CSA Access Control Rules (ACLs) 3

Question 1

Which of the following ACL operations would you use to prevent users from deleting records in the Incident table?

Accepted Answer

delete

Answer

The 'delete' operation ACL controls whether users can remove records from a table.

Question 2

How does ACL inheritance work when a child table extends a parent table in ServiceNow?

Accepted Answer

Child tables inherit all ACLs from the parent table automatically

Answer

In ServiceNow, ACLs defined on a parent table are automatically inherited by all child (extended) tables unless overridden.

Question 3

What is the correct order of ACL evaluation specificity from most specific to least specific?

Accepted Answer

Field → Table → * (global)

Answer

ServiceNow evaluates ACLs from most specific (field-level) to least specific (table-level to global wildcard), applying the most specific matching rule.

Question 4

An ACL has a role condition set to 'itil' and a script that checks if the record's state equals 1. When does access get granted?

Accepted Answer

When the user has the itil role AND the script returns true

Answer

All conditions in an ACL (roles, conditions, and scripts) must pass simultaneously — they are evaluated with AND logic, not OR.

Question 5

Which system property controls whether ServiceNow logs ACL denials for debugging purposes?

Accepted Answer

glide.security.log.denials

Answer

The system property 'glide.security.log.denials' enables logging of ACL denial events, which appear in the system log for troubleshooting.

(CSA) ServiceNow System Administrator Certification Practice Test

(CSA) ServiceNow System Administrator Certification Practice Test

CSA Access Control Rules (ACLs) 3