entryPractice AvailableBlueprint updated January 2026

CSA - Certified System Administrator

What the Certified System Administrator exam really tests, how the platform layers fit together, worked scenarios, and sourced 2026 exam logistics. Every CSA practice question here is free.

By the SNReady teamLast reviewed

60
Exam Questions
90 min
Duration
Not published
Cut Score
$300
Exam Cost
216
Practice Questions
216
Free Questions

ServiceNow does not publish the cut score, and the official exam blueprint says it is not always 70%. Exams are registered and paid for in ServiceNow University, scheduled through Pearson VUE (source).

The Certified System Administrator exam is usually described as the “entry” ServiceNow certification, which makes people underestimate it. The blueprint doesn't test whether you can find a menu. It tests whether you understand where a piece of behaviour belongs: in the form, on the server, in an access rule, in the data model, or in a package of configuration that moves between instances. This page explains that model, maps it to the official domains, and walks through the kind of scenarios the exam builds its questions around.

Blueprint

What the CSA exam tests

ServiceNow publishes the CSA domains and their weights in the CSA exam blueprint (KB0011554, updated January 2026). Six domains make up the exam:

CSA blueprint domain weightsDatabase Management and Platform Security30%Configuring Applications for Collaboration20%Self Service & Automation20%Data Migration and Integration13%Instance Configuration10%Platform Overview and Navigation7%
Domain weights from the official CSA exam blueprint (KB0011554, updated January 2026).

1. Platform Overview and Navigation (7%)

  • •ServiceNow Platform overview
  • •Platform capabilities and services
  • •The ServiceNow Instance
  • •Next Experience Unified Navigation

2. Instance Configuration (10%)

  • •Installing applications and plugins
  • •Personalizing/customizing the instance
  • •Common user interfaces in the Platform

3. Configuring Applications for Collaboration (20%)

  • •Lists, Filters, and Tags
  • •List and Form anatomy
  • •Form Configuration
  • •Form templates and saving options
  • •Advanced Form Configuration
  • •Task Management
  • •Visual Task Boards (VTBs)
  • •Visualizations, Dashboards, and Platform Analytics
  • •Notifications

4. Self Service & Automation (20%)

  • •Knowledge Management
  • •Service Catalog
  • •Workflow Studio
  • •Virtual Agent

5. Database Management and Platform Security (30%)

  • •Data Schema
  • •Application/Access Control
  • •Importing Data
  • •CMDB and CSDM
  • •Security Center
  • •Shared Responsibility Model

6. Data Migration and Integration (13%)

  • •UI Policies
  • •Business Rules
  • •System update sets
  • •Scripting in ServiceNow

Two things stand out. First, Database Management and Platform Security is 30%, the largest domain by far. It groups the data schema, application and access control, importing data, the CMDB and CSDM, Security Center and the shared responsibility model. Second, Platform Overview and Navigation is only 7%. If your preparation has mostly been clicking around the UI, you have prepared for the smallest slice of the exam.

The blueprint lists Welcome to ServiceNow and ServiceNow Administration Fundamentals as suggested courses. Use the blueprint objectives as your checklist: if you can't explain an objective to a colleague, that is your next study block.

Mental model

How the platform concepts fit together

Most CSA questions become easier once you stop treating features as a list and start treating them as layers. Each layer answers a different question, and the exam regularly offers a correct-sounding answer from the wrong layer.

How a CSA-level change travels through the platform layersExperienceNext Experience UI, lists, forms, portals, Service CatalogForm logic (browser)Client scripts and UI policies: shape what the user seesServer logicBusiness rules and flows: run whatever the entry pointAccess controlACLs decide who can read or write tables, fields, recordsDataTables, the CMDB, and the CSDM model on top of itData inImport sets+ transform mapsConfig outUpdate sets moveconfigurationdev → test → prod
A simplified mental model, not an official ServiceNow diagram. The point: the further down a control sits, the more entry points it covers.

Form logic is for experience

Client scripts run in the browser. The documentation says they generally run on forms and search pages and not on lists (except onCellEdit), and states that “client scripts are not meant to protect unwanted access to data” (Client scripts). Use them, and UI policies, to make a form helpful, not to secure it.

Server logic is for consistency

A business rule is a server-side script that runs when records are displayed, inserted, updated, deleted or queried, and it applies consistently whether the record is reached through a form, a list or a web service (Business rules). That is why a rule that must always hold belongs on the server.

Access control is its own layer

ACLs control access to tables, fields, records and REST endpoints. If no ACL grants access, access is denied, and creating or changing ACLs requires the security_admin role (Access Control Lists).

The data model carries meaning

The CMDB stores configuration items and how they relate, and it can be populated by Discovery, IntegrationHub ETL or import sets, an external CMDB, or by hand (CMDB). CSDM is the data model ServiceNow says admins should follow when they set up products that use the CMDB (CSDM).

Two flows cross those layers. Data comes in through import sets: a data source defines what is imported, and every import into a production table needs at least one transform map (Import sets). Configuration moves out through update sets: a group of configuration changes you build on a non-production instance and move as a unit to other instances, with collisions resolved before you commit (Update sets).

Which logic runs for each way into a recordUser on a formUser editing a listIntegration via web serviceClient scripts / UI policiesforms onlyBusiness rules + ACLsapply to every entry point
Based on the business rules and client scripts documentation: client-side logic runs on forms (client scripts don't run on lists, except onCellEdit), while business rules apply to forms, lists and web services alike.

The self-service domain (20%) sits on top of all this. Service Catalog is a collection of catalog items, and you can publish several catalogs for different audiences (Service Catalog). Knowledge bases hold articles for self-help and troubleshooting (Knowledge Management). Flow Designer lets process owners automate approvals, tasks, notifications and record operations without code, and ServiceNow recommends it over legacy workflows for new processes in almost all cases (Flow Designer). The collaboration domain adds reporting: Platform Analytics visualizations replace Core UI reports and Performance Analytics widgets, and indicators record a measurement at regular intervals so you can see trends (Platform Analytics).

The question to ask on every scenario

“Which layer owns this?” Hiding a field for a role is experience. Preventing a role from reading a field is access control. Setting a value whatever the entry point is server logic. Getting 400 rows from a spreadsheet into a table is data in. Getting a new form layout from dev to prod is configuration out.

Worked scenarios

Industry scenarios, solved at the right layer

These are illustrative situations, not real exam questions. Each shows the reasoning an administrator should apply and the distinction the exam is probing.

Healthcare

A hospital wants nurses to stop seeing a diagnosis field on a shared request form

Ward staff and the clinical systems team both use the same request table. The team asks you to hide a sensitive field from nurses. Someone suggests a UI policy because it is quick to configure.

A UI policy or client script would hide the field on the form, but the documentation is explicit that client scripts are not a data-protection mechanism and don't run on lists (source). A field-level ACL controls access whatever the entry point (source). The right design is both: an ACL for protection, plus form logic only if the layout needs tidying.

What the exam is checking: Whether you can tell visibility (experience layer) apart from access (security layer).

Retail

A retailer needs 400 store locations loaded every week from a spreadsheet

The property team maintains store data in a spreadsheet and wants ServiceNow to stay in sync without anyone re-typing it.

This is an import problem, not a scripting problem. A data source defines what to import, a transform map maps it into the target table, and imports can be scheduled to run at a regular interval (source). Locations belong to the CSDM Foundation domain, the base reference data other domains depend on (source), so getting them right early saves clean-up later.

What the exam is checking: Knowing the import set → transform map path, and that imports into production tables need a transform map.

Banking

A bank changes an approval process in development and must promote it safely

Change control requires that nothing is configured directly in production. A new catalog form and its approval flow were built in the development instance.

Update sets are the platform's mechanism for grouping configuration changes and moving them between instances, and batched update sets let you preview and commit several together (source). The exam angle is about sequencing: build in non-production, move the configuration as a unit, and resolve collisions before committing.

What the exam is checking: Understanding what an update set is for and where development should happen.

Manufacturing

A plant wants equipment requests approved by the line manager, then routed to maintenance

Today requests arrive by email and get lost. The plant wants a catalog item, an approval, a task for maintenance and a notification to the requester.

A catalog item gives the request a structured front door (source). The approval, task and notification are exactly what Flow Designer is described as automating without code, and ServiceNow recommends it over legacy workflows for new processes (source). A business rule would be the wrong tool for a multi-step human process.

What the exam is checking: Picking the low-code automation tool for a process, and the catalog for the request intake.

Misconceptions

Common CSA misconceptions

Misconception

“You need 70% to pass.”

What the sources say

ServiceNow does not publish the cut score. Each exam is scored against a predetermined cut score that is not shared with candidates (ServiceNow Community, Jul 2026).

Misconception

“CSA is mostly navigation.”

What the sources say

Navigation is 7% of the blueprint; Database Management and Platform Security is 30% (CSA blueprint).

Misconception

“Hiding a field secures it.”

What the sources say

Client scripts are “not meant to protect unwanted access to data”; use ACLs or data policies to restrict sensitive fields (Client scripts).

Misconception

“I need an exam voucher first.”

What the sources say

Vouchers ended when exams moved to Pearson VUE; exams are now registered and paid for in ServiceNow University (ServiceNow Community, Jan 2026).

Logistics

CSA exam logistics in 2026

Booking and delivery

  • Exams are registered and paid for in ServiceNow University and scheduled through Pearson VUE, signing in with SSO. Exam vouchers no longer exist (ServiceNow Community, Jan 2026; see also this July 2026 thread).
  • Training: on-demand courses are free but don't include an exam attempt; instructor-led training is paid ($1,900 for 2 days, $2,700 for 3 days) and includes the first attempt (source). Sources differ on whether a course is mandatory: the January 2026 summary says completing the course unlocks eligibility, while a May 2026 reply describes the recommended courses as “not required but highly recommended” (CAD thread). Check the registration page for your exam.
  • Once registered, you must sit the exam within 90 days or the attempt is forfeited. Exam payments are non-refundable, but you can reschedule without a fee inside the rescheduling window (source).

CSA format, fees and scoring

  • 60 questions in 90 minutes, per a ServiceNow Community answer from 2020; confirm in the current blueprint (source).
  • Exam fee: $300 USD excluding tax. Retake fee: $150 USD (source).
  • ServiceNow doesn't publish the cut score: each exam is scored against a predetermined cut score that is not shared with candidates, and it is the same for everyone (ServiceNow Community, Jul 2026). Treat any “70% to pass” claim as a guess.
Minimum waiting periods between exam attemptsAttempt 1Attempt 2wait 3 daysAttempt 3wait 30 daysAttempt 4+wait 6 months each
Waiting periods between attempts, per the 2026 rules summarised on the ServiceNow Community.

On timing: a ServiceNow trainer on the Community suggests that, with the training done and good hands-on practice, 2–4 weeks of focused revision can be enough, and recommends practising in a Personal Developer Instance and focusing on concepts rather than memorising questions (ServiceNow Community, Jul 2026). For a full plan, read how to pass the CSA exam on your first attempt, and for what the whole journey costs, ServiceNow certification cost in 2026.

Practice

Test yourself on the right layer

Every CSA question on SNReady is free. Try the sample questions further down this page, then work through all free CSA practice questions by topic. When you get one wrong, ask which layer the correct answer lives in. That habit transfers to questions you haven't seen.

Sources

Every exam fact and product behaviour on this page links to one of these ServiceNow sources. Check them before you book: exam rules change between releases.

  1. CSA exam blueprint, KB0011554 (updated January 2026)
  2. Welcome to ServiceNow (Now Learning course page)
  3. ServiceNow Administration Fundamentals (Now Learning course page)
  4. Client scripts
  5. Classic business rules
  6. Explore Access Control Lists
  7. Import sets
  8. System update sets
  9. Exploring Service Catalog
  10. Knowledge Management
  11. Flow Designer
  12. Configuration Management Database (CMDB)
  13. Common Service Data Model (CSDM)
  14. Foundation domain in the CSDM model (Zurich)
  15. Security Center
  16. Platform Analytics and reporting
  17. “csa PREP”, ServiceNow Community SysAdmin forum, 2 Jul 2026
  18. Mark Roethof, “2026 exam vouchers, courses, exams & retakes – major changes explained”, ServiceNow Community, 18 Jan 2026
  19. “Exam vouchers eligibility”, ServiceNow Community, 6–8 Jul 2026
  20. “CAD Voucher”, ServiceNow Community Developer forum, 3 May 2026
  21. “CSA Exam” (cut score question), ServiceNow Community SysAdmin forum, 16 Jul 2026
  22. “Length in time of CSA exam”, ServiceNow Community, 25 Feb 2020

Practice by Topic

Focus on specific areas to strengthen your weak points.

Sample Practice Questions

Try a few questions to see what to expect on the CSA exam

View All Practice Questions

Every CSA question is free. No signup needed.

100% FREE — NO SIGNUP

CSA Is Free

All 216 practice questions and the timed mock exam are free, with detailed explanations. No payment, no login.

CSA is free. Next step: CAD or a CIS exam.

That's every CSA question. When you're ready for the next certification, each one is $9 for lifetime access, or get all 19 paid certifications for $49 (CSA stays free).

Ready to Start Practicing?

Begin with our free questions to assess your current knowledge level.