ServiceNow CAD Application Security Quiz

1. True or False: Using sys_id values directly in URLs without proper validation is a secure practice.

True

False

2. True or False: Regular security audits and vulnerability assessments are essential for maintaining ServiceNow application security.

True

False

3. What does the principle of 'Defense in Depth' recommend for application security?

Using only one security control

Implementing multiple layers of security controls

Relying solely on network firewalls

Disabling all external integrations

Submit

5. Which of the following is NOT a recommended practice for securing ServiceNow APIs?

Implementing rate limiting

Using API keys in plain text URLs

Enabling API authentication

Validating all input parameters

6. True or False: ServiceNow automatically prevents all security vulnerabilities without developer intervention.

True

False

7. Which principle ensures that users can only access data necessary for their job function?

Principle of least privilege

Defense in depth

Zero-trust architecture

Network segmentation

Submit

9. What is the primary benefit of implementing multi-factor authentication (MFA) in ServiceNow?

Reduces database query time

Increases user convenience

Adds an additional security layer beyond passwords

Encrypts all outgoing emails

10. Which attack vector exploits the trust between a user and a web application?

Distributed Denial of Service (DDoS)

Cross-Site Request Forgery (CSRF)

Buffer overflow

Port scanning

11. Which authentication method in ServiceNow provides the highest security for external integrations?

Basic authentication with plain text credentials

OAuth 2.0 with token-based access

Session cookies stored in local storage

API keys transmitted in URL parameters

Submit

13. In ServiceNow, what is the purpose of access control lists (ACLs)?

To monitor network traffic

To define permissions for tables, fields, and records

To encrypt user passwords

To schedule automated backups

14. Which encryption standard is recommended for protecting data in transit in ServiceNow?

MD5 hashing

TLS 1.2 or higher

Base64 encoding

ROT13 cipher

15. What does SQL injection target in web applications?

User interface rendering

Database queries through unvalidated input

JavaScript execution only

CSS styling frameworks

16. True or False: Storing passwords in plain text in a ServiceNow database is a secure practice.

True

False

Submit

18. Which ServiceNow feature allows you to prevent unauthorized data exposure at the field level?

Table encryption

Field-level security (FLS)

Data masking only

Network firewalls

19. What is the primary purpose of role-based access control (RBAC) in ServiceNow?

To encrypt all database records

To restrict user access based on assigned roles and permissions

To monitor all user login attempts

To automatically backup sensitive data

ServiceNow CAD Application Security Quiz

1. True or False: Using sys_id values directly in URLs without proper validation is a secure practice.

2.

What first name or nickname would you like us to use?

2. True or False: Regular security audits and vulnerability assessments are essential for maintaining ServiceNow application security.

3. What does the principle of 'Defense in Depth' recommend for application security?

4. ServiceNow's ______ feature allows administrators to define custom security policies for sensitive data.

5. Which of the following is NOT a recommended practice for securing ServiceNow APIs?

6. True or False: ServiceNow automatically prevents all security vulnerabilities without developer intervention.

7. Which principle ensures that users can only access data necessary for their job function?

8. In ServiceNow, the ______ table tracks all user login activities for audit purposes.

9. What is the primary benefit of implementing multi-factor authentication (MFA) in ServiceNow?

10. Which attack vector exploits the trust between a user and a web application?

11. Which authentication method in ServiceNow provides the highest security for external integrations?

12. Secure coding practices in ServiceNow include avoiding hardcoded ______ in scripts.

13. In ServiceNow, what is the purpose of access control lists (ACLs)?

14. Which encryption standard is recommended for protecting data in transit in ServiceNow?

15. What does SQL injection target in web applications?

16. True or False: Storing passwords in plain text in a ServiceNow database is a secure practice.

17. Cross-Site Scripting (XSS) vulnerabilities occur when developers fail to ______ user input.

18. Which ServiceNow feature allows you to prevent unauthorized data exposure at the field level?

19. What is the primary purpose of role-based access control (RBAC) in ServiceNow?