30% Topic 5 – Database Management & Platform Security Flashcards

(95 cards)

1
Q

What is a table in ServiceNow?

A

[Exam Weight: 30%] A collection of records and fields

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What uniquely identifies a record?

A

[Exam Weight: 30%] sys_id

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Can a sys_id be changed?

A

[Exam Weight: 30%] No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is a base table?

A

[Exam Weight: 30%] A table that does not extend another table

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is an extended table?

A

[Exam Weight: 30%] A table that inherits from another table

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What does table extension provide?

A

[Exam Weight: 30%] Inherited fields and functionality

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What base table do incidents extend?

A

[Exam Weight: 30%] task

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Do extended tables inherit ACLs?

A

[Exam Weight: 30%] Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What prefix identifies a custom table?

A

[Exam Weight: 30%] u_

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Where is table schema defined?

A

[Exam Weight: 30%] Dictionary entries

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What table stores dictionary definitions?

A

[Exam Weight: 30%] sys_dictionary

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is the purpose of an ACL?

A

[Exam Weight: 30%] Control access to data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What does an ACL control?

A

[Exam Weight: 30%] Read, write, create, delete

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are the two main ACL types?

A

[Exam Weight: 30%] Table-level and field-level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

If both row and field ACLs exist, what must happen?

A

[Exam Weight: 30%] Both must evaluate to true

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

In what order are ACLs evaluated?

A

[Exam Weight: 30%] Table → Parent → Wildcard

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What wildcard is used for global ACLs?

A

[Exam Weight: 30%] *

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

When are wildcard ACLs evaluated?

A

[Exam Weight: 30%] Last

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What happens if no ACL exists?

A

[Exam Weight: 30%] Access is granted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What role is commonly required to create ACLs?

A

[Exam Weight: 30%] security_admin

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What feature helps troubleshoot ACL behavior?

A

[Exam Weight: 30%] Security Debugging

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is the purpose of the CMDB?

A

[Exam Weight: 30%] Store configuration items and their relationships

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What does CMDB stand for?

A

[Exam Weight: 30%] Configuration Management Database

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is a Configuration Item (CI)?

A

[Exam Weight: 30%] A component required to deliver a service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
What base table do most CIs extend?
[Exam Weight: 30%] cmdb_ci
26
What types of assets are stored in the CMDB?
[Exam Weight: 30%] Tangible and intangible assets
27
Give an example of a tangible CI.
[Exam Weight: 30%] Server
28
Give an example of an intangible CI.
[Exam Weight: 30%] Software application
29
What is the purpose of CI relationships?
[Exam Weight: 30%] Show dependencies for impact analysis
30
Where are CI relationships stored?
[Exam Weight: 30%] cmdb_rel_ci
31
Why is CMDB data accuracy important?
[Exam Weight: 30%] Reliable impact analysis and decision-making
32
What tool automatically populates CMDB data?
[Exam Weight: 30%] Discovery
33
What tool maps application dependencies?
[Exam Weight: 30%] Service Mapping
34
What does CMDB Health measure?
[Exam Weight: 30%] Data quality
35
What are the three CMDB Health metrics?
[Exam Weight: 30%] Completeness, correctness, compliance
36
What is an Import Set?
[Exam Weight: 30%] A staging area for imported data
37
Where is import data stored initially?
[Exam Weight: 30%] Import Set table
38
What defines how import data moves to target tables?
[Exam Weight: 30%] Transform Map
39
What is coalescing used for?
[Exam Weight: 30%] Identify existing records
40
What happens when a coalesce match is found?
[Exam Weight: 30%] Existing record is updated
41
What happens when no coalesce match is found?
[Exam Weight: 30%] New record is created
42
Where is coalesce configured?
[Exam Weight: 30%] Transform Map field mapping
43
Do Business Rules run during imports?
[Exam Weight: 30%] Yes
44
Do Client Scripts run during imports?
[Exam Weight: 30%] No
45
What CSA mistake is common with coalescing?
[Exam Weight: 30%] Expecting new records when matches exist
46
What is a table in ServiceNow?
[Exam Weight: 30%] [Database Management (CORE CSA)] A collection of records stored in the database.
47
What does a record represent?
[Exam Weight: 30%] [Database Management (CORE CSA)] A row in a table.
48
What does a field represent?
[Exam Weight: 30%] [Database Management (CORE CSA)] A column in a table.
49
What table stores user records?
[Exam Weight: 30%] [Database Management (CORE CSA)] sys_user.
50
What table stores groups?
[Exam Weight: 30%] [Database Management (CORE CSA)] sys_user_group.
51
What table stores roles?
[Exam Weight: 30%] [Database Management (CORE CSA)] sys_user_role.
52
What are the three key attributes of every field?
[Exam Weight: 30%] [Database Management (CORE CSA)] Field Label, Field Name, Value.
53
What is a reference field?
[Exam Weight: 30%] [Database Management (CORE CSA)] A field that points to a record in another table.
54
What happens when you add a reference field to a form?
[Exam Weight: 30%] [Database Management (CORE CSA)] Fields from the referenced table become available.
55
Can a reference field point to multiple tables?
[Exam Weight: 30%] [Database Management (CORE CSA)] No, only one table.
56
What is a dictionary record?
[Exam Weight: 30%] [Database Management (CORE CSA)] A record that defines a field’s properties.
57
What is a table extension?
[Exam Weight: 30%] [Database Management (CORE CSA)] A child table that inherits fields from a parent table.
58
What table do most task-based tables extend?
[Exam Weight: 30%] [Database Management (CORE CSA)] task.
59
What is the benefit of table extension?
[Exam Weight: 30%] [Database Management (CORE CSA)] Shared fields and consistent behavior.
60
What is a schema map?
[Exam Weight: 30%] [Database Management (CORE CSA)] A visual representation of table relationships.
61
What is a choice list?
[Exam Weight: 30%] [Database Management (CORE CSA)] A predefined list of selectable field values.
62
Where are choice values stored?
[Exam Weight: 30%] [Database Management (CORE CSA)] sys_choice table.
63
What happens when a choice list value is removed?
[Exam Weight: 30%] [Database Management (CORE CSA)] Existing records retain the old value.
64
Access Control (ACL)
[Exam Weight: 30%] [Platform Security (VERY HIGH YIELD)] A rule that controls access to data and actions.
65
ACL
[Exam Weight: 30%] [Platform Security (VERY HIGH YIELD)] Access Control List.
66
What can ACLs protect?
[Exam Weight: 30%] [Platform Security (VERY HIGH YIELD)] Tables, records, fields, and UI actions.
67
What are the two main parts of an ACL rule?
[Exam Weight: 30%] [Platform Security (VERY HIGH YIELD)] Object and operation.
68
What are common ACL operations?
[Exam Weight: 30%] [Platform Security (VERY HIGH YIELD)] read, write, create, delete.
69
What does an ACL check first: role or script?
[Exam Weight: 30%] [Platform Security (VERY HIGH YIELD)] Role.
70
What happens if a user fails a table ACL?
[Exam Weight: 30%] [Platform Security (VERY HIGH YIELD)] Field ACLs are not evaluated.
71
What does “Requires role” mean in an ACL?
[Exam Weight: 30%] [Platform Security (VERY HIGH YIELD)] The user must have the specified role to pass.
72
What is the purpose of scripting in ACLs?
[Exam Weight: 30%] [Platform Security (VERY HIGH YIELD)] To add conditional logic for access.
73
What role allows editing high-risk security settings?
[Exam Weight: 30%] [Platform Security (VERY HIGH YIELD)] security_admin.
74
Does an admin automatically have security_admin?
[Exam Weight: 30%] [Platform Security (VERY HIGH YIELD)] No.
75
How does an admin gain security_admin privileges?
[Exam Weight: 30%] [Platform Security (VERY HIGH YIELD)] By elevating to security_admin.
76
Is security_admin elevation permanent?
[Exam Weight: 30%] [Platform Security (VERY HIGH YIELD)] No, it is session-based.
77
What is authentication?
[Exam Weight: 30%] [Platform Security (VERY HIGH YIELD)] Verifying a user’s identity.
78
What is authorization?
[Exam Weight: 30%] [Platform Security (VERY HIGH YIELD)] Determining what a user can access.
79
What authentication method uses external identity providers?
[Exam Weight: 30%] [Platform Security (VERY HIGH YIELD)] External Single Sign-On (SSO).
80
What authentication method uses credentials stored in ServiceNow?
[Exam Weight: 30%] [Platform Security (VERY HIGH YIELD)] Local database authentication.
81
What authentication method uses an encrypted digest?
[Exam Weight: 30%] [Platform Security (VERY HIGH YIELD)] Digest Token authentication.
82
What authentication method uses a one-time passcode?
[Exam Weight: 30%] [Platform Security (VERY HIGH YIELD)] Multi-factor authentication (MFA).
83
What is the purpose of MFA?
[Exam Weight: 30%] [Platform Security (VERY HIGH YIELD)] To add an extra layer of security.
84
What is application scope?
[Exam Weight: 30%] [Database Management Application & Data Protection] A security boundary that controls access to application resources.
85
What is the default scope for custom applications?
[Exam Weight: 30%] [Database Management Application & Data Protection] Private scope.
86
What does application scope prevent?
[Exam Weight: 30%] [Database Management Application & Data Protection] Naming conflicts and unauthorised cross-app access.
87
What defines cross-scope access rules?
[Exam Weight: 30%] [Database Management Application & Data Protection] Application access settings.
88
What is data separation?
[Exam Weight: 30%] [Database Management Application & Data Protection] Isolating data between applications or users.
89
What protects sensitive data at rest?
[Exam Weight: 30%] [Database Management Application & Data Protection] Encryption.
90
What protects sensitive data in transit?
[Exam Weight: 30%] [Database Management Application & Data Protection] HTTPS / TLS.
91
What is a role best practice for security?
[Exam Weight: 30%] [Database Management Application & Data Protection] Assign roles to groups, not users.
92
What happens when a user is removed from a group?
[Exam Weight: 30%] [Database Management Application & Data Protection] They lose all roles granted by that group.
93
What logs record impersonation activity?
[Exam Weight: 30%] [Database Management Application & Data Protection] System logs.
94
Are impersonation actions audited?
[Exam Weight: 30%] [Database Management Application & Data Protection] Yes.
95
What portal do users without roles access by default?
[Exam Weight: 30%] [Database Management Application & Data Protection] Employee Center.