NO.43 When evaluating Access Controls, ServiceNow searches and evaluates:
When evaluating Access Controls, ServiceNow searches and evaluates:
From the most specific match to the most generic match. This is the correct answer because ServiceNow follows a top-down approach when evaluating Access Control (ACL) rules, which are used to restrict the access to the data and functionality of the ServiceNow platform based on the user’s roles and conditions. ServiceNow starts with the most specific match, which is the field-level ACL rule, then moves to the table-level ACL rule, and finally to the global or * ACL rule. ServiceNow grants access if any of the ACL rules evaluates to true, and denies access if all of the ACL rules evaluate to false.
The following are not correct descriptions of how ServiceNow searches and evaluates Access Controls:
Only for matches on the current table. This is not correct because ServiceNow does not only look for matches on the current table, but also on the parent tables and the global or * table. For example, if there is no ACL rule for the incident table, ServiceNow will look for an ACL rule for the task table, which is the parent table of the incident table, and then for the global or * table, which is the parent table of all tables.
Only for matches on the current field. This is not correct because ServiceNow does not only look for matches on the current field, but also on the table that contains the field and the global or * table. For example, if there is no ACL rule for the short_description field on the incident table, ServiceNow will look for an ACL rule for the incident table, and then for the global or * table.
From the most generic match to the most specific match. This is not correct because ServiceNow does not follow a bottom-up approach when evaluating Access Controls, but a top-down approach, as explained above. Reference: Access Control Rules, ACL Evaluation Order
https://developer.servicenow.com/dev.do#!/learn/learning-plans/paris/new_to_servicenow/app_store_learnv2_securingapps_paris_access_controls_evaluation_order
NO.46 Which class is NOT part of the Client side scoped APIs?
* This class allows you to create and manipulate dialog windows on the user interface. You can use this class to display messages, forms, or custom HTML content in a modal window.
* GuideAjex: This class allows you to make asynchronous calls to the server and process the response.
You can use this class to retrieve data, execute scripts, or perform actions on the server without reloading the page.
* GuideForm: This class allows you to access and manipulate the fields and values on a form. You can use this class to get or set field values, show or hide fields, add or remove options, or validate field inputs.
The class GuideRecord is not part of the Client side scoped APIs. GuideRecord is part of the Server side scoped APIs, which are a set of classes and methods that allow you to interact with the database and perform server-sidelogic on the ServiceNow platform. GuideRecord is a class that represents a record in a table and allows you to query, insert, update, or delete records on the server.
References:
* [Client side scoped APIs]
* [Server side scoped APIs]
NO.48 Modules must have a Link type. Which one of the following is a list of Link types?
Reference:
A module is a navigation item that provides access to a feature or functionality in ServiceNow. Modules must have a link type, which determines how the module behaves when clicked. The following is a list of link types:
Assessment. This is a link type that opens an assessment, which is a survey or questionnaire that measures the effectiveness of a process or service.
List of Records. This is a link type that opens a list of records from a table or a saved filter.
Separator. This is a link type that creates a horizontal line to separate modules in the application menu.
Timeline Page. This is a link type that opens a timeline page, which is a graphical representation of the duration and sequence of events or tasks.
The following are not link types, but other module attributes or field types:
List of Records, Separator, Catalog Type, Roles. These are not link types, but a combination of a link type (List of Records), a module attribute (Separator), a field type (Catalog Type), and a user attribute (Roles).
List of Records, Content Page, Order, URL (from arguments:). These are not link types, but a combination of a link type (List of Records), a module attribute (Content Page), a field name (Order), and a link type argument (URL).
Assessment, List of Records, Content Page, Roles. These are not link types, but a combination of a link type (Assessment), a link type (List of Records), a module attribute (Content Page), and a user attribute (Roles). References: Modules, Create a Module
NO.50 Which one of the following is NOT true for Modules?
The statement that is not true for Modules is that every Module must be associated with a table. A Module is the functionality within an Application Menu that opens a content page in the content frame or a separate tab or window. A Module can be associated with a table, a list, a form, a report, a script, or any other type of page.
For example, the Open Module under the Incident Application Menu opens a list of incident records from the Incident table, while the Overview Module under thePerformance Analytics Application Menu opens a dashboard page with various charts and widgets. The other statements are true for Modules. Access to Modules is controlled with roles, as each Module can have one or more roles specified in its definition that determine who can see and access it. Modules open content pages, as they are links to different types of pages that provide information and functionality to users. Every Module must be part of an Application Menu, as they are the second-level navigation options for Applications. Reference: Modules
NO.52 Which one of the following is true for GlideUser (g_user) methods?
The following is true for GlideUser (g_user) methods:
Can be used in Client Scripts, UI Policies, and UI Actions. This is true because GlideUser (g_user) methods are part of the client-side scripting APIs that provide information about the current user and the user’s preferences. Client Scripts, UI Policies, and UI Actions are all types of client-side scripts that run in the web browser and manipulate the user interface.
The following are not true for GlideUser (g_user) methods:
Can be used in Client Scripts and UI Policies only. This is false because GlideUser (g_user) methods can also be used in UI Actions, which are another type of client-side scripts that can be triggered by a user’s click on a button, link, or choice.
Can be used in Business Rules only. This is false because GlideUser (g_user) methods cannot be used in Business Rules, which are server-side scripts that run on the ServiceNow platform and manipulate the database. Business Rules use a different API to access the current user information, which is GlideSystem (gs).
Can be used in Business Rules, and Scripts Includes. This is false because GlideUser (g_user) methods cannot be used in Business Rules or Script Includes, which are both server-side scripts. Script Includes are reusable units of code that can be called from any server-side script. Script Includes also use GlideSystem (gs) to access the current user information. Reference: Client-Side Scripting APIs, GlideUser, Business Rules, Script Includes
NO.53 Modules must have a Link type. Which one of the following is a list of Link types?