Select the recommended approach to Domain Separation
Answer : D
ServiceNow recommends a domain separation approach that maximizes the use of standard configurations while minimizing custom configurations. This approach ensures maintainability, scalability, and ease of upgrades. The recommended approach is:
* 80% or more Standard: Utilizing out-of-the-box (OOTB) configurations as much as possible to leverage ServiceNow's built-in capabilities and best practices.
* 15% or more data-driven: Using data-driven configurations to adapt to specific business needs without extensive custom coding.
* Less than 5% Configuration: Minimizing custom configurations to reduce complexity and potential issues during upgrades.
This strategy aligns with ServiceNow's best practices for domain separation, ensuring that the system remains robust and easier to manage.
1: ServiceNow Domain Separation Best Practices 2: Understanding Domain Separation in ServiceNow
The Default domain should be specifically used for which purposes?
Choose 2 answers
Answer : A, C
The Default domain in ServiceNow is specifically used for the following purposes:
1. Help identify integrations that are incorrectly creating global data: The Default domain can be used to track and identify any integrations that are mistakenly creating data in the global domain instead of the intended specific domain. This helps in maintaining data integrity and ensuring that data is correctly segregated.
2. Capture records with no domain on tables that should not have global data: The Default domain is also used to capture records that do not have a domain specified on tables where global data should not be present. This ensures that such records are not incorrectly placed in the global domain, maintaining the separation and security of data.
For more detailed information, you can refer to the following resources:
* ServiceNow Support Article on Domain Separation
* Developing Domain-Separated Applications
In a new domain separated instance, which data will a user in customer Domain X definitely have visibility to?
Choose 2 answers
Answer : C, E
In ServiceNow, domain separation is used to segregate data, processes, and administrative tasks into logical groupings called domains. This allows for control over data visibility and operations within an instance. When it comes to data visibility:
* Domain X: A user in Domain X will definitely have visibility to their own domain, as this is the primary context in which they operate1.
* Child domains of Domain X: Users can view data in their home domain (Domain X) and any child domains of that home domain. This is because child domains inherit permissions and visibility from their parent domains, allowing users in a parent domain to see data in the child domains1.
However, users do not have access to data present in their parent domains or other unrelated domains by default. The primary domain and default domain are typically reserved for global or top-level administrative purposes and are not automatically visible to users in customer domains unless specific permissions are granted12.
It's important to configure domain separation carefully to ensure that users have the appropriate level of access to data necessary for their roles while maintaining the security and integrity of the data across the instance31.
Given a parent and child domain, explain data accessibility between domains.
Answer : B, D
In ServiceNow's domain separation model, data accessibility is designed to maintain the integrity and segregation of data across different domains. Here's how data accessibility works between parent and child domains:
* The parent users can access all child data: Users in a parent domain have visibility into the data of their child domains. This is because the parent domain is considered to have a higher level of data access privilege, allowing it to oversee and manage the data within its child domains1.
* The parent users can access all child data, but cannot access domains contained in the child domain: While parent domain users can access data in their immediate child domains, they cannot access data in ''grandchild'' domains or any domains that are further nested within a child domain. This maintains a level of data isolation and ensures that users only have access to the data they are permitted to view and manage1.
The options stating that both parent and child users can access each other's data (A) and that child users can access all parent data are incorrect. The domain separation model is hierarchical, not reciprocal, meaning that child domains do not have inherent access to parent domain data, and access between domains is not automatically bidirectional1.
For detailed information on domain separation and data accessibility, ServiceNow provides extensive documentation and best practices, which can be referenced for a deeper understanding of these concepts12
Given TOP as a parent domain for MSP, ACME, and Initech, and MSP contains TOP What additional domain configuration is required for UserA in MSP to read records in ACME?
Answer : C
In ServiceNow, domain separation is used to manage data visibility and access control in a multi-tenant environment1. The 'contains' relationship in domain separation defines a hierarchy where a parent domain contains child domains, and by default, users in a parent domain can see the records in child domains1.
Given that TOP is the parent domain for MSP, ACME, and Initech, and MSP contains TOP, UserA in MSP would already have visibility into TOP. However, for UserA to read records in ACME, additional configuration is required because ACME is not a child domain of MSP by default.
The correct action is to add visibility to ACME for UserA . This is typically done by configuring the user's domain membership or by adjusting the domain visibility settings to include ACME for UserA. This ensures that UserA can access records in ACME while still being primarily associated with the MSP domain1.
The 'contains' relationship between MSP and ACME (A) is not necessary because it would imply a hierarchical relationship that does not reflect the given structure. Adding both visibility to ACME for UserA and contains between MSP and ACME (B) is also not required and could potentially create an incorrect domain hierarchy. No additional configurations (D) would not suffice as it would not grant UserA the access needed to read records in ACME.
What domain must administrators choose to apply an Updates Set?
Answer : A
In ServiceNow, when applying an Update Set, administrators must select the Global domain. This is because Update Sets are designed to be applied from the Global domain to ensure that the changes are captured and can be moved across the instance without being restricted by domain separation1. The Global domain is the default domain where all the configuration records are created and where administrators typically work unless they switch to another domain for specific tasks1.
The Update Set system in ServiceNow is a mechanism for grouping and moving customizations from one instance to another or within the same instance. It captures the configuration changes made by administrators and bundles them into a set that can be transferred and applied elsewhere. Since the Global domain is the highest level in the domain hierarchy and is not restricted by domain-specific rules, it is the appropriate choice for applying Update Sets to ensure that the changes are universally available across all domains within the instance
What is delegated administration?
Answer : C
Delegated administration in ServiceNow allows tasks and approvals to be temporarily handled by another user. This functionality is particularly useful in scenarios where the primary user is unavailable, ensuring that workflows and processes continue without interruption. It helps maintain efficiency and continuity in service management by allowing designated users to take over specific responsibilities temporarily.
* ServiceNow Product Documentation on Delegated Administration1
* ServiceNow Knowledge Base on Delegated Approvals and Tasks2