SNOW-CAD Practice Test 11 — 15 Questions

Question 1

Refer to the exhibit. A UI Policy is defined on the Incident table. When will the 'assigned_to' field be hidden?

Accepted Answer

When the incident state is 1.. Option A is correct because the UI Policy in the exhibit is configured with a condition that hides the 'assigned_to' field when the 'state' field equals 1 (typically 'New'). UI Policies run client-side and evaluate the condition in real time; when the condition is true, the field is hidden. The exhibit shows the condition 'state = 1' with the 'Hidden' attribute checked, so the field is hidden only when the incident state is 1.

Answer

Never.

Answer

Always.

Answer

When the incident state is not 1.

Question 2

A developer needs to display a warning message to the user when the 'priority' field is changed to '1 - Critical'. Which TWO client-side implementations can achieve this?

Accepted Answer

UI Policy with condition: 'Priority changes' and action script to call g_form.showFieldMsg(). Option B is correct because a UI Policy with the condition 'Priority changes' triggers an action script when the priority field is modified, allowing the use of `g_form.showFieldMsg()` to display an inline warning message on the field. Option E is correct because an onChange client script fires when the 'priority' field changes, and within it you can check `newValue` against '1 - Critical' and call `g_form.showFieldMsg()` to show the warning. Both are client-side implementations that respond to field changes without a server round-trip.

Answer

Business Rule with 'when to run' set to 'before' and script to call g_scratchpad.message

Answer

onLoad client script that checks the current value of priority and shows a message

Answer

Data Policy with condition on priority field and message set

Question 3

Which of the following is a best practice when creating REST API endpoints?

Accepted Answer

Use versioning in the API path.. Versioning the API path (e.g., /api/now/v1/incident) is a best practice to manage changes without breaking existing consumers.

Answer

Use GET methods for data modification.

Answer

Pass sensitive data in URL parameters.

Answer

Return all data without pagination.

Question 4

A developer implemented an ACL to restrict read access on the 'incident' table. The condition script checks if the user is a member of the 'incident_manager' group. However, users who are not in the group are still able to see incidents. What is the most likely reason?

Accepted Answer

There is another ACL with a lower order that grants read access to all users, and the evaluation never reaches the scripted ACL.. Option A is correct because ACLs in ServiceNow are evaluated in order of their 'Order' field (lower numbers first). If a lower-order ACL grants read access to all users, the evaluation stops at that ACL and never reaches the scripted ACL that restricts access to the 'incident_manager' group. This is the most common reason for an ACL appearing to not work — a broader, higher-priority ACL is allowing access before the restrictive one is evaluated.

Answer

The ACL is cached and users need to log out and back in for changes to take effect.

Answer

The condition script returns 'true' for users in the group but does not return 'false' for others, so the ACL defaults to 'no decision' and access is allowed.

Answer

The ACL is set to 'Inactive' so it does not apply, leaving access open.

Question 5

A developer needs to create a record in the 'task' table when a specific condition is met in a Business Rule. The new record should be linked back to the current record via a reference field. What is the best practice to ensure the new record is created in the same transaction?

Accepted Answer

Use GlideRecord with newRecord() and set values, then call insert().. Option A is correct because using GlideRecord with newRecord() and insert() within the same Business Rule ensures the new 'task' record is created in the same database transaction as the current record. This guarantees atomicity: if the insert fails, the entire transaction rolls back, preventing orphaned records. The reference field linking back to the current record is set synchronously before the insert, maintaining data integrity.

Answer

Use Flow Designer to create the record asynchronously.

Answer

Use the GlideRecord updateMultiple() method.

Answer

Call a Scripted REST API to insert the record.

Question 6

A service catalog item has a variable set that includes a reference field to the 'cmdb_ci' table. The requirement is to show only 'Server' type CI's in the reference field. Which approach should be used?

Accepted Answer

Set a Reference Qualifier on the variable definition that uses the condition 'sys_class_name=Server'.. Option B is correct because a Reference Qualifier on a variable definition allows you to filter the records displayed in a reference field using a condition string. By setting the condition 'sys_class_name=Server', only CI records with that specific sys_class_name will appear, which directly meets the requirement to show only 'Server' type CIs.

Answer

Create a UI Policy that sets the field as read-only and uses a condition to filter.

Answer

Write a Client Script on load that sets the reference qualifier using setRefQual().

Answer

Use a Data Policy to enforce a condition on the field.

Question 7

A company has a requirement that the 'state' field of an incident cannot be changed from 'In Progress' to 'Resolved' if the 'category' field is empty. This validation must be enforced server-side to prevent data integrity issues. Which implementation should be used?

Accepted Answer

Create a 'before' Business Rule that checks if the state is changing to 'Resolved' and if category is empty, aborts the update with an error message.. Option C is correct because a Business Rule with 'before' 'update' and a condition checking the change, then using gs.addErrorMessage() and returning false, will prevent the update server-side. Option A (Client Script) runs client-side and can be bypassed. Option B (ACL) controls read/write access, not specific value transitions. Option D (Data Policy) makes category mandatory, which conflicts with existing records that might have empty category on other states.

Answer

Make the 'category' field mandatory using a Data Policy.

Answer

Configure an ACL on the 'state' field to deny write access when category is empty.

Answer

Create a Client Script on 'state' change that checks if category is empty and shows an error message.

Question 8

A developer is designing a solution to allow users to request access to specific applications through a Service Catalog. Each application can be requested by multiple users, and each user can request multiple applications. The request must capture the user's business justification and the date needed. The developer needs to model the data. Which database schema design best adheres to ServiceNow best practices?

Accepted Answer

Create a custom table 'u_application_request' with fields: user (reference to sys_user), application (reference to custom application table), justification (string), date_needed (date). Option C is correct because it creates a dedicated 'u_application_request' table with reference fields to both sys_user and the custom application table, plus justification and date_needed fields. This models the many-to-many relationship properly with additional attributes, adhering to ServiceNow best practices of using reference fields for relationships and avoiding unstructured data storage.

Answer

Add a string field on the Application table that stores a comma-separated list of user sys_ids

Answer

Add a multi-reference field on the User table that lists all requested applications

Answer

Create one table for all requests with a reference to both user and application, but store justification and date needed separately in a different table

Question 9

A developer is building a Flow in Flow Designer that needs to update an incident record when a certain event occurs. The flow uses a 'Update Record' action. However, the incident record is not being updated even though the flow runs without errors. What could be the issue?

Accepted Answer

The flow's application scope does not have write access to the Incident table. Option C is correct because the flow's application scope determines the permissions granted to the flow when it executes. Even though the flow runs without errors, if the application scope does not have write access to the Incident table, the 'Update Record' action will silently fail to persist changes. This is a common misconfiguration where the scope's ACLs or table-level permissions are not properly set, causing updates to be discarded without raising an error.

Answer

The flow trigger is set to 'On Created' but the incident already existed

Answer

The flow is using a 'Lookup Record' instead of 'Update Record'

Answer

The 'Update Record' action is referencing the wrong table

Question 10

A developer needs to capture the time when a field (assigned_to) was last changed. Which approach should be used?

Accepted Answer

Create a business rule on 'after' update that sets a 'last_assigned' field when assigned_to changes.. Option B is correct because a business rule configured on the 'after' update event can check if the 'assigned_to' field value has changed and then set a 'last_assigned' field to the current date/time. This approach is native to the platform, runs server-side, and ensures the timestamp is captured reliably without external dependencies.

Answer

Create a calculated field using a formula.

Answer

Create a database trigger to log the change.

Answer

Use a dictionary override to enable auditing.

Question 11

Which TWO statements about update sets are correct? (Choose two.)

Accepted Answer

Update sets must be explicitly exported and then imported into the target instance.. The correct options are B and D. Update sets track changes to application configurations. Option B is correct: update sets are not automatically exported; manual action is required. Option D is correct: update sets can include changes from multiple tables, including system properties. Option A is incorrect: update sets are intended for migrating customizations, not all out-of-box records. Option C is incorrect: update sets do not capture individual ACL condition scripts in a transactional way; they capture the full ACL record. Option E is incorrect: update sets move changes to target instances; they do not move data.

Answer

Update sets capture changes to ACLs, but each condition script is captured as a separate record.

Answer

Update sets capture all changes made to an instance, including out-of-box records.

Answer

Update sets are used to move data, such as user records, between instances.

Question 12

A developer needs to create a UI Policy that hides a field when a checkbox is checked. The UI Policy has a condition: 'State is 2'. The field should be hidden when the checkbox is checked and state is 2. What is the correct approach?

Accepted Answer

Set condition to 'state=2' and add a script action that sets the field's visible attribute based on the checkbox value. UI Policies have both a condition and actions. The script action can evaluate additional conditions. The best practice is to set the condition to the primary filter (state=2) and add a script action to set the field's visibility based on the checkbox. Option B describes that correctly.

Answer

Add both conditions in the condition builder: checkbox=true AND state=2

Answer

Set condition to 'state=2' and add a reverse if false action with a condition on the checkbox

Answer

Use a Client Script instead of UI Policy

Question 13

Which THREE of the following statements are true about ACLs? (Choose three.)

Accepted Answer

An ACL with 'require_role' set to true will only be checked after the user has at least one role in the ACL's role list.. Option A is correct because the 'require_role' attribute on an ACL record means the ACL rule is only evaluated after the system confirms the user has at least one of the roles listed in the ACL's role list. If the user has none of those roles, the ACL is skipped entirely, and the next ACL in the evaluation order is checked. This prevents unnecessary condition script execution for users who lack the prerequisite roles.

Answer

If no ACL is defined for a table, all users have access to all records.

Answer

ACLs are evaluated in a deterministic order based on the type (record, field, etc.) and the script condition.

Question 14

A developer reports that an after business rule on the Change Request table is running twice for each update. The business rule is not scheduled or async. Which is the most likely cause?

Accepted Answer

The business rule script updates the same record, causing a loop. Option C is correct because an after business rule that updates the same record it triggered on will cause the business rule to fire again on the subsequent update, creating a recursive loop. Since the rule is not scheduled or async, each update triggers the rule synchronously, and if the script performs a `current.update()` or similar operation on the same table, it re-fires the same business rule, leading to duplicate execution.

Answer

The business rule is set to run 'On Update' and also 'On Insert'

Answer

The business rule order is too high

Answer

The business rule exists in two different scoped applications

Question 15

The exhibit shows an ACL condition script intended to allow read access to an incident only if the user has the 'itil' role and is a member of the incident's assignment group. However, users who are members of the assignment group but do not have the 'itil' role are still able to read the incident. What is the most likely problem?

Accepted Answer

There is another ACL on the incident table that grants read access to users with the 'itil' role without the group membership check.. Option D is correct because ServiceNow ACLs are evaluated in a hierarchy: if any ACL on the same table and operation grants access, the user is allowed. Even if the intended ACL correctly denies access when the group membership check fails, another ACL that grants read access to users with the 'itil' role (without the group condition) will override the denial. The condition script in the intended ACL never gets a chance to block the user because the granting ACL is evaluated first and returns true.

Answer

The condition script must return true explicitly for the ACL to deny access.

Answer

The ACL is set to condition type 'script' but the script is not structured correctly.

Answer

The isMemberOf method requires a group sys_id, not a user ID.

SNOW-CAD Practice Test 11 — 15 Questions

Exhibit

SNOW-CAD Practice Test 11 — 15 Questions

Exhibit