ServiceNow Updated CIS-HR Exam Questions and Answers by lily-mae

Comprehensive and Detailed Explanation: In the HRSD framework, security is often managed at the Center of Excellence (COE) level. When a security policy is configured for a parent COE (such as HR Core Case), you have the option to ensure that child COEs inherit the parent ' s security policy . This inheritance model ensures that strict data access controls are consistently applied across all sub-categories of HR services without requiring the administrator to manually create identical policies for every single table. For example, if a policy restricts access to the " Employee Relations " parent COE to only a specific group of senior investigators, all child tables under that COE will automatically respect those restrictions. This reduces administrative overhead and significantly lowers the risk of data leakage caused by forgetting to secure a newly created sub-table or service category.

Comprehensive and Detailed Explanation: The Restricted Caller Access (RCA) feature is vital for protecting the integrity of scoped applications like HR. When the plugin is first activated or a new scoped application is installed, the default value for the Caller Access field is set to " Caller Tracking " . In " Caller Tracking " mode, the system allows cross-scope calls (e.g., a Global script trying to read an HR table) but records every instance of these calls in the RCA table. This allows administrators to monitor which parts of the platform are interacting with the HR scope without breaking existing functionality immediately. Once the implementation team has reviewed the tracked calls and determined which ones are legitimate, they can move to a " Caller Restriction " mode, where only specifically " Allowed " records in the RCA list can successfully execute cross-scope operations, thereby fully securing the HR data.