CSA Access Control Rules (ACLs) 3

Question 1

Which of the following ACL operations would you use to prevent users from deleting records in the Incident table?

Accepted Answer

delete

Answer

write

Answer

execute

Answer

create

Question 2

How does ACL inheritance work when a child table extends a parent table in ServiceNow?

Accepted Answer

Child tables inherit all ACLs from the parent table automatically

Answer

ACLs must be explicitly copied to child tables

Answer

Child tables only inherit read ACLs from parent tables

Answer

Inheritance is disabled by default and must be enabled per ACL

Question 3

What is the correct order of ACL evaluation specificity from most specific to least specific?

Accepted Answer

Field → Table → * (global)

Answer

Table → Field → * (global)

Answer

* (global) → Table → Field

Answer

Field → * (global) → Table

Question 4

An ACL has a role condition set to 'itil' and a script that checks if the record's state equals 1. When does access get granted?

Accepted Answer

When the user has the itil role AND the script returns true

Answer

When the user has the itil role OR the script returns true

Answer

When the user has the itil role only; the script is secondary

Answer

When the script returns true only; the role is optional

Question 5

Which system property controls whether ServiceNow logs ACL denials for debugging purposes?

Accepted Answer

glide.security.log.denials

Answer

com.glide.acl.debug

Answer

glide.acl.track_failures

Answer

security.access.debug_mode

Question 6

What is the purpose of the 'contains' condition type in an ACL's condition builder?

Accepted Answer

Verifies that a list field includes a particular choice value

Answer

Checks if a reference field contains a specific value anywhere in its hierarchy

Answer

Tests if a string field has a substring match

Answer

Validates that a field value exists in a specified table

Question 7

Which role is required by default to create or modify ACL rules in a production ServiceNow instance?

Accepted Answer

security_admin

Answer

itil

Answer

admin

Answer

acl_manager