Download PURE CERTIFIED FLASHARRAY IMPLEMENTATION SPECIALIST EXAM PREP 2026 FULL EXAMINATION and more Exams Information and Communications Technology (ICT) in PDF only on Docsity!
PURE CERTIFIED FLASHARRAY IMPLEMENTATION
SPECIALIST EXAM PREP 2026 FULL
EXAMINATION
◉ Minimum of 2, maximum of 4. Not supported to serve multiple geographic regions or disparate networks within client organization. Answer: How many VPN tunnels does ServiceNow support and why ◉ Through Self-service form in customer support system called HI. Typically takes 2 weeks. Answer: How do you submit a request VPN? ◉ No, connection is established over HTTPS and is thus encrypted, no VPN needed. Answer: VPN Needed for Traffic into ServiceNow? ◉ VPN for LDAP. Answer: Recommended that customers implement LDAPS (LDAP over SSL) v. standard LDAP (non-encrypted). Standard LDAP integration communicates over TCP on port 389. LDAPS communicates over TCP on 636 and requires a digital certificate which must be uploaded to instance. VPN to be used if LDAP instead of LDAPS ◉ VPN for JDBC & Web Services. Answer: Recommended to install MID Server inside network, MID server will communicate with instance over HTTPS
◉ VPN for email integration. Answer: Not supported if ServiceNow is configured to utilize mail.service-now.com for SMTP and POP3, utilizes opportunistic TLS. If incoming server supports TLS, traffic is encrypted. If not, uses regular SMTP without encryption. Supported if customer's mail server is being used ◉ Levels of Contextual Security. Answer: Several layers before an end user has the capability to perform CRUD (create, read, update, delete) operations on a table
- User Authentication/Login
- User Interface
- Database ◉ User Authentication/Login security level. Answer: Governs Users, Groups, Roles ◉ User Interface security level. Answer: Governs Applications and Modules and is governed by roles configured at application and module level ◉ Database Security Level. Answer: • Governs table and field access
- Controlled via globally defined system properties as well as table and field level Access Controls
◉ Access Control Wildcard Rule. Answer: Selection of the wildcard symbol from the name drop down list on the access control form means that the rule in question applies to all fields on the selected table except for those with explicit rules ◉ ACL Evaluation order. Answer: Most specific to least - Starts at field, then goes to table ◉ Field ACL rule evaluation order. Answer: Find first matching:
- table.field (incident.number)
- parent_table.field (task.number)
- .field (.number)
- table.* (incident.*)
- parent_table.* (task.*)
- . (.) ◉ Table ACL rule evaluation order. Answer: Find First Matching
- table (incident)
- parent_table (task)
◉ Three main security modules. Answer: • System Properties > Security - can set default behavior for no ACLs
- System Security > Access Control - manages ACLs
- System Security > High Security Settings - set tighter security options ◉ • Role
- Condition
- Script. Answer: What is the evaluation order of ACL elements ◉ Elements of the ServiceNow Application Security Model. Answer: Contextual Security (ACLs, etc.) IP Address Access Controls (System Security > IP Address Access Control) - allow or deny certain IP ranges Encryption ◉ Keys to Success with security. Answer: • Risk-based & Data- centric
- Secure first then develop
- Documented approach ◉ Security activities for success. Answer: • Know what you are storing
- Consult with security to understand requirements
- Configure security settings up front
- Personalize choices. Answer: Which operations can be secured through ACLs? ◉ • Records
- UI Pages
- Processors
- Client Callable Script Includes. Answer: What do Access Control Rules Apply to? ◉ Over 4,500. Add all plugins, >6,000. Answer: How many ACLs come OOTB? ◉ • canRead()
- canWrite()
- canCreate()
- canDelete(). Answer: ACL Script Evaluation, built in GlideRecord methods ◉ Predefined ACLs by role. Answer: • End Users - Submit records in some applications (create) - Read and update their own records in those applications
- Fulfillers - general read and write access for applications they have a role for - task assignment application/process
- Administrators - delete records - change state to closed
◉ From most specific to least specific processing orders define matching criteria For record rules a table and field rule will be searched for both are evaluated First rule to match for both is evaluated for each processing level (if parent_table.field matches, it won't go to next level for field). Answer: How are ACL rules matched? ◉ Any passed rule will allow access. Answer: What happens if there are multiple ACL rules at the same processing level? ◉ • User is denied access to all fields in the table even if the user previously passed a field ACL rule
- List of table will show security constraint message. Answer: What happens if a user fails a table ACL rule ◉ User is denied access to the field. Answer: What happens if a user fails a field ACL rule but passes a table ACL rule ◉ All fields will be read-only unless there is not a more specific field rule. Answer: What happens when a table write rule fails ◉ User will not have the "New" button. Answer: What happens when a table create rule fails
context to encrypt the field. Answer: What happens when a user has one encryption context and there is no data in an encrypted field ◉ If the user has the matching context, the form displays the field. Answer: What happens when a user has one encryption context and there is data in an encrypted field ◉ Form displays the field and when the user enters data, field is encrypted using currently selected context. Answer: If a user has multiple encryption contexts and there is no data in an encrypted field ◉ User will have access to the field if they have the matching context. Encrypted field always uses the original encryption context to encrypt changes to the field. Prevents users with multiple contexts from changing field context. Answer: User has multiple encryption contexts and there is data in the field ◉ Encrypting attachments. Answer: Users with >=1 encryption contexts will get Encrypt File checkbox. If they have >1, they are asked to confirm the context. ◉ Hover over the encryption (lock) icon and it will display. Answer: How to identify which encryption context a field or attachment is using
◉ g_user Object Properties. Answer: Do NOT use to apply security - easily defeated using developer tools built into browsers ◉ security_admin. Answer: Who can create ACL rules? ◉ • Match the object against field ACL rules.
- Match the object against table ACL rules. A user must pass both field and table ACL rules in order to access a record object.. Answer: What is the processing order for Record ACL rules? ◉ Impersonating user. Answer: It means that you can log in to the system as that user and can have feel how the ServiceNow UI is set for that user. This is very useful while testing. For example if you are REQUIRED to test that a user can access change form or not. ◉ Knowledge role Knowledge_admin role and Admin role. Answer: What are the Roles used by Knowledge Management? ◉ Navigate to User Administration > Role and click New.. Answer: How to create a new role?
How does ServiceNow limit the visibility of data during an integration? ◉ • Conditional expressions
- "Category is database" scripts
- Custom script written for security access roles
- User require to have one of the defined roles to perform actions. Answer: ACL rules are defined by ◉ Secure. Answer: Secure or develop first? ◉ Elevated Security. Answer: What does allow someone to operate as a standard user and temporarily use higher-level privileges? ◉ Read, write, delete. Answer: The High Security plugin is enabled. A new table is created. ACLs are set up so that only users with the ITIL role can read data in the table. As an admin, you log in and will be able to what with the table? ◉ Create, Read, Write, Delete. Answer: These operations (stands for CRWD) exist with the Contextual Security plugin ◉ Contextual Security Plugin. Answer: Allows to create record and field-level security
◉ Only used when ServiceNow connects to YOU. Answer: VPN connection is used when? ◉ ITIL users will only be able to see App and module but nothing with CRUD allowed. Answer: When creating an Application, tables, fields; and only giving ITIL users access to Application and module, which is true about permissions? ◉ Both have to be true to make the insert. Answer: What happens when there is a low level ACL and a field level ACL on a table? ◉ Data Policy. Answer: How would you best make sure that Data is kept in a uniform Manner? ◉ Object. Answer: At what Level are "ACLs" applied? ◉ Elevated Privilege. Answer: What is the Raised Permissions feature called? ◉ Quick Start Security (ACL). Answer: What plugin gives ability to quickly set best practice ACLs
- Semaphores sets
- OS Configuration
- Logged in sessions Where would you go to see the memory stats for your instance? ◉ Debug log. Answer: System Diagnostics > Debug Log Displays gs.print() and gs.log() statements, as well as server logging information and error messages ◉ Upgrade History. Answer: Fill in the blank: System Diagnostics >
_____ Tracks all upgrades made to an instance. Each record examined during an upgrade is tracked and the action taken on that record is tracked as the disposition ◉ Uncheck the "run business rules" attribute. Answer: To improve performance of an import set ◉ Client Transactions used for performance analysis. Answer: Enhances the system logs by providing more information on the durations of transactions between the client and the server. By providing information on how time was spent during the
transaction, performance issues can be tracked down to the source by seeing where the time is being consumed. ◉ Client transaction functionality. Answer: Steps to disable _____
- Enter sys_properties.list in the application navigator filter.
- Locate the property named glide.client.track_transaction_timings.
- Set the property value to false. ◉ current.update(). Answer: To improve performance of business rules, what API call is strongly recommended to avoid? ◉ Search for 'stats.do' from the 'type filter text' (TFT) field or Appended to the instance web address in the browser address bar.. Answer: How to access the amount of memory a ServiceNow instance is using? ◉ • Using GlideAjax for server calls
- Using callback functions for GlideAjax (the question may also reference 'server side includes' and/or .get reference() call). Answer: Methods to increase the performance for a client script
Make as few calls to server as possible Do not make synchronous calls using g_form.getReference() Use jslog to debug Use try/catch to find runtime errors Use appropriate debug strategies for UI type ◉ Global Business Rules v. Script Includes. Answer: • Both allow creation of reusable javascript
- GBRs can impact performance unless contents are wrapped in functions
- GBRs load on every interaction between a user and the platform
- Script includes only load on demand and do not impact performance ◉ • Application Server Response
- Network Latency and Throughput
- Browser Rendering and Parsing
- Instance Cache. Answer: Components of perceived ServiceNow performance ◉ Application Server Response. Answer: Time for the application server to process a request and render the resultant page
◉ Network latency and throughput. Answer: Time for the network to pass your request to the server and the response back ◉ Instance cache. Answer: Amount of system resources available for processing ◉ • Ping
- Traceroute. Answer: Two methods of troubleshooting network response times ◉ Normal Ping time. Answer: >100ms for US, >150ms for Europe or Asia. Anything over 250ms is cause for concern ◉ Actions that cause a purge and rebuild of system cache. Answer: • Adding/updating system properties
- Adding/updating dictionary entries
- Committing update sets
- Adding or updating translations ◉ • Service Disruption
- Scheduled Maintenance. Answer: Two situations where the Advanced High Availability - AHA process is invoked
