitate the ordering of multiple related catalog items in a single request. For example, when a new employee is onboarded, an order guide can group multiple items such as a laptop, software access, and a phone.

Catalog Items– These are the individual items or services that users can request through the Service Catalog. Examples include hardware (like laptops and monitors), software access, and other business services.

Option A (Order Guides, Exchange Rates, Calendars)–

Exchange RatesandCalendarsare not part of the Service Catalog framework in ServiceNow.

While Exchange Rates may be relevant in financial applications, they do not define the core components of the Service Catalog.

Calendars are used for scheduling, but they do not form part of the Service Catalog structure.

Option B (Order Guides, Catalog Items, and Interceptors)–

Interceptorsare used to guide users through form-based submissions, but they are not a fundamental component of the Service Catalog.

Order Guides and Catalog Items are correct, but the presence of Interceptors makes this option incorrect.

Option C (Catalog Items, Asset Contracts, Task Surveys)–

Asset Contractsrelate to IT Asset Management (ITAM) and are not core Service Catalog components.

Task Surveysare used for feedback collection but are not part of the core structure of a Service Catalog.

In computing and networking, aclientrefers to anapplication or system that accesses a remote service or another computer system (known as a server). The client-server model is a fundamental concept in computing, where:

A client sends requeststo a server.

The server processes the requestand sends back a response.

This architecture is widely used inweb applications, databases, and ServiceNowitself, whereclients interact with the ServiceNow platform (server) via a web browser or API requests.

In ServiceNow, theclienttypically refers toa user’s browser or an external system making requests via API calls.

Theserveris the ServiceNow instance, which processes requests and returns responses.

Client-side scripts(such asClient ScriptsorUI Policies) run on the user ' s browser, whileserver-side scripts(such as Business Rules and Script Includes) execute on the ServiceNow server.

How This Relates to ServiceNow:

A. Server→ A serverreceives requestsand processes them but is not the requesting entity.

C. Script→ A script is apiece of codethat executes certain actions but does not represent an entire system accessing a service.

D. Policies→ Policies definerules or behaviors(e.g., UI Policies, Data Policies) but do not access a remote service.

Why Other Options Are Incorrect:

ServiceNow Documentation:Client and Server in ServiceNow

CSA Exam Guide:CoversClient and Server architecturein ServiceNow.

Reference from CSA Documentation:

Themain UI components of the ServiceNow platformare designed to provide a structured and user-friendly experience for interacting with the system. These core UI elements include:

Banner Frame– Displays key information such as the logo, user profile, settings, and global search.

Application Navigator– Provides access to different modules and applications within ServiceNow.

Content Frame– Displays the main content area where users interact with forms, lists, and dashboards.

A. Banner Navigator– Incorrect terminology; the correct term isBanner Frame.

C. Application Frame– No such UI component exists in ServiceNow.

E. Content Menu– This is not a primary UI component; the correct term isContent Frame.

Why Other Options Are Incorrect:

ServiceNow Documentation:User Interface Overview

CSA Exam Guide:CoversBanner Frame, Application Navigator, and Content Frameas the three primary UI components.

Reference from CSA Documentation:Thus, the correct answer is:

B. Banner Frame, D. Application Navigator, F. Content Frame

ServiceNow supports multiple authentication methods to verify user identities before granting access to an instance. The three valid authentication methods from the given options are:

Local Database Authentication

This is the default authentication method used in ServiceNow.

User credentials (username and password) are stored in the ServiceNow database.

Authentication is handled directly by ServiceNow without relying on external identity providers.

This is useful for small implementations or instances where external authentication is not required.

LDAP (Lightweight Directory Access Protocol)

LDAP allows ServiceNow to integrate withcorporate directory services, such as Microsoft Active Directory, to authenticate users.

Users authenticate using theircorporate credentials, reducing the need to maintain separate user accounts in ServiceNow.

ServiceNow connects to an LDAP server and verifies credentials without storing passwords in the ServiceNow database.

SSO (Single Sign-On)

Single Sign-On enables users to log into ServiceNow using an external identity provider (IdP).

ServiceNow supports various SSO protocols, including:

SAML 2.0 (Security Assertion Markup Language)

OAuth 2.0

OpenID Connect

Kerberos

This allows users to authenticate once and gain access to multiple applications, improving security and user experience.

A. XML feed–

XML feeds are used for data exchange,not authentication.

ServiceNow can consume XML feeds for integrations but does not use XML feeds to authenticate users.

E. FTP authentication–

FTP (File Transfer Protocol) is used for transferring files between systems and isnot a valid authentication methodin ServiceNow.

ServiceNow Docs: User Authentication Methodshttps://docs.servicenow.com/en-US/bundle/utah-platform-administration/page/administer/security/concept/user-authentication-methods.html

ServiceNow CSA Official Training Guide (User Authentication & Security)

Why the Other Options Are Incorrect?References from Certified System Administrator (CSA) Documentation:These references confirm thatLocal Database, LDAP, and SSOare valid authentication methods in ServiceNow.

UI Policies and UI Actionsare both part of theServiceNow user interface customizationbut serve different purposes.

Used todynamically change form field behaviorsbased on specific conditions.

Canmake fields read-only, mandatory, or hiddenwithout requiring scripts.

Runson the client-side (browser)to improve performance and responsiveness.

Example:

If theCategoryisHardware, theSerial Numberfield becomesmandatory.

Used tocreate buttons, links, and context menu actions.

Can executescriptsto perform specific actions when clicked.

Runs on theserver-side or client-sidedepending on configuration.

Example:

A " Save " buttonthat becomesvisible only to users with a specific role.

UI Policy(not UI Action) is responsible for making fieldsread-only, mandatory, or hidden.

UI Action(not UI Policy) is responsible for making aSave button visiblefor specific users.

ServiceNow Docs: UI Policy Overviewhttps://docs.servicenow.com/en-US/bundle/utah-platform-administration/page/administer/form-administration/concept/c_UIPolicies.html

ServiceNow Docs: UI Action Overviewhttps://docs.servicenow.com/en-US/bundle/utah-platform-administration/page/administer/form-administration/concept/c_UIActions.html

UI Policy:UI Action:Why Option A is Incorrect?References from Certified System Administrator (CSA) Documentation:

Connect Chatis the real-time messaging tool in ServiceNow that allows logged-in users to communicate instantly within the platform. It provideslive, interactive conversationsbetween users, which is particularly useful for collaboration in IT Service Management (ITSM), HR, and other ServiceNow modules.

Primary Functionality:

Enablesreal-time conversationswithin ServiceNow.

Allows communication betweenindividual users, groups, and support teams.

Can be integrated into variousServiceNow applications(e.g., Incident Management, HR Service Delivery).

Where to Access It:

Users can accessConnect Chatfrom theConnect Sidebar(a chat window on the right side of the screen).

Available under:All → Connect Chat.

Key Features:

Supportsone-on-one and group conversations.

Integrates withwork notes and commentson ServiceNow records.

Providesnotifications and presence indicatorsto show who is online.

Understanding Connect Chat:

B. Now Messenger– Incorrect.

No such tool calledNow Messengerexists in ServiceNow.

C. User Presence– Incorrect.

User Presenceallows users to seewho is onlinein the system but does not provide chat functionality.

D. Comments– Incorrect.

Commentsare used to provideasynchronous updateson records but do not enablereal-time communication.

Explanation of Incorrect Answers:

ServiceNow Product Documentation → Connect Chat

ServiceNow CSA Study Guide → Collaboration Tools in ServiceNow

ServiceNow Knowledge Base → Connect Chat vs. User Presence

References from Certified System Administrator (CSA) Documentation:

InServiceNow,UI Policiesallow administrators todynamically control form fieldsbased on conditions without using scripts. With UI Policies, you can change thebehaviorof a field by making it:

Read-only→ The user canviewthe field butcannot edit it.

Mandatory→ The field becomesrequired, and the usermustfill it out before submitting the form.

Hidden→ The field isremoved from visibilityon the form.

Explanation of Each Option:A. Read-only–Correct

A UI Policy can make a fieldread-only, meaning users canseethe field butcannot modifyits value.

Example: A field likeRequest Number (REQ0001)is typicallyread-onlyafter submission.

B. Write-only–Incorrect

ServiceNowdoes nothave a " write-only " field setting in UI Policies.

If a field iseditable, users canboth read and write; if it’s hidden or read-only, writing is not possible.

C. Necessary–Incorrect

There isno " Necessary " field state in ServiceNow UI Policies.

If the intent is to make a field required, the correct term is " Mandatory " .

D. Mandatory–Correct

UI Policies can make a fieldmandatory, requiring the user toenter a valuebefore submitting the form.

Example: AnIncident Descriptionfield might be mandatory before an incident is submitted.

E. Empty–Incorrect

UI Policiescannot directly enforce an " empty " state. However, adefault valuecould be cleared using aclient script, but this isnot a UI Policy feature.

F. Hidden–Correct

UI Policies canhide a field, making it invisible on the form.

Example: A " Manager Approval " field may be hiddenuntila certain condition (e.g., request cost > $1000) is met.

Final Answer:Read-only

Mandatory

Hidden

ServiceNow Docs – UI Policies and UI Policy Actionshttps://docs.servicenow.com

ServiceNow Learning – Form Configuration & UI Policies

ServiceNow Developer Portal – Controlling Form Behavior with UI Policies

References from Certified System Administrator (CSA) Documentation:

In theServiceNow Service Catalog, aREQ numberrepresents aRequest (REQ) record, which functions as anorder numberfor a service request. When a user submits a request through the Service Catalog, the system generates aRequest (REQ) record, which tracks the overall order.

REQ (Request Record) – The Order Number

This is theparent recordthat represents the entire order/request submitted by the user.

It contains key details such as the requester, the total cost, approval status, and the overall request state.

Example:REQ0010023

RITM (Requested Item) – The Individual Catalog Item

Each item requested within a REQ has its ownRequested Item (RITM) record.

The RITM tracks the fulfillment of a specific item within the order.

Example:RITM0010456(a single laptop ordered in a request)

TASK (Catalog Task) – The Actions to Complete the Request

Catalog Tasks (TASK) are created under an RITM to handle specific fulfillment steps.

Multiple tasks can exist under a single RITM, assigned to different fulfillment teams.

Example:TASK0013456(a task assigned to IT Support to configure the laptop)

Breakdown of the Service Catalog Request Structure:

Why the Other Options Are Incorrect:B. The stage (Incorrect)

Thestageof a request is part of the request lifecycle (e.g., Approval, Fulfillment, Completed), but it is not represented by theREQ number.

C. The task to complete (Incorrect)

Atask to completeis represented by aCatalog Task (TASK), not theREQ number.

Tasks are specific actions assigned to fulfill an item request.

D. The individual item in the order (Incorrect)

Anindividual itemin a Service Catalog request is represented by aRequested Item (RITM), not theREQ number.

Example Scenario:A user submits a request for anew laptop and a software license:

REQ0012345→ Tracks the overall request (Order Number)

RITM0016789→ Laptop Request

TASK0018901→ IT configures the laptop

RITM0016790→ Software License Request

TASK0018902→ IT assigns the software license

In ServiceNow,record numbers are automatically generated and incrementedby the system. Each record created in a table receives a unique identifier based on a predefinednumber format.

Each table that extends the " task " or other core tables has a default numbering format.

Numbering is automatic, meaning users donothave to manually increment numbers.

The numbering format follows aprefix + incremental number(e.g., INC0001001 for incidents, CHG0002001 for changes).

The system ensuresunique sequential numberingwithin each table.

How Record Numbering Works:Configuring Auto-Numbering:Admins can customize numbering formats by modifying the " Number Maintenance " module:

Navigate toSystem Definition → Number Maintenance.

Select a table and configure theprefix, length, and starting number.

Changes apply automatically to new records created in that table.

Record numbersdo not require manual updates; the system handles it automatically.

Users can changeformat settings, butcannot manually increment individual record numbers.

ServiceNow prevents duplicate numbers to maintain data integrity.

Why " False " is the Correct Answer:

Manual incrementing isnotrequired or possible for individual records.

The platform automatically assigns the next sequential number to each record.

Why " True " is Incorrect:

ServiceNow Documentation:Number Maintenance

CSA Exam Guide:Coversautomatic record numbering and Number Maintenance settings.

Reference from CSA Documentation:Thus, the correct answer is:

B. False

InServiceNow,Access Control rules (ACLs)are used torestrict or grant accessto data. Each Access Control rule consists of:

Table-level (Row-Level) ACLs– Control access to the entire record (row).

Field-level ACLs– Control access to specific fields within a record.

Access Control rules are evaluated in a specific orderto determine whether a user has the necessary permissions to perform an action (Read, Write, Create, Delete, etc.).

If both a row-level and a field-level ACL exist for the same table, BOTH must evaluate to " true " before access is granted.

The system checks conditions, scripts, and roles defined in the ACLsto decide whether the user meets the access requirements.

Access Control Rule Evaluation Process:Why is Option C Correct?If both a row-level rule and a field-level rule exist, both must evaluate to " true " for a user to perform an action.

Row-Level ACLscheck if a user can access the record itself.

Field-Level ACLscheck if a user can access specific fields within that record.

If a user failseitherACL check, access is denied.

Why Are the Other Options Incorrect?A. " Rules are evaluated using roles. The role with the most permissions evaluates the rules first. "

Access Control rulesare not evaluated based on roles with the most permissions.

Roles are just one factorin ACL evaluation, along with conditions and scripts.

B. " If more than one rule applies to a row, the older rule is evaluated first. "

ServiceNow does not prioritize ACL rules based on their creation date.

Instead, ACLs follow a structured evaluation order (general-to-specific).

D. " Rules are evaluated from the general to the specific, so a table rule must be active to continue. "

This is partially true but misleading.

ServiceNow evaluates ACLs fromspecific to general(Field → Table).

However,a table-level rule does NOT need to be activefor a field-level ACL to be evaluated.

Reference from Certified System Administrator (CSA) Documentation:???? ServiceNow Docs – Access Control Rules (ACLs) Evaluation

???? ServiceNow ACL Evaluation Documentation

" If a field-level rule and a row-level rule exist,both must evaluate to truefor the operation to be allowed. "

Conclusion:The correct answer isC. If a row-level rule and a field-level rule exist, both rules must be true before an operation is allowed.

???? Understanding ACL rule evaluation is critical for managing security in ServiceNow, ensuring that users have the appropriate access while maintaining data integrity.