ServiceNow Certified Implementation Specialist – Service Provider (CIS-SP) — Questions and Answers

Question 1: What is the primary use case for Salesforce Big Objects?

Enabling real-time external data access
Storing and querying massive volumes of historical data (Correct answer)
Replacing standard objects with higher field limits
Creating hierarchical data structures

Correct answer: Storing and querying massive volumes of historical data

Big Objects are designed to store and query billions of records of historical or archival data within Salesforce.

Question 2: In SOSL (Salesforce Object Search Language), which keyword is used to specify which objects and fields to search?

RETURNING (Correct answer)
SELECT
FROM
IN

Correct answer: RETURNING

The RETURNING keyword in SOSL specifies which objects and fields should be included in the search results.

Question 3: A network administrator needs to allow Salesforce streaming API (CometD) through a corporate firewall. What must be ensured?

Port 8443 must be opened as an alternative HTTPS port
Port 80 must be open for long-polling HTTP connections
Port 443 must support persistent HTTPS connections without premature timeout (Correct answer)
The firewall must allow UDP traffic on port 443

Correct answer: Port 443 must support persistent HTTPS connections without premature timeout

Salesforce Streaming API uses long-polling over HTTPS on port 443, so firewalls must not terminate persistent connections prematurely.

Question 4: What is the maximum number of records that a single Apex SOQL query can return in a synchronous context?

10,000 records
1,000 records
50,000 records
100,000 records (Correct answer)

Correct answer: 100,000 records

The governor limit for records retrieved by a single SOQL query in Apex is 50,000, not 100,000 — but with QueryMore the total is 50,000 per transaction.

Question 5: Which algorithm design paradigm does Salesforce's chunking of records into batches of 200 in Batch Apex most closely resemble?

Backtracking
Greedy
Divide and Conquer (Correct answer)
Dynamic Programming

Correct answer: Divide and Conquer

Batch Apex divides a large dataset into smaller chunks processed independently, matching the Divide and Conquer paradigm.

Question 6: A company wants to restrict Salesforce login to office IP addresses only. Which Salesforce feature supports this requirement?

Permission Sets
Trusted IP Ranges on the Network Access settings page (Correct answer)
Login Flows
Profile-based time restrictions

Correct answer: Trusted IP Ranges on the Network Access settings page

Salesforce's Trusted IP Ranges feature under Network Access restricts login to specified IP address ranges.

Question 7: Which data structure supports O(1) average-case insertion, deletion, and lookup?

Linked List
Hash Table (Correct answer)
Sorted Array
Binary Search Tree

Correct answer: Hash Table

Hash tables achieve O(1) average-case performance for insert, delete, and lookup via direct index calculation.

Question 8: What is scope creep?

Uncontrolled expansion of project scope without corresponding adjustments (Correct answer)
A type of project risk assessment
The planned addition of new features
A normal part of every project

Correct answer: Uncontrolled expansion of project scope without corresponding adjustments

Scope creep occurs when additional requirements are added without adjusting timeline, budget, or resources, potentially jeopardizing the project.

Question 9: A healthcare payer wants to manage member appeals and grievances in Salesforce Health Cloud. Which approach best meets regulatory timelines for case resolution?

Custom Apex triggers to calculate deadlines
Reports and dashboards to monitor open cases
Milestones and Entitlements in Service Cloud to enforce SLA timelines (Correct answer)
Process Builder to send email alerts when cases age

Correct answer: Milestones and Entitlements in Service Cloud to enforce SLA timelines

Service Cloud Milestones and Entitlements enforce resolution timelines through automated escalations, ensuring compliance with regulatory appeal windows.

Question 10: Which Salesforce storage option is best suited for storing org-wide configuration values that need to be accessed quickly without SOQL queries?

Static Resources
Hierarchical Custom Settings (Correct answer)
Custom Metadata Types
External Objects

Correct answer: Hierarchical Custom Settings

Hierarchical Custom Settings are cached by Salesforce and can be accessed in Apex without consuming SOQL query limits.

Question 11: Which certification is commonly required for financial service providers handling payment processing?

PCI-DSS (Correct answer)
SOC 2
ISO 9001
ITIL

Correct answer: PCI-DSS

PCI-DSS (Payment Card Industry Data Security Standard) is a crucial certification for financial service providers that handle payment card processing. This standard sets strict requirements for securing cardholder data, ensuring that transactions are processed, stored, and transmitted in a secure environment. Compliance is mandatory for all entities involved in payment card processing to prevent data breaches.

Question 12: In Salesforce, what does SOSL stand for?

Salesforce Online Scripting Language
Salesforce Object Selection Language
Standard Object Structured Language
Salesforce Object Search Language (Correct answer)

Correct answer: Salesforce Object Search Language

SOSL stands for Salesforce Object Search Language, used for text-based searches across multiple objects.

Question 13: A Service Provider discovers a potential data breach involving a client's Salesforce org. What is the FIRST required action under most privacy regulations?

File a report with the FTC within 24 hours
Contain the breach and assess scope before any notifications (Correct answer)
Disable the Salesforce org to prevent further exposure
Immediately notify all affected end users by email

Correct answer: Contain the breach and assess scope before any notifications

Best practice and most regulations require containment and assessment first to determine breach scope and applicability before notification obligations are triggered.

Question 14: A customer wants to use Salesforce as the system of record for products while allowing regional teams to add custom attributes. Which data modeling approach best supports this without schema explosion?

Store attributes as JSON in a Long Text Area field
Use a key-value Custom Object (Product_Attribute__c) related to Product2 (Correct answer)
Create region-specific child Product objects via Master-Detail
Add hundreds of optional custom fields to the Product object

Correct answer: Use a key-value Custom Object (Product_Attribute__c) related to Product2

A related attribute object (Entity-Attribute-Value pattern) keeps the core schema clean while supporting unlimited regional customization.

Question 15: Which Salesforce industry cloud provides purpose-built data models for member management, care plans, and provider networks in the healthcare sector?

Health Cloud (Correct answer)
Nonprofit Cloud
Service Cloud with Healthcare template
Experience Cloud with Health portal

Correct answer: Health Cloud

Health Cloud provides industry-specific data models including care plans, member management, and provider network management for healthcare organizations.

Question 16: In Salesforce, which data structure is most appropriate for tracking unique Account IDs collected during a batch process?

Queue<Id>
Map<Id,Id>
List<Id>
Set<Id> (Correct answer)

Correct answer: Set<Id>

Set<Id> automatically enforces uniqueness, preventing duplicate IDs from being stored.

Question 17: Which sorting algorithm has the best average-case time complexity?

Insertion Sort with O(n^2)
Bubble Sort with O(n^2)
Selection Sort with O(n^2)
Merge Sort with O(n log n) (Correct answer)

Correct answer: Merge Sort with O(n log n)

Merge Sort consistently achieves O(n log n) time complexity using a divide-and-conquer approach.

Question 18: In an Apex trigger that bulkifies record processing, why should SOQL queries be placed outside loops?

To prevent recursive triggers
To improve stack depth
To avoid hitting the 150 SOQL query governor limit (Correct answer)
To reduce heap size

Correct answer: To avoid hitting the 150 SOQL query governor limit

SOQL inside loops can quickly exceed the 150-query-per-transaction limit when processing large record sets.

Question 19: When would a developer choose a Set over a List in an Apex bulkification pattern?

When index-based access is required
When order of processing matters
When duplicate IDs must be preserved
When collecting unique parent IDs for a single SOQL query (Correct answer)

Correct answer: When collecting unique parent IDs for a single SOQL query

Sets eliminate duplicate IDs automatically, making them ideal for collecting parent record IDs before a single batched SOQL query.

Question 20: What is a critical path in project management?

The path requiring the most resources
The most expensive phase of the project
The longest sequence of dependent tasks that determines project duration (Correct answer)
The shortest possible path to completion

Correct answer: The longest sequence of dependent tasks that determines project duration

The critical path identifies the sequence of tasks that directly affects the project completion date — any delay on these tasks delays the entire project.

Question 21: A Service Provider is designing a Disaster Recovery (DR) plan for a customer's Salesforce org. Which metric defines the maximum acceptable amount of data loss measured in time?

Service Level Objective (SLO)
Mean Time to Recovery (MTTR)
Recovery Time Objective (RTO)
Recovery Point Objective (RPO) (Correct answer)

Correct answer: Recovery Point Objective (RPO)

Recovery Point Objective (RPO) defines the maximum acceptable data loss expressed as a time window — for example, an RPO of 4 hours means the org can lose at most 4 hours of data.

Question 22: Which field type in Salesforce automatically maintains a historical log of changes made to its value?

Formula Field
Text Area (Long)
Encrypted Field
Field History Tracking enabled field (Correct answer)

Correct answer: Field History Tracking enabled field

When Field History Tracking is enabled on a field, Salesforce automatically logs changes including old value, new value, date, and user.

Question 23: An organization uses Salesforce with a SAML SSO identity provider. Which network port must be open between the IdP and the user's browser?

Port 389 (LDAP)
Port 21 (FTP)
Port 1194 (OpenVPN)
Port 443 (HTTPS) (Correct answer)

Correct answer: Port 443 (HTTPS)

SAML SSO exchanges are browser-mediated over HTTPS on port 443 between the user, IdP, and Salesforce.

Question 24: Which action should a Salesforce admin take immediately upon discovering that an employee's credentials have been compromised?

Delete the user account and create a new one
Freeze the user account, revoke active sessions, and rotate credentials (Correct answer)
Enable MFA on the compromised account
Reset the password and notify the user

Correct answer: Freeze the user account, revoke active sessions, and rotate credentials

Freezing the account stops immediate access, revoking sessions invalidates existing tokens, and rotating credentials prevents further unauthorized use.

Question 25: A business process requires Salesforce to call an external REST API within a trigger context. What is the primary architectural risk and its mitigation?

Data mismatch — use field mapping in the callout
OAuth token expiry — refresh the token inside the trigger
API version incompatibility — pin the API version in Named Credentials
Synchronous callout blocking DML — use @future or Queueable Apex for async callouts (Correct answer)

Correct answer: Synchronous callout blocking DML — use @future or Queueable Apex for async callouts

Callouts from trigger context are prohibited after DML; using @future or Queueable Apex makes the callout asynchronous and avoids the restriction.

Question 26: In Salesforce, what is an 'Entitlement' used for in the Service Cloud context?

Granting users access to specific features
Defining the level of service support a customer is entitled to receive (Correct answer)
Creating escalation paths for high-priority leads
Setting record ownership for service cases

Correct answer: Defining the level of service support a customer is entitled to receive

Entitlements in Service Cloud define the support terms a customer has (such as response times and case limits) enabling enforcement of SLAs.

Question 27: Which Salesforce Health Check score range indicates that a customer's org security settings are at significant risk and require immediate remediation?

0–49 (Poor) (Correct answer)
90–100 (Excellent)
75–89 (Good)
50–74 (Fair)

Correct answer: 0–49 (Poor)

A Salesforce Health Check score of 0–49 (Poor) indicates that the org has critical security misconfigurations that fall below Salesforce's recommended baseline and require immediate attention.

Question 28: A team uses a 'release branch' pattern. What happens to the release branch after the production deployment is successful?

It is merged into both main and develop, then typically deleted. (Correct answer)
It becomes the new main branch going forward.
It is converted to a long-lived hotfix branch.
It is kept indefinitely as a permanent historical record.

Correct answer: It is merged into both main and develop, then typically deleted.

After a successful release, the release branch merges into main (for tagging) and back into develop (to carry forward any release fixes), then is deleted.

Question 29: A company wants to prevent runaway automation — specifically, recursive trigger execution. Which design pattern is the standard Salesforce best practice?

Implement a Platform Cache check before each trigger execution
Add a custom field flag to each record to block re-entry
Use a static Boolean variable in a handler class set before DML (Correct answer)
Use Process Builder instead of triggers to prevent recursion

Correct answer: Use a static Boolean variable in a handler class set before DML

A static Boolean in a trigger handler class is the standard pattern to track and prevent recursive execution within a transaction.

Question 30: Which graph traversal algorithm uses a queue (BFS) and is best suited for finding the shortest path in an unweighted graph?

A* Search
Dijkstra's Algorithm
Breadth-First Search (Correct answer)
Depth-First Search

Correct answer: Breadth-First Search

BFS explores nodes level by level using a queue, guaranteeing the shortest path in unweighted graphs.

ServiceNow Certified Implementation Specialist – Service Provider (CIS-SP)

The ServiceNow CIS-SP certification validates expertise in implementing and configuring domain-separated ServiceNow environments for multi-tenant service provider deployments. It covers domain architecture, data and process separation, foundational data management, and cross-application domain support.

Questions

35 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds