What are the 6 methods available for user authentication?
Correct Answer: A,B,C,D,E,F
The six methods available for user authentication in ServiceNow are: Local Database - The user authenticates using a username and password stored in the instance database. Multifactor Authentication (MFA) - The user provides their username, password, and a passcode (e.g., from Google Authenticator). LDAP (Lightweight Directory Access Protocol) - The user authenticates using credentials stored in a corporate LDAP directory. SAML 2.0 (Security Assertion Markup Language) - The user is authenticated via an external SAML Identity Provider (IdP). OAuth 2.0 - The user authenticates via an OAuth identity provider (such as Google, Microsoft, or Facebook). Digest Token Authentication - The user authenticates using an encrypted token rather than directly submitting a password. Thus, the correct answer is: ✅ A, B, C, D, E, F Comprehensive and Detailed In-Depth ServiceNow supports multiple authentication methods to provide flexibility, security, and integration capabilities with external identity providers. Local Database Authentication: ServiceNow stores usernames and passwords in the internal database. Users authenticate directly with the instance. This method is commonly used when no external authentication provider is configured. Multifactor Authentication (MFA): Enhances security by requiring two authentication factors: Username and password (stored in the database). Passcode from a registered device (such as Google Authenticator, Microsoft Authenticator). MFA helps prevent unauthorized access even if credentials are compromised. LDAP Authentication: Allows users to authenticate against an external LDAP directory (such as Microsoft Active Directory). The user must have a matching record in the ServiceNow user table ([sys_user]). ServiceNow does not store passwords when using LDAP; it only validates credentials against the directory. SAML 2.0 Authentication: Users authenticate via a SAML Identity Provider (IdP) such as Okta, Microsoft Azure AD, or Ping Identity. ServiceNow acts as a Service Provider (SP) and does not store passwords. Provides Single Sign-On (SSO) capabilities. OAuth 2.0 Authentication: Allows authentication via OAuth providers (Google, Facebook, Microsoft, etc.). Users do not need to store passwords in ServiceNow; instead, authentication is delegated to the OAuth identity provider. Digest Token Authentication: Uses an encrypted token (instead of a plaintext password) to authenticate users. Often used for API-based authentication or scenarios where passwords should not be transmitted over the network. Why These Are the Correct Methods? Each method aligns with ServiceNow's authentication mechanisms as per official documentation. ServiceNow supports a hybrid authentication approach, allowing multiple methods to coexist. Reference from Certified System Administrator (CSA) Documentation: ServiceNow Docs - Authentication Methods https://docs.servicenow.com ServiceNow Security Best Practices - Authentication & Access Controls ServiceNow Developer Portal - SSO & OAuth Authentication
Question 122
Which ServiceNow capability allows you to provide knowledge articles, via a conversational messaging interface?
What is the GlideForm Client-side scripting object?
Correct Answer: D
Question 124
How can administrators utilize the same content for different notification channels?
Correct Answer: C
InServiceNow, administrators canreuse the same notification contentacross multiple channels (such asemail, SMS, and push notifications) by usingCommon Notification Content. Consistency Across Channels Ensures that the same message format is used acrossemail, SMS, and push notifications. Easier Maintenance Instead ofcreating separate contentfor each channel, administrators can manage all notification content from one place. Dynamic Content Supports variables and dynamic placeholders to customize messages based on recipient data. A). Configure Default notification content Incorrect: There is no "default notification content" feature in ServiceNow. B). Enable Actionable notification content Incorrect: Actionable notifications allow users totake actions directly from the notification, but they do not manage common content. D). Set up Related notification content Incorrect: No such feature as "Related notification content" exists in ServiceNow. Key Features of Common Notification Content:Why Other Options Are Incorrect? Common Notification Content Overview ServiceNow Notification Management Setting Up Common Notification Content Creating Reusable Notification Content References from ServiceNow CSA Documentation:
Question 125
What are three security modules often used by the System Administrator? (Choose three.)
Correct Answer: A,E,G
ServiceNow provides multiple security-related modules that a System Administrator frequently uses to manage access, authentication, and overall system security. Why These Options Are Correct? ✅ A. System Properties > Security This module allows administrators to configure general security settings, including password policies, session timeout, and encryption settings. It helps manage security parameters at a system-wide level. ✅ E. System Security > Access Control (ACL) Access Control Lists (ACLs) define what data users can access, modify, and delete within the instance. ACLs operate at the table, field, and record levels, ensuring proper role-based access control (RBAC). This is one of the most commonly used security modules by admins. ✅ G. System Security > High Security Settings High Security Settings (previously known as Security Hardening) enforce strict security controls, such as requiring multi-factor authentication (MFA) and enforcing strict password policies. It is often used for compliance with security regulations like HIPAA, GDPR, and ISO 27001. Why the Other Options Are Incorrect? ❌ B. Utilities > Migrate Security This option does not exist in ServiceNow. There is no "Migrate Security" under Utilities. ❌ C. System Security > Security There is no "System Security > Security" module in ServiceNow. The correct structure is System Security > Access Control or System Properties > Security. ❌ D. Self-Service > My Access This is a self-service module for end users to request and review their access. It is not a tool that System Administrators use to manage security settings. ❌ F. Password Management > Security Questions This is used to configure security questions for password recovery but is not a core security module that admins frequently use. Reference to Official Certified System Administrator (CSA) Documentation: General Security Settings in ServiceNow ServiceNow Access Control (ACL) Best Practices ServiceNow System Security and Role Management
