SNOW-CAD Practice Test 26 — 15 Questions

Question 1

A company uses a scoped application to manage IT equipment. The application has a client script that calls a GlideRecord query on a large table. Recently, the script started showing 'Script exceeded maximum execution time' errors. The developer checks the Studio debugger and sees the query runs on the entire table without filters. The developer needs to fix this issue. The environment is production, and downtime must be minimized. Which course of action should the developer take?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Move the query to a Business Rule and use a client-callable API.. Moving the query to a Business Rule and using a client-callable API (like GlideAjax) offloads the heavy processing to the server side, avoiding client-side timeouts. Option B is incorrect because increasing the script execution timeout only delays the issue and does not fix the root cause of the query running without filters. Option C is incorrect because GlideAggregate is used for aggregation functions like count, sum, etc., not for retrieving records; the problem is an unfiltered query, not aggregation. Option D is incorrect because adding an index helps with performance for filtered queries, but if the query has no filters, an index does not help as it still needs to scan the entire table.

Answer

Increase the script execution timeout in system properties.

Answer

Use GlideAggregate with multiple queries.

Answer

Add an index on the table.

Question 2

A company is redesigning its service catalog to improve user experience. One of the catalog items, 'Request New Software', contains 10 variables including software category, license type, and required approvals. The variable fields should dynamically show/hide and become mandatory based on previous selections. Currently, the catalog item uses a single, complex catalog client script that handles all visibility and mandatory conditions. This script has become difficult to maintain, and users experience delays when interacting with the form. The IT team wants a more efficient and maintainable solution. What should the administrator do?

Accepted Answer

Implement UI policies for visibility and mandatory conditions, and keep a streamlined catalog client script only for dynamic field values or complex calculations.. UI policies are the declarative way to handle field visibility and mandatory conditions in ServiceNow, making maintenance easier and improving performance by reducing client-side script execution. A streamlined catalog client script can still be used for complex dynamic value calculations that UI policies cannot handle. Option A is incorrect because business rules run server-side and cannot control client-side form behavior. Option C is incorrect because UI policies cannot replace all client scripts; some complex logic still requires scripts. Option D is incorrect because a single complex script remains difficult to maintain and causes performance issues.

Answer

Move the entire logic to a business rule that runs on the server side to reduce client-side processing.

Answer

Convert all conditions to UI policies to replace the catalog client script entirely.

Answer

Refactor the existing catalog client script into a single, more efficient script with optimized conditions.

Question 3

A developer is implementing a custom integration using the ServiceNow REST API Explorer. The endpoint requires an API key in the header. Which approach should be used to secure the API key?

Accepted Answer

Create an authentication profile of type 'API Key' and reference it in the REST message.. The ServiceNow REST API Explorer and REST messages support authentication profiles, which securely store and manage API keys. By creating an 'API Key' authentication profile and referencing it in the REST message, the API key is automatically injected into the request header without exposing it in scripts or system properties. This approach follows ServiceNow best practices for credential management and ensures the key is encrypted and centrally managed.

Answer

Hardcode the API key in the script.

Answer

Store the API key in a system property encrypted.

Answer

Use a REST message variable and set the header directly.

Question 4

A ServiceNow instance integrates with an external HR system via REST. The integration retrieves employee records and updates the 'sys_user' table. Recently, the integration started failing with '403 Forbidden' errors. The REST API endpoint and authentication credentials have not changed. Which action should the administrator take first to resolve the issue?

Accepted Answer

Check the Access Control List (ACL) rules on the sys_user table for the integration user.. A 403 Forbidden error indicates that the server understood the request but is refusing to authorize it. Since the REST endpoint and credentials haven't changed, the most likely cause is that the integration user's access rights within ServiceNow have been altered, specifically the Access Control List (ACL) rules on the 'sys_user' table. The administrator should first check these ACLs to ensure the integration user still has the necessary read/write permissions.

Answer

Review the inbound REST message configuration for rate limiting settings.

Answer

Reset the password for the integration user in the external system.

Answer

Verify the REST API endpoint URL in the integration record.

Question 5

An application scope includes a Business Rule that runs on the 'before' operation of the Incident table. It attempts to set the 'assignment_group' based on the caller's company. However, the assignment is not being applied. Which is the most likely cause?

Accepted Answer

The field 'assignment_group' is not in the current scope's accessible table columns due to cross-scope privilege. In ServiceNow, cross-scope privilege restrictions prevent a scoped application from accessing or modifying columns in the Incident table that are not explicitly granted via the application's scope. Even though the Business Rule runs on the 'before' operation, if the 'assignment_group' field is not in the application's accessible table columns, the assignment will silently fail. This is a common issue when a scoped application attempts to interact with global table fields without proper cross-scope access.

Answer

The Business Rule is set to 'async' which delays execution

Answer

The script uses 'current.assignment_group = something' without calling setValue

Answer

The Business Rule is set to run on 'display' instead of 'update'

Question 6

A developer wants to use ServiceNow Studio to create a client script that runs when a form loads and sets a field value based on the current user's department. Which type of client script should be used?

Accepted Answer

onLoad client script. An onLoad client script runs automatically when a form is opened, making it the correct choice for setting a field value based on the current user's department at the time the form loads. This script type executes in the browser after the form data is retrieved but before the user interacts with the form, allowing immediate field population.

Answer

onChange client script

Answer

onSubmit client script

Answer

onCellEdit client script

Question 7

A large enterprise uses ServiceNow for IT service management. The company has recently implemented a custom integration that pulls incident data from an external monitoring system via REST every 5 minutes. The integration runs as a scheduled job that creates new incidents and updates existing ones. Over the past week, users have reported that the system becomes sluggish during peak hours (9-11 AM). The performance team identifies that the integration job is causing high database contention. The job currently queries the incident table for existing records using a condition on the 'source' field and then updates or inserts records in a loop. Each job run processes around 500 records. The incident table has several million records. The developer is asked to optimize the integration. What should the developer do first?

Accepted Answer

Add an index on the 'source' field in the incident table.. The query on the 'source' field without an index is causing full table scans, leading to high database contention. Adding an index on the 'source' field will drastically reduce the cost of looking up existing records, improving performance significantly. The other options are either less effective or address secondary concerns.

Answer

Increase the scheduled job interval to every 10 minutes to reduce frequency.

Answer

Modify the scheduled job to use GlideAggregate to check for existing records before update.

Answer

Change the integration to use batch processing with a database view.

Question 8

A developer encounters this error when running a business rule in a scoped application. The table 'x_myapp_incident' was created in the application scope and has records in it. What is the most likely cause?

Accepted Answer

The table was removed from the application scope after creation.. When a table is removed from an application scope after creation, the table still exists in the instance but is no longer associated with the application. Business rules running in the scoped application cannot access tables that are not part of the application's scope, causing an error. This is because scoped applications enforce strict table visibility rules, and only tables explicitly included in the application scope are accessible.

Answer

The ACLs on the table restrict access for the script's user.

Answer

The business rule is trying to access a table in a different scope without using the 'global.' prefix.

Answer

The application was installed via an update set and the table was not included.

Question 9

Which THREE of the following are attributes of a Service Portal widget? (Choose three.)

Accepted Answer

Server Script. Server Script is a core attribute of a Service Portal widget because it runs on the server side when the widget is loaded or when a client-initiated action triggers a server call via the 'server.get' or 'server.update' options. It allows developers to query the database, perform business logic, and return data to the client controller, making it essential for data retrieval and processing within the widget lifecycle.

Answer

CSS Styling

Answer

Business Rule

Question 10

A large enterprise is importing 500,000 asset records from an external inventory system using a scheduled data import into the alm_asset table. The transform map uses a coalesce on the 'asset_tag' field to match existing records. The 'asset_tag' field in the target table is a string field with a unique index. The import set table has no unique index on any field. The transform map has 'Enable Duplicate Detection' checked. After the first import, the team notices that many duplicate records were created instead of updating existing ones. There are no errors in the import log. The source data contains only unique asset_tag values. What is the most likely cause of the duplicates?

Accepted Answer

The import set table lacks a unique index on the 'asset_tag' field.. The import set table lacks a unique index on the 'asset_tag' field. For duplicate detection to work properly during an import, the import set table must have a unique index on the coalesce field (here 'asset_tag'). Without that index, the system cannot detect duplicates within the same import set, causing multiple records to be inserted instead of updated. Option A is incorrect because the source data contains unique asset_tag values, so case differences are not the issue. Option B is incorrect because the 'Enable Duplicate Detection' checkbox is checked, so it is configured. Option D is incorrect because the coalesce field mapping is correctly set to 'asset_tag'.

Answer

The source data contains multiple records with the same 'asset_tag' but different case.

Answer

The 'Enable Duplicate Detection' checkbox is not properly configured.

Answer

The coalesce field mapping is incorrectly mapped to the 'asset_tag' field.

Question 11

A Service Portal widget is not updating data on the page after the user clicks a button that calls a server-side function. The client controller uses $scope.server.get() to call the server. The server script updates a global variable in glideRecord and returns it. However, the widget view does not reflect the change. What is the most likely issue?

Accepted Answer

The client controller is not handling the promise returned by $scope.server.get(); the scope update should be inside the success callback.. `$scope.server.get()` returns a promise, and the scope variables must be updated inside the `.then()` success callback to ensure the changes are applied after the asynchronous server response is received. Without handling the promise, the client controller executes the next line immediately, and the scope update happens before the server data is available, so the widget view never reflects the change.

Answer

The widget template is not bound to the correct scope variable.

Answer

The client controller should use $scope.server.update() instead of $scope.server.get().

Answer

The server script is not allowed to modify data from a widget server script.

Question 12

The business rule above is intended to set the category of an incident based on the correlation_id. However, it is not working as expected. What is the most likely cause?

Accepted Answer

The business rule runs before insert, so the correlation_id field may not have a value yet.. Business rules that run 'before insert' execute before the record is saved to the database. At that point, the `correlation_id` field may not yet have a value if it is not provided by the user or set by another process. The script attempts to read `current.correlation_id` to determine the category, but if the field is empty, the condition fails and the category is never set.

Answer

The script is trying to set a field that is read-only before insert.

Answer

The sys_choice table does not contain the choices for the incident category field.

Answer

The GlideRecord query is incorrectly using 'name' instead of 'table'.

Question 13

Match each ServiceNow update set state to its meaning.

Accepted Answer

In progress: Changes are currently being made.. Update set states control the lifecycle of change tracking. 'In progress' indicates active work, 'Complete' indicates all changes are added, 'Committed' indicates the set is applied to an instance, and 'Submitted' indicates it is sent for review. Common confusions include swapping 'In progress' and 'Complete' definitions.

Answer

In progress: All changes have been added.

Answer

Complete: Changes are currently being made.

Question 14

Which THREE are best practices when working with data imports via Import Sets? (Choose three.)

Accepted Answer

Ensure all target fields are mapped to avoid missing data.. Options A, B, and D are correct. Ensuring all target fields are mapped avoids missing data. Using the coalesce field prevents duplicate records. Using a staging table allows data validation before transforming. Option C is wrong because mapping import set rows directly to the target table without a transform is not a best practice; transforms allow data manipulation and cleansing. Option E is wrong because skipping the transform map would bypass necessary transformations and validations.

Answer

Map import set rows directly to the target table columns without using a transform.

Answer

Skip creating a transform map to speed up the import.

Question 15

A company has a custom table 'project_task' with a reference field to 'project'. The requirement is to ensure that only users in a specific group can select projects in a certain state. Which approach provides the most secure and maintainable solution?

Accepted Answer

Use a reference qualifier on the project field that checks user group and project state.. Reference qualifiers are the standard way to dynamically filter the list of selectable records in a reference field based on conditions such as user group and project state. This approach provides immediate feedback in the UI and prevents invalid selections altogether. Option B (data policy) can enforce rules on submit but does not filter the picker, so users can still select invalid projects before submission. Option C (security rule) is designed for access control to records or modules, not for field-level filtering. Option D (business rule) would allow selection and then reject on insert/update, leading to a poor user experience and requiring rollback logic. Therefore, a reference qualifier is the most secure and maintainable solution.

Answer

Use a data policy with a condition to restrict the reference field.

Answer

Use a security rule to prevent selection of certain projects.

Answer

Use a business rule to check group membership on insert/update.