CH4: Access Controls Flashcards
What are the “CRUD” operations that can be preformed by an end user?
Create, Read, Update, Delete
True or False: In order to preform “CRUD” operations, an end user must be provided access to: User Authentication/Login, Application / Module Access, and Database Access.
TRUE
What does ACL stand for in regards to elevated user access?
Access Control List
True or False: An elevated privelege role only lasts for the duration of your user session.
True - Session timeout, logout, or impersonating another user removes the role.
When elevated privileges are activated, an ____________ will appear next to your user avatar.
Arrow
True or False: All admins having the security_admin role IS a best practice.
FALSE
___________ is a security rule defined to restrict the permissions of a user from viewing and interacting with data.
Acces Control
Acces control maye be set at the _____ level and/or the _______ level.
Row, Column
True or False: Most security settings are implemented using Access Controls.
TRUE
True or False: In addition to restricting CRUD operations, Access Controls can restrict ServiceNow-specefic operations on tables and fields.
TRUE
True or False: In the base system, all users with the admn role can impersonate security_admin.
False - only the default System Administrator
True or False: With System-created Access Controls, it is rare to have a table with no access control rules.
TRUE
Each Access Control rule specifies: A valid ________ - a valid action the system can take.
Operation
Each Access Control rule specifies: The ______ being secured.
Object
Each Access Control rule specifies: The ________ required to access the object.
Permissions
True or False: Access Control rules are defined for and applied to a specific table to that the rule is within the context of the table and the type of data stored.
TRUE
Access Control Rules: table.–None– applies to __________.
The entire table
Access Control Rules: table.field applies to _________________________.
One specific field on the table.
Access Control Rules: table.* applies to ____________________.
All other fields in the table not defined with a table.field rule (house.*)
True or False: When creating a .* access control, also creating a .–None– access control is a best practice as only the .–None– control grants access to records.
TRUE
True or False: When writing an ACL that mostly grants access, using only .–none– is a best practice.
TRUE
True or False: When writing an ACL that mostly denies access, using .–none– and .* is the best practice.
TRUE
True or False: A user only needs to pass either table or field ACL rules to access a record object.
False - A user most pass both
True or False: ACL rules for parent tables apply to any table that extends the parent table
TRUE
True or False: ACL rules for fields in a parent table apply to any table that extends the parent table
TRUE
