ServiceNow provides multiple security-related modules that a System Administrator frequently uses to manage access, authentication, and overall system security. Why These Options Are Correct? ✅ A. System Properties > Security This module allows administrators to configure general security settings, including password policies, session timeout, and encryption settings. It helps manage security parameters at a system-wide level. ✅ E. System Security > Access Control (ACL) Access Control Lists (ACLs) define what data users can access, modify, and delete within the instance. ACLs operate at the table, field, and record levels, ensuring proper role-based access control (RBAC). This is one of the most commonly used security modules by admins. ✅ G. System Security > High Security Settings High Security Settings (previously known as Security Hardening) enforce strict security controls, such as requiring multi-factor authentication (MFA) and enforcing strict password policies. It is often used for compliance with security regulations like HIPAA, GDPR, and ISO 27001. Why the Other Options Are Incorrect? ❌ B. Utilities > Migrate Security This option does not exist in ServiceNow. There is no "Migrate Security" under Utilities. ❌ C. System Security > Security There is no "System Security > Security" module in ServiceNow. The correct structure is System Security > Access Control or System Properties > Security. ❌ D. Self-Service > My Access This is a self-service module for end users to request and review their access. It is not a tool that System Administrators use to manage security settings. ❌ F. Password Management > Security Questions This is used to configure security questions for password recovery but is not a core security module that admins frequently use. Reference to Official Certified System Administrator (CSA) Documentation: General Security Settings in ServiceNow ServiceNow Access Control (ACL) Best Practices ServiceNow System Security and Role Management
