ServiceNow provides multiplesecurity-related modulesthat aSystem Administratorfrequently uses to manage access, authentication, and overall system security.
Why These Options Are Correct?A. System Properties > Security
This module allowsadministrators to configure general security settings, including password policies, session timeout, and encryption settings.
It helps manage security parameters at a system-wide level.
E: System Security > Access Control (ACL)
Access Control Lists (ACLs)define what data users can access, modify, and delete within the instance.
ACLs operate at thetable, field, and record levels, ensuring proper role-based access control (RBAC).
This is one of themost commonly usedsecurity modules by admins.
G: System Security > High Security Settings
High Security Settings (previously known as Security Hardening)enforce strict security controls, such as requiring multi-factor authentication (MFA) and enforcing strict password policies.
It is often used for compliance withsecurity regulationslike HIPAA, GDPR, and ISO 27001.
Why the Other Options Are Incorrect?B. Utilities > Migrate Security
This optiondoes not existin ServiceNow. There is no"Migrate Security"under Utilities.
C: System Security > Security
There is no"System Security > Security"module in ServiceNow. The correct structure isSystem Security > Access ControlorSystem Properties > Security.
D: Self-Service > My Access
This is aself-service modulefor end users to request and review their access.
It isnota tool thatSystem Administratorsuse to manage security settings.
F: Password Management > Security Questions
This is used to configuresecurity questions for password recoverybut isnot a core security modulethat admins frequently use.
General Security Settings in ServiceNow
ServiceNow Access Control (ACL) Best Practices
ServiceNow System Security and Role Management
References to Official Certified System Administrator (CSA) Documentation:

Explanation
The activity formatter provides an easy way to track items not saved with a field in the record, such as journal fields like comments and work notes1.
ReferencesFormatters and Related Lists

Flow Designeris ano-code/low-codeautomation tool in ServiceNow that enables users toorchestrate business processes across different serviceswith minimal technical knowledge. It allowsnon-technical usersto build complex workflows using drag-and-drop functionality.
No-Code/Low-Code Automation
Users candesign, test, and managebusiness processeswithout coding skills.
Actions can be executedsequentially or conditionallybased on logic.
Integration with ServiceNow Applications
Flow Designer works withIntegrationHub, allowing ServiceNow to interact with external systems like Slack, Microsoft Teams, and Jira.
Trigger-Based Execution
Flows can be triggeredby conditions, schedules, or user actions.
Prebuilt Spokes & Actions
ServiceNow providesprebuilt "Spokes"with reusable actions that simplify workflow automation.
A: Flow Manager(Incorrect)
No such module called "Flow Manager" exists in ServiceNow.
C: Flow Editor(Incorrect)
The term "Flow Editor" is not used in ServiceNow; the correct name isFlow Designer.
D: Workflow Editor(Incorrect)
Workflow Editoris part of the olderLegacy Workflow Engine, which requires scripting and is not recommended for no-code automation.
E: Workflow Designer(Incorrect)
This is not an official ServiceNow tool; Flow Designer has replaced older workflow tools for modern automation needs.
Flow Designer Overview:https://docs.servicenow.com/en-US/bundle/utah-automation/page/administer/flow- designer/concept/flow-designer.html Building Flows in Flow Designer:https://docs.servicenow.com/en-US/bundle/utah-automation/page/administer
/flow-designer/task/t_CreateFlow.html
Key Features of Flow Designer:Explanation of Incorrect Options:Official References from Certified System Administrator (CSA) Documentation:

The Customer Actions feature in the Security Center allows administrators to take targeted actions such as reviewing privileged user access and managing accounts that might pose a risk. It is specifically designed to enable organizations to identify and remediate risks associated with user privileges, such as excessive access rights or orphaned privileged accounts. This feature aggregates risk data and prompts action items, allowing administrators to review, approve, or revoke privileged access based on current organizational policies.
While Security Hardening focuses on platform configurations and the Security Posture Console provides an overview of security metrics and trends, Customer Actions is the practical tool for directly managing and reviewing privileged access to ensure least privilege principles are enforced.
References:
ServiceNow Security Operations Product Documentation, Security Center > Customer Actions ServiceNow System Administrator Study Guide, Security Operations Chapter ServiceNow Docs: Customer Actions