Pass the ServiceNow Certified System Administrator CSA Questions and answers with ExamsMirror

In ServiceNow,Business Rulesare server-side scripts that executeat specific timesrelative to database operations. The"When" settingdetermineswhenthe Business Rule runs in relation to a record action (Insert, Update, Delete, Query).

Why is Option A Correct?Before

Executesbeforea record is saved to the database.

Used tovalidate data, modify values, or prevent an action(e.g., stopping an invalid update).

After

Executesaftera record is inserted, updated, or deleted.

Commonly used fortriggering notificationsor creating related records.

Async (Asynchronous)

Runsaftera database operation but executes inthe background.

Ideal forlong-running or performance-heavy tasks(e.g., integrating with external systems).

Display

Executesbefore a form loads, allowing modifications to fieldsbefore they are displayedto the user.

Typically used forpre-filling form fieldsbased on user roles or conditions.

Why Are the Other Options Incorrect?B. Prior to, Synchronous, on Update

"Prior to"is not a valid Business Rule execution timing.

"Synchronous"is a general term but isnot a specific execution timing optionin Business Rules.

"on Update"is a database operation,not an execution timing.

C. Insert, Update, Delete, Query

These aredatabase operationsthat trigger Business Rules,not execution timings.

Execution timing determineswhen(before, after, etc.), while these determinewhat triggers it.

D. Before, Synchronous, Scheduled Job, View

"Synchronous"is not a Business Rule timing option.

"Scheduled Job"refers toScheduled Jobs(not Business Rules).

"View"is a UI-related concept,not a Business Rule execution timing.

ServiceNow Business Rules - How They Work

ServiceNow Best Practices - Business Rule Execution Timing

ServiceNow Developer Documentation - Before, After, Async, and Display Business Rules

References to Official Certified System Administrator (CSA) Documentation:

BothUI PoliciesandData Policiesare used to enforce rules on data in ServiceNow, but they work differently in terms ofwhere and howthey apply.

Key Differences Between UI Policies and Data Policies:Feature

UI Policy

Data Policy

Scope

Worksonly on formsin the user interface (UI)

Works onall data entry methods, including forms, imports, and web services

Execution

Runsclient-sidein the browser

Runsserver-sideon the database

Purpose

Dynamicallyshow/hide, make fields mandatory, or read-onlyon forms

Enforcesmandatory and read-only fieldsat thedatabase level

Applies to

Userinteractions on forms

All data sources(Forms, Import Sets, Web Services, API)

Conversion

Can be converted into Data Policies

Cannot be converted into UI Policies

Why "B. Data Policies run regardless of how data is entered into ServiceNow, while UI Policies are used for form interactions" is Correct:Data Policies apply to all data entry methods, ensuring data integrity no matter how the data enters ServiceNow.

UI Policies only apply to the user interface (forms)and dynamically modify field behavior in real-time.

A. Data Policies run only after UI Policies run successfully→UI Policies and Data Policies work independently and do not depend on each other.

C. Data Policies can be converted into UI Policies, but UI Policies cannot be converted into Data Policies→The opposite is true: UI Policies can be converted into Data Policies, but not the other way around.

D. Data Policies run when data is entered through the form, by an Import Set, or by Web Services, while UI Policies are set only by web services→UI Policies arenot related to web services; they only apply to form interactions.

Why Other Options Are Incorrect:

ServiceNow Documentation:UI Policies vs. Data Policies

CSA Exam Guide:CoversUI Policies and Data Policies differencesin form and system-wide data enforcement.

Reference from CSA Documentation:Thus, the correct answer is:

B. Data Policies run regardless of how data is entered into ServiceNow, while UI Policies are used for form interactions

InServiceNow, thepersonal_listrole allows users toadd or remove fields from a list viewwithout requiring full administrator privileges.

Modify List Layout (Columns & Fields)

Users canadd, remove, or rearrange columnsin list views.

Save Personal List Preferences

Customizations applyonly to the user, unless they have additional permissions to modify system-wide settings.

Does NOT Allow System-Wide Changes

Unlike theadminrole,personal_listonly affectspersonal viewsof lists, not global configurations.

A. personalize.control(Incorrect)

No such role exists in ServiceNow.

C. ui_page_admin(Incorrect)

This role allows users tomanage UI Pages, but it does not provide list customization permissions.

D. ui_action_admin(Incorrect)

This role is used tomanage UI Actions(buttons, links, and client-side scripts), not list view configurations.

Key Capabilities of thepersonal_listRole:Why Other Options Are Incorrect?

Role-Based List Customization

ServiceNow List Personalization

User Roles and Permissions

ServiceNow User Roles

References from ServiceNow CSA Documentation:

When youimpersonatea user in ServiceNow for testing, you temporarily assume their permissions and role-based access. Toreturn to your own user session, thebestway is toEnd Impersonation.

Click on theUser Menu (top right corner).

Select"End Impersonation".

You will immediately return to your original user session.

A. Turn your computer off and on again→ Unnecessary and does not affect session management.

B. Clear browser cache→ Cache clearing is not required; impersonation is session-based.

D. Log out and back in→ While this works, it isnot the bestmethod becauseEnd Impersonationis a faster and direct solution.

Update Setsin ServiceNow are used tocapture configuration changesso they can be moved between instances (e.g., from development to production). However,new records, new groups, and modified Configuration Items (CIs) are not included in Update Setsby default because they are considereddata, not configuration changes.

New Records→ Data records (e.g., Incidents, Users, Groups) are not part of an Update Set.

New Groups→ Groups are data elements (stored in thesys_user_grouptable) and arenot includedin Update Sets.

Modified Configuration Items (CIs)→ CIs belong to theConfiguration Management Database (CMDB), and changes to CIs are considereddata, not configuration changes.

UI Policies, Business Rules, Client Scripts, Workflows, Forms, and Tables

Changes to system configuration (not transactional data)

Breakdown of Each Element:What is Captured in an Update Set?

Why "B. They are not captured in an Update Set" is Correct:New records, groups, and modified CIs are considered data, and Update Sets do not track data by default.

A. They are included in an Update Set→Incorrect because Update Setsdo not track data recordslike CIs, groups, or user records.

C. They are customizations→Customizations refer toconfiguration changes, but records and CIs are considereddata, not customizations.

D. They do not have anything in common→All three (new records, groups, and CIs) aredataelements, meaning they share the characteristic ofnot being included in Update Sets.

Why Other Options Are Incorrect:

ServiceNow Documentation:Update Sets and What They Capture

CSA Exam Guide:Coverswhat is and is not included in Update Sets.

Reference from CSA Documentation:Thus, the correct answer is:

B. They are not captured in an Update Set

InServiceNow Incident Management,work notesare used to capturetechnical and internal updatesfor an incident. These notes arestored in the Activity Logwhenever the incident is saved.

TheWork Notesfield is used forinternal communicationamong support teams.

When an incident is updated and saved,all work notesareappended to the Activity Log(a complete history of the incident).

The Activity Log provides achronological recordof all changes, includingwork notes, field updates, and system-generated messages.

Understanding Work Notes and the Activity Log:Why Option A is Correct?"All Work Notes field text is recorded in the Activity Log"– This is correct because every time an incident is saved, the Work Notesare appended to the Activity Log.

Why Other Options Are Incorrect?B. Work Notes field text is overwritten each time work is logged→ Incorrect becauseWork Notes are appended, not overwritten. Previous work notes remain visible in the Activity Log.

C. Impact is calculated by adding Priority and Urgency→ Incorrect becauseImpact, Urgency, and Priorityare independent fields, thoughPriorityis determined based onImpact + Urgencyvia business rules.

D. Additional Comments are cleared and recorded in Work Notes→ Incorrect becauseAdditional Comments(for customer-facing communication) andWork Notes(for internal teams) areseparate fields. Additional Comments are not cleared upon save.

ServiceNow Docs – Incident Management: Work Notes and Activity Loghttps://docs.servicenow.com

ServiceNow Learning – Understanding the Incident Activity Stream

ServiceNow Best Practices – Internal vs. External Communication in Incidents

References from Certified System Administrator (CSA) Documentation:

In ServiceNow,Access Control Rules (ACLs)determine who cancreate, read, write, delete, or executerecords within a table. Each ACL rule evaluates three main permission requirements,all of which must be truefor the rule to apply. These requirements are:

TheConditions fieldin an ACL specifies predefined logic that must be met for the rule to apply.

Example: An ACL might specify that a record is only accessible if theStatefield is set to "Open".

Conditions areevaluated firstbefore checking roles or scripts.

ACLs can berestricted to users with specific roles.

If a user does not have the required role(s), the ACL denies access.

Example: Only users with the"itil"role can edit incidents.

If the ACL does not specify any role, all users may be eligible based on conditions and script evaluations.

ACL scripts provideadvanced conditional logicusingserver-side JavaScript.

Scripts allow complex rule evaluation, such as checking whether a user is the record’s creator.

Example: A script could restrict access to records wherecurrent.requested_for == gs.getUserID()(only allow users to see their own requests).

If a script is present in an ACL, it must returntruefor access to be granted.

Access control rules are only granted when all three evaluations return true.

Conditions act asfilters.

Roles definepermissions based on user roles.

Scripts allowadvanced access logic.

1. Conditions (A - Correct Answer)2. Roles (C - Correct Answer)3. Script (D - Correct Answer)Why "A. Conditions," "C. Roles," and "D. Script" are the Correct Answers?

B. Table – Incorrect

Access control appliesto specific tables, but defining a table itself is not one of the permission checks.

E. Table." – Incorrect

This is anincorrectly formatted optionand does not relate to access control evaluation.

F. Table.none – Incorrect

"Table.none" is not an evaluation factor in ACLs. Access control applies totable-level, field-level, and record-level, but "table.none" is not an access requirement.

Explanation of Incorrect Options:

ServiceNow Docs: Access Control Rules (ACLs) Overview

ServiceNow CSA Study Guide – Security and Access Control

ServiceNow Product Documentation: Evaluating ACLs and Permissions

References from Certified System Administrator (CSA) Documentation:

In ServiceNow, asys_idis aunique 32-character identifier(UUID - Universally Unique Identifier) that is automatically assigned to every record in the system.

It isa unique 32-character alphanumeric string(e.g.,5137153cc611227c000bbd1bd8cd2005).

Every record in every table in ServiceNow has asys_idfield.

Thesys_id remains the same across instances if the record is transferred via an Update Set.

It helpsuniquely identifyrecords and is used in scripting, APIs, and database relationships.

In theIncident [incident]table, an incident record might have:

Number:INC0012345

sys_id:9d72f6141b122200d37a85e15b2d6fe6

Key Characteristics of sys_id:Example:

Thesys_id is always 32 characters long.

It is acritical part of the ServiceNow database structure.

Used forrelationships, APIs, scripting, and querying records.

Why "A. Unique 32-character identifier that is assigned to every record" is Correct?

B. A client-side Business Rule – Incorrect

Business Rulesdo not generate sys_ids; they control logic execution.

C. A server-side Business Rule – Incorrect

Business Rules are used for automation, but sys_id is a system-generated field.

D. Unique 64-character identifier that is assigned to every record – Incorrect

The correct length of sys_id is32 characters, not 64.

Explanation of Incorrect Options:

ServiceNow Docs: Understanding sys_id

ServiceNow CSA Study Guide – Database Architecture

ServiceNow Product Documentation: Unique Identifiers in ServiceNow

References from Certified System Administrator (CSA) Documentation:

In ServiceNow,Priorityis achoice field, meaning it has predefined values (e.g., 1 - Critical, 2 - High, etc.). If a customer wants to change the values to displayP1, P2, P3, P4consistently across all tasks, you must modify thechoice list valuesfor the Priority field.

Right-click on the Priority fieldin the Incident form.

Select“Show Choices”from the context menu.

In theChoice List Entriestable, modify theLabelvalues to match the internal terminology (P1, P2, P3, P4).

Ensure that the changes applyto all Task-related tables(such as Incident, Change, and Problem).

The“Show Choices”option displays the choice list for that specific field, allowing modifications to the values displayed in the dropdown.

This ensures consistency across all records using thePriorityfield.

A. Configure Lists:Configures list views,not choice field values.

B. Show Options:Not a valid option in ServiceNow for modifying choice fields.

C. Configure Task:Configures the task table settings,not choice list values.

E. Show Choice List:Not a valid ServiceNow menu option.

F. Configure Options:Not a valid option in ServiceNow for modifying choice fields.

Modifying Choice Lists in ServiceNow:ServiceNow Docs

How to Customize Dropdown Fields in ServiceNow

Steps to Modify the Priority Field Choices:Why is the Correct Answer "Show Choices"?Why Not the Other Options?References from the Certified System Administrator (CSA) Official Documentation:Using“Show Choices”, administrators can updatechoice valueswhile preserving the existingbackend values, ensuring consistency in workflows and reports.

To translateService Catalog itemsinto multiple languages in ServiceNow, theTranslation Framework plugin (com.glide.translation_framework)must be activated. This plugin enablesautomatic translation of text fields, including:

Service Catalog items

Knowledge Base articles

Field labels

UI components

Providesmulti-language supportfor catalog items.

Usesmachine translation or manual translation mapping.

Works with theServiceNow Language Packsto provide localized experiences.

Key Features of the Translation Framework Plugin:

TheTranslation Framework plugin (com.glide.translation_framework)is specifically designed to supportmulti-language content translationfor the Service Catalog.

It allows translation of catalog item descriptions, labels, and options without custom scripting.

Why "B. Translation Framework Plugin" is the Correct Answer?

A. Localization Framework Plugin (com.glide.localization_framework) – Incorrect

This plugin helps withlocalization settingsbut is not specifically for catalog item translation.

C. Multiple Language Framework Plugin (com.glide.multiple.language_framework) – Incorrect

No such plugin exists in ServiceNow.

D. Language AI Framework Plugin (com.glide.language.ai_framework) – Incorrect

This is not a valid ServiceNow plugin.

Explanation of Incorrect Options:

ServiceNow Docs: Translation Framework Plugin

ServiceNow CSA Study Guide – Multi-language Support

ServiceNow Product Documentation: Translating Service Catalog Items

References from Certified System Administrator (CSA) Documentation:

In ServiceNow,UI PoliciesandData Policiesserve different but complementary purposes in controlling data behavior and enforcing business rules.

UI Policies are client-side rules that dynamically change form behavior based on user interactions.

They enable administrators to show/hide fields, make fields read-only, or set fields as mandatory dynamically.

UI Policies only apply when a user is interacting with a form through the ServiceNow UI (Client-side execution).

These policies do not enforce rules if data is added via an Import Set, API, or background script.

Data Policies enforce rulesserver-side, meaning they applyregardless of how data is entered(e.g., form submission, Import Sets, SOAP/REST API calls, or Business Rules).

They ensure data integrity by making fields mandatory, setting read-only properties, or applying other restrictions.

Data Policies can apply conditions globally, unlike UI Policies, which work only in the UI context.

UI Policies:Data Policies:Key Differences:Feature

UI Policy

Data Policy

Scope

Affects only forms (Client-side)

Affects all data entry points (Server-side)

Execution Location

Runs in the browser

Runs on the server

Triggers

User interaction on the form

Any data entry method (Forms, Import Sets, API, etc.)

Enforcement

Works only when using the UI

Applies even when data is added outside the UI

"Data Policies run regardless of how data is entered into ServiceNow"→Correct, because Data Policies enforce rules whether the data is entered via UI, API, Import Sets, or other means.

"UI Policies are used for form interactions"→Correct, because UI Policies apply only to client-side form behavior.

Option A: Incorrect. UI Policies are not set by web services; they are applied when interacting with forms.

Option B: Incorrect. While some Data Policies can be converted into UI Policies, the reverse is not true in all cases.

Option D: Incorrect. UI Policies and Data Policies operate independently, and Data Policies do not depend on UI Policies running first.

Why Option C is Correct:Why Other Options are Incorrect:

Thekey differencebetweenReportingandPerformance Analytics (PA)is how they handle data over time.

Showsreal-time datafrom tables.

Runs queries on dataat the momentthe report is generated.

Cannot analyze historical trendsunless data is manually stored.

Used forstatic reports, lists, charts, or dashboards.

Capturessnapshotsof data at scheduled intervals (e.g., daily, weekly).

Tracks trends and KPIs (Key Performance Indicators)over time.

Helps organizationsforecast and analyze historical patterns.

Used forbusiness intelligence and proactive decision-making.

ReportingPerformance Analytics (PA)

Incorrect Answer Choices Explanation:B. Performance Analytics can show trends; Reports cannot.

Reporting can show trends usingaggregated data(e.g., grouped by date), butPA is specifically designedfor tracking trends over time.

C. Reports can be run on a scheduled basis; Performance Analytics cannot.

BothReports and PA can be scheduledto run at regular intervals.

D. Performance Analytics data can be published to Dashboards; Reports cannot.

Reportscanbe published todashboards, just like Performance Analytics.

E. Performance Analytics shows KPIs; Reporting does not.

Reports candisplay KPIsusing calculated metrics and aggregations, butPA is optimizedfor KPI tracking over time.

Performance Analytics vs. Reporting

ServiceNow Reporting Overview

Official CSA Documentation Reference:

InServiceNow, anEventis a system-generatednotificationthatindicates an occurrence within the platform. Events are triggered automatically or manually whenspecific conditionsare met and can be used to initiatenotifications, business rules, workflows, or integrations.

Events Indicate That Something Has Happened

Example: When anIncident is assigned, an event like"incident.assigned"can be triggered.

These eventsdo not execute actions themselves, but theynotify other processesto take action.

Events Are Stored in the [sys_event] Table

TheEvent Log(System Policy > Events > Event Log) records all generated events.

Administrators can monitorwhat events were triggered, their sources, and timestamps.

Events Can Be Used for Notifications & Workflows

Example: An event"incident.closed"can be configured to send a"Thank You" emailto the requester.

Example: A custom event"task.overdue"can be used to trigger a workflow escalation.

Eventssignal that something has happened, allowing other processes (like email notifications or workflows) to react.

Theydo not execute actions themselvesbut notifyscripts, business rules, or workflows.

Key Characteristics of Events in ServiceNow:Why is "B. An Event is an indication to the ServiceNow processes that something has occurred" the Correct Answer?

A. "An Event is a trigger that has a direct response in the platform"→Incorrect

Events themselvesdo not trigger direct responses; they onlynotify the systemabout occurrences.

The system must beconfigured to respond to an event(e.g., via aBusiness Rule, Notification, or Script Action).

C. "An Event is an indicator that a Priority 1 (P1) Incident has been logged"→Incorrect

While ServiceNowcan generate an event when a P1 Incident is logged, events arenot limited to incidents.

Events apply toall ServiceNow processes(incidents, changes, tasks, etc.).

D. "An Event is a recognized, scheduled occurrence of a process"→Incorrect

Eventsare not scheduled; they aretriggered by system activities(e.g., record updates, conditions met).

Scheduled Jobs or Scheduled Scripts handletime-based automation, not events.

Why the Other Options Are Incorrect?

Navigate to:System Policy > Events > Event Log

Review the event records, including event names, sources, and timestamps.

Navigate to:System Policy > Events > Registryto see predefined event names.

UseEvent Registryto create new events that triggernotifications or workflows.

How to View and Use Events in ServiceNow?

ServiceNow Docs: Events in ServiceNowhttps://docs.servicenow.com/en-US/bundle/utah-platform-administration/page/administer/events/reference/r_Events.html

ServiceNow CSA Official Training Guide (Event Management & Notifications)

References from Certified System Administrator (CSA) Documentation:This confirms that"An Event is an indication to the ServiceNow processes that something has occurred"is the correct answer.

When creating acustom table in ServiceNow, the platform automatically assigns a table name prefixed with"u_"to differentiatecustomtables fromout-of-the-box (OOB) tables.

The default prefix"u_"is applied to allcustom global tables.

The table name follows the format:"u_" + [custom name].

Example:

If you create a table named"abc", the system assigns it the table name:u_abc.

All custom tables created by usersautomatically receive the "u_" prefix.

Prevents conflicts withServiceNow’s internal tables.

Ensurescustom tables are easy to identify.

Naming Convention for Custom Tables:Why "C. u_abc" is Correct?

A. snc_abc – Incorrect

"snc_" is not used for custom tables; it is reserved forinternal ServiceNow functionality.

B. abc – Incorrect

Custom tablesdo not use raw names; they always include a prefix (u_).

D. sys_abc – Incorrect

"sys_" is reserved forsystem tables(e.g.,sys_user,sys_db_object).

Explanation of Incorrect Options:

ServiceNow Docs: Creating Custom Tables

ServiceNow CSA Study Guide – Table Administration

ServiceNow Product Documentation: Understanding Table Naming Conventions

References from Certified System Administrator (CSA) Documentation:

If a user reports that theycannot see certain modulesin theApplication Navigator, the best way to troubleshoot is toimpersonate the user. Impersonation allows an administrator to see exactly what the user seeswithout needing their password.

Click on your profile icon (top-right corner).

SelectImpersonate User.

Search for and select theuser’s name.

The instance will reload, and you will see the UI as the user experiences it.

Navigate to theApplication Navigatorand check for missing modules.

Once done, clickStop Impersonation.

Ensures security(no need to reset or look up passwords).

Speeds up troubleshootingby allowing admins to replicate user issues.

Helps verify role-based access permissions.

Steps to Impersonate a User in ServiceNow:Why is Impersonation Useful?

Incorrect Answer Choices Explanation:A. Look up their password, so you can login with their account

This is asecurity violationand not an acceptable practice.

B. Initiate a Connect Chat session

Chatting with the user can help gather information, but it does not allow you to see what they see.

C. Install the Bomgar plug-in

Bomgaris a remote support tool, but impersonation is thebuilt-inand recommended method for troubleshooting in ServiceNow.

E. Launch a NowChat window

NowChat is used forcustomer support and collaboration, not for verifying module visibility.

Impersonate Users in ServiceNow

User Roles and Permissions

Official CSA Documentation Reference: