ServiceNow provides multiple security-related modules that a System Administrator frequently uses to manage access, authentication, and overall system security.
Why These Options Are Correct?
✅ A. System Properties > Security
This module allows administrators to configure general security settings, including password policies, session timeout, and encryption settings.
It helps manage security parameters at a system-wide level.
✅ E. System Security > Access Control (ACL)
Access Control Lists (ACLs) define what data users can access, modify, and delete within the instance.
ACLs operate at the table, field, and record levels, ensuring proper role-based access control (RBAC).
This is one of the most commonly used security modules by admins.
✅ G. System Security > High Security Settings
High Security Settings (previously known as Security Hardening) enforce strict security controls, such as requiring multi-factor authentication (MFA) and enforcing strict password policies.
It is often used for compliance with security regulations like HIPAA, GDPR, and ISO 27001.
Why the Other Options Are Incorrect?
❌ B. Utilities > Migrate Security
This option does not exist in ServiceNow. There is no "Migrate Security" under Utilities.
❌ C. System Security > Security
There is no "System Security > Security" module in ServiceNow. The correct structure is System Security > Access Control or System Properties > Security.
❌ D. Self-Service > My Access
This is a self-service module for end users to request and review their access.
It is not a tool that System Administrators use to manage security settings.
❌ F. Password Management > Security Questions
This is used to configure security questions for password recovery but is not a core security module that admins frequently use.
Reference to Official Certified System Administrator (CSA) Documentation:
General Security Settings in ServiceNow
ServiceNow Access Control (ACL) Best Practices
ServiceNow System Security and Role Management