In ServiceNow, Application Access settings at the table level allow developers to control which operations from other application scopes can be performed on their application's tables. The specific database operations that can be controlled are:
Can read: Allows other application scopes to read records from the table.
Can create: Allows other application scopes to create new records in the table.
Can update: Allows other application scopes to modify existing records in the table.
Can delete: Allows other application scopes to delete records from the table.
Options A (Update) and B (Create) are correct because "Can update" and "Can create" are among the operations that can be controlled through Application Access settings.
Options C (Execute) and D (Query) are incorrect. While "Execute" pertains to the ability to run scripts or script includes, it is not a database operation controlled by Application Access but rather by script access settings. "Query" corresponds to reading data, which is governed by the "Can read" setting.
For more detailed information, refer to the official ServiceNow documentation on Application Access settings:
SERVICENOW.COM