nerdexam
ServiceNow

CSA · Question #144

Your customer requires that they be able to monitor which users are performing impersonations in their instance. What would you do to meet that requirement?

The correct answer is C. Activate the glide.sys.log_impersonation prop. To monitor users performing impersonations, activate a specific system property that enables logging of these events.

Submitted by certguy· Apr 18, 2026Database Management and Platform Security

Question

Your customer requires that they be able to monitor which users are performing impersonations in their instance. What would you do to meet that requirement?

Options

  • AAdd the role Log Write [sn_log_write] to the Impersonator Group
  • BCreate user update set for impersonation tracking
  • CActivate the glide.sys.log_impersonation prop
  • DFrom User icon, select Elevate Roles
  • EOn the Impersonator role record, right click and select Create Log

How the community answered

(20 responses)
  • B
    5% (1)
  • C
    90% (18)
  • D
    5% (1)

Why each option

To monitor users performing impersonations, activate a specific system property that enables logging of these events.

AAdd the role Log Write [sn_log_write] to the Impersonator Group

Adding a role like `Log Write` grants permission to write to logs but does not automatically configure the system to log impersonation events.

BCreate user update set for impersonation tracking

Update sets are used to migrate configuration changes between instances, not for tracking real-time user activities like impersonations.

CActivate the glide.sys.log_impersonation propCorrect

Activating the `glide.sys.log_impersonation` system property enables the logging of impersonation events, recording which users are performing impersonations in the system logs, thereby allowing administrators to monitor this activity.

DFrom User icon, select Elevate Roles

Elevating roles is a temporary security measure to gain higher privileges for specific tasks, not a method for monitoring who performs impersonations.

EOn the Impersonator role record, right click and select Create Log

There is no standard 'Create Log' action directly on a role record that specifically configures impersonation logging; system properties control this behavior.

Concept tested: Impersonation logging configuration

Source: https://docs.servicenow.com/bundle/utah-platform-administration/page/administer/users-and-groups/task/impersonate-a-user.html

Topics

#Impersonation logging#System properties#Platform security#Monitoring

Community Discussion

No community discussion yet for this question.

Full CSA Practice