Skip to content

ServiceNow Certified System Administrator (CSA) - Practice Questions

15 questions across the CSA areas: the Now Platform and user interface, lists and forms, tables and the CMDB, access control, workflow and flow automation, notifications, reporting, and platform administration.

Cert page: exams/servicenow/csa/

Question 1

Scenario: How are tables related in ServiceNow to enable inheritance?

A. They are always independent B. Table extension, where a child table extends a parent and inherits its fields, as Incident extends Task C. Foreign keys only D. Through the CMDB only

Answer **Correct: B** **Why:** The Task table is the classic parent: Incident, Problem, and Change all extend it and inherit fields such as number, state, and assignment group. Understanding extension explains why a field added to Task appears on all of them.

Question 2

Scenario: A field must appear on a form only when a certain condition is met.

A. Edit the table B. A UI policy, which shows, hides, makes mandatory, or makes read-only fields based on conditions, running in the client C. A business rule D. An ACL

Answer **Correct: B** **Why:** UI policies are the declarative, client-side way to control form behavior and are preferred over client scripts for these cases. Business rules run server-side and are the wrong tool for changing how a field displays.

Question 3

Scenario: Data must be validated or modified when a record is saved, regardless of how it was saved.

A. A UI policy B. A business rule, which runs server-side on database operations and so also covers imports and API writes C. A client script D. A UI action

Answer **Correct: B** **Why:** Client-side logic only fires in the form, so an import or API write bypasses it entirely. Server-side business rules are the enforcement point when the rule must hold for every path that touches the record.

Question 4

Scenario: Which controls whether a user can read or write a specific field on a table?

A. A UI policy B. Access control rules (ACLs), evaluated by object and operation, combining roles and conditions and script C. A role alone D. A business rule

Answer **Correct: B** **Why:** ACLs are the security enforcement layer, and a UI policy that hides a field is cosmetic rather than secure. Field-level ACLs are evaluated most-specific first, and a user needs to pass both the table and the field ACL to gain access.

Question 5

Scenario: How is access typically granted to users in ServiceNow?

A. Directly per user B. Roles assigned to groups, with users placed in groups, so access is managed by group membership C. Per record only D. Through UI policies

Answer **Correct: B** **Why:** The group-based model scales: change a group's roles once rather than editing every user. Assigning roles directly to users is possible but becomes unmanageable and obscures who has what, which is the anti-pattern the exam probes.

Question 6

Scenario: A multi-step approval and task process must be automated.

A. Manual emails B. Flow Designer, the current low-code automation tool for building flows with triggers, conditions, and actions C. A business rule chain D. A report

Answer **Correct: B** **Why:** Flow Designer is the modern replacement for legacy Workflow, using reusable actions and subflows. Building approvals and task orchestration here rather than in scripted workflows is the direction ServiceNow has taken.

Question 7

Scenario: A user should receive an email when an incident is assigned to their group.

A. A business rule that sends mail directly B. A notification, triggered by the record condition, with a recipient and a template C. A report subscription D. A UI action

Answer **Correct: B** **Why:** Notifications are the declarative mechanism, with conditions, recipients, and content in one place that administrators can maintain. Sending email from a business rule is possible but scatters the logic and bypasses the notification framework's controls.

Question 8

Scenario: What is the CMDB in ServiceNow?

A. A reporting tool B. The Configuration Management Database, storing configuration items and their relationships as the foundation for many ITSM processes C. A notification engine D. A user directory

Answer **Correct: B** **Why:** The CMDB models the IT environment as CIs and relationships, which is what lets change management assess impact and incident management find affected services. CI class tables extend the base cmdb_ci table, reusing the same inheritance model.

Question 9

Scenario: Records must be brought in from an external source on a schedule.

A. Manual entry B. An import set with a transform map, run through a scheduled data import or integration C. A report D. A business rule

Answer **Correct: B** **Why:** The import set is a staging table; the transform map defines how staged rows map to the target table, including coalesce fields that decide insert versus update. Coalescing on the wrong field is what produces duplicate records.

Question 10

Scenario: An administrator must find records matching complex criteria and act on many at once.

A. Open each record B. A filtered list view, then a list edit or a bulk action such as update selected C. A single record form D. A notification

Answer **Correct: B** **Why:** The condition builder plus list actions is the day-to-day administrative workflow. Understanding the breadcrumb filter and dot-walking to related fields in conditions is what makes the list view powerful rather than just a table dump.

Question 11

Scenario: A report must show incident volume by category over time.

A. Export to a spreadsheet B. A report built on the incident table with the appropriate type, grouped by category, optionally placed on a dashboard C. A business rule D. A notification

Answer **Correct: B** **Why:** Reports are built on tables and their fields, so a clean data model and consistent categorization are what make reporting meaningful. Dashboards assemble reports and other widgets into a single operational view.

Question 12

Scenario: Changes are being developed and must move between instances safely.

A. Edit production directly B. Capture changes in an update set in a sub-production instance, then move the update set to production after testing C. Copy records manually D. A data import

Answer **Correct: B** **Why:** Update sets carry configuration changes between instances, but not data. Changes made in the wrong scope or outside the current update set are the classic reason something works in test but is missing after promotion.

Question 13

Scenario: What distinguishes application scope from the global scope?

A. Nothing B. Scoped applications are isolated with their own namespace and restricted cross-scope access, which protects them and the rest of the platform C. Global is more restricted D. Scope only affects reporting

Answer **Correct: B** **Why:** Scoping prevents one application's code and tables from unintentionally affecting another's. Cross-scope access must be explicitly granted, which is why a script failing to reach a table is often a scope boundary rather than an ACL.

Question 14

Scenario: A user reports they cannot see a module in the application navigator.

A. The module is broken B. Check the module's and application's role requirements against the user's roles, and whether their group grants the needed role C. Reinstall the application D. Clear the database

Answer **Correct: B** **Why:** Navigator modules are commonly role-gated, so visibility is usually an access question rather than a fault. Impersonating the user is the fast way to confirm what they actually see, which is a standard administrative technique.

Question 15

Scenario: Which best describes an SLA in ServiceNow?

A. A report B. A service level agreement definition that attaches to records, tracking elapsed time against a target with conditions to start, pause, and stop C. A notification D. A dashboard

Answer **Correct: B** **Why:** SLA definitions measure against targets and drive escalation, and the start, pause, and stop conditions are what make the measurement accurate. A pause condition for on-hold states is what stops customer wait time counting against the support team unfairly.

Where to go deeper