SNOW-CAD Practice Test 32 — 15 Questions

Question 1

Which TWO statements about ServiceNow UI Policies are true?

Accepted Answer

UI Policies can set fields as mandatory. UI Policies are client-side scripts that run on the browser to dynamically control form behavior, such as making fields mandatory, visible, or read-only based on conditions. Option B is correct because UI Policies can set the 'mandatory' attribute on a field, forcing users to provide a value before submitting the record.

Answer

UI Policies can enforce data integrity at the database level

Answer

UI Policies cannot be used on catalog items

Answer

UI Policies run on the server side only

Question 2

A company has a ServiceNow instance integrated with a third-party ticket management system. The integration runs every hour via a scheduled job that calls a REST API to fetch new tickets and create incidents in ServiceNow. The administrator notices that some incidents are being created as duplicates. Investigation reveals that the third-party system sometimes returns the same ticket in multiple API calls due to caching. The scheduled job does not check for existing incidents before creating new ones. The administrator needs to modify the integration to prevent duplicate incidents without relying on the third-party system to change its behavior. Which action should the administrator take?

Accepted Answer

Add a check in the integration script to query the incident table for an existing incident with the same external ticket ID before creating a new one.. The most reliable way to prevent duplicates is to check the incident table for an existing record with the same external ticket ID before creating a new incident. This leverages the unique identifier from the third-party system and avoids relying on the third-party's caching behavior. By querying the incident table using a GlideRecord lookup on a field that stores the external ID, the script can conditionally skip creation if a match is found.

Answer

Modify the integration to only create incidents if the ticket status is 'New'.

Answer

Increase the scheduled job interval to run every 2 hours.

Answer

Add a post-processing script that deletes duplicate incidents after each run.

Question 3

A company is integrating ServiceNow with an external system using a custom SOAP web service. The external system requires WS-Security with a username token and a timestamp. How should the developer configure this?

Accepted Answer

Configure the WS-Security tab under the SOAP Message record with UsernameToken and timestamp.. ServiceNow's SOAP Message record includes a dedicated WS-Security tab where you can configure UsernameToken and timestamp elements to meet WS-Security requirements. This allows the platform to generate the proper SOAP envelope headers with the security token and timestamp, which the external system expects for authentication and message freshness validation.

Answer

Use a RESTMessageV2 with Basic Authentication.

Answer

Add the username and password to the SOAP message's HTTP headers.

Answer

Set the SOAP action header to include the token.

Question 4

A developer needs to create a record in the 'task' table when a specific condition is met in a Business Rule. The new record should be linked back to the current record via a reference field. What is the best practice to ensure the new record is created in the same transaction?

Accepted Answer

Use GlideRecord with newRecord() and set values, then call insert().. Using GlideRecord with newRecord() and insert() within the same Business Rule ensures the new 'task' record is created in the same database transaction as the current record. This guarantees atomicity: if the insert fails, the entire transaction rolls back, preventing orphaned records. The reference field linking back to the current record is set synchronously before the insert, maintaining data integrity.

Answer

Use Flow Designer to create the record asynchronously.

Answer

Use the GlideRecord updateMultiple() method.

Answer

Call a Scripted REST API to insert the record.

Question 5

Which TWO are benefits of using a Service Portal widget over a UI Page?

Accepted Answer

Widgets can be easily reused across multiple portals.. Service Portal widgets are designed as reusable components that can be shared across multiple portals without duplication. Unlike UI Pages, which are page-specific and must be copied or recreated for each portal, widgets can be configured with options and instances, making them modular and maintainable. Option E is correct because Service Portal widgets natively support AngularJS, enabling two-way data binding between the client-side controller and the HTML template, which simplifies dynamic UI updates without manual DOM manipulation.

Answer

Widgets automatically handle user authentication.

Answer

Widgets provide built-in accessibility features.

Answer

Widgets are faster because they use synchronous server calls.

Question 6

This ACL is configured to control read access on the 'incident' table. Under what condition will a user be allowed to read an incident record?

Accepted Answer

If the user is from the company specified and the incident is assigned to the user's manager.. The ACL condition checks that the user's company matches the company specified in the property, and the incident record's assigned_to field equals the user's manager. This is a common pattern in ServiceNow where read access is granted based on a relationship (manager) rather than direct assignment, ensuring that managers can view incidents assigned to their direct reports.

Answer

If the user is from the company specified, regardless of the assigned_to field.

Answer

If the user is from the company specified in the property and the incident is assigned to the user.

Answer

If the user's manager is from the company specified and the incident is assigned to the user.

Question 7

An admin wants to create a report showing the number of incidents created each day for the past month. Which type of report should be used?

Accepted Answer

Bar chart. A bar chart is the correct choice because it is ideal for comparing discrete categories (such as days) over a period (the past month), showing the count of incidents per day. In ServiceNow, the 'Report Builder' allows you to create a bar chart with the 'Created on' field grouped by day and the 'Count' aggregation, which directly visualizes the number of incidents created each day.

Answer

List report

Answer

Pie chart

Answer

Line chart

Question 8

A developer needs to create a business rule that automatically sets the 'assignment_group' of an incident to 'Service Desk' when the 'category' is 'Network' and the 'subcategory' is 'VPN'. Which condition type should be used to ensure the rule only runs when both conditions are met?

Accepted Answer

Use the 'Condition' field on the business rule to specify the condition.. The 'Condition' field on a business rule is the standard place to define the filter that determines when the rule executes. By entering 'category=="Network"^subcategory=="VPN"' in the Condition field, the rule will only run when both conditions are true, without needing advanced scripting. This is the simplest and most efficient approach for a straightforward condition check.

Answer

Select the 'Advanced' checkbox and write the condition in the 'Condition' field.

Answer

Set a filter on the 'When to run' tab to match the category and subcategory.

Answer

Write the condition in the script field using an if statement and no condition in the Condition field.

Question 9

The exhibit shows an ACL condition script intended to allow read access to an incident only if the user has the 'itil' role and is a member of the incident's assignment group. However, users who are members of the assignment group but do not have the 'itil' role are still able to read the incident. What is the most likely problem?

Accepted Answer

There is another ACL on the incident table that grants read access to users with the 'itil' role without the group membership check.. ServiceNow ACLs are evaluated in a hierarchy: if any ACL on the same table and operation grants access, the user is allowed. Even if the intended ACL correctly denies access when the group membership check fails, another ACL that grants read access to users with the 'itil' role (without the group condition) will override the denial. The condition script in the intended ACL never gets a chance to block the user because the granting ACL is evaluated first and returns true.

Answer

The condition script must return true explicitly for the ACL to deny access.

Answer

The ACL is set to condition type 'script' but the script is not structured correctly.

Answer

The isMemberOf method requires a group sys_id, not a user ID.

Question 10

A developer is creating a business rule that should run after a record is inserted or updated. The script should fire on both insert and update. Which condition should be used?

Accepted Answer

current.operation() in ['insert','update']. The `in` operator checks if `current.operation()` matches any value in the list `['insert','update']`, which is the exact requirement for a business rule that should fire on both insert and update. This is the most concise and idiomatic way in ServiceNow to test for multiple operation types.

Answer

current.operation().indexOf('insert') != -1

Answer

current.operation() == 'insert' || current.operation() == 'update'

Answer

current.operation() in ['insert','update','delete']

Question 11

The business rule has an empty script. What will happen when an incident state changes to 'Resolved'?

Accepted Answer

Nothing, because there is no script.. The business rule will fire because the condition (incident state changes to 'Resolved') is valid. However, since the script is empty, nothing happens. No default actions are executed. Option A is wrong because the condition is not invalid; it is valid. Option C is wrong because a script is not required for a business rule to fire. Option D is wrong because there are no default actions; the business rule only runs the script, which is empty.

Answer

The business rule will not fire because condition is invalid.

Answer

The business rule will cause an error because script is required.

Answer

The business rule will still fire and execute default actions.

Question 12

A company is integrating ServiceNow with an external system using REST API. The integration is failing with a 401 Unauthorized error. The integration user's credentials are correct and the user has the 'rest_service' role. What is the most likely cause of the failure?

Accepted Answer

The OAuth token used for authentication has expired or is invalid.. A 401 Unauthorized error indicates that the request lacks valid authentication credentials. Since the integration user's credentials are correct and the user has the 'rest_service' role, the most likely cause is that the OAuth token used for authentication has expired or is invalid. ServiceNow REST API integrations commonly use OAuth 2.0 tokens, which have a finite lifetime and must be refreshed or reissued upon expiration.

Answer

The password for the integration user does not meet complexity requirements.

Answer

The integration user does not have the 'rest_api' role.

Answer

The integration is hitting a table ACL that denies read access.

Question 13

A ServiceNow developer is tasked with improving the performance of a custom incident form in the classic UI. The form includes a 'category' field that, when changed, triggers an onChange client script. This script uses a GlideRecord query to fetch related data from a large 'cmdb_ci' table (over 100,000 records) and populates a dependent field called 'subcategory' with relevant options. Users report that after selecting a category, the form freezes for 10-15 seconds before the subcategory field updates. The developer needs to maintain real-time updates based on the category selection. What is the best approach to resolve this performance issue while keeping the functionality?

Accepted Answer

Replace the client script with a Scripted REST API that returns subcategory options, and make an asynchronous AJAX call from the client script to populate the field.. It offloads the heavy GlideRecord query from the client to the server via a Scripted REST API, while using an asynchronous AJAX call (e.g., GlideAjax) to avoid blocking the UI thread. This eliminates the 10-15 second freeze by preventing synchronous server-side processing on the client, maintaining real-time updates without freezing the form.

Answer

Convert the onChange script to a UI Policy with a condition on category and a script action to perform the query.

Answer

Use a calculated field on the subcategory field that derives its value from a database view.

Answer

Move the query to a Business Rule that runs on 'before' and updates the subcategory field using setValue.

Question 14

A company has a business rule that runs on update of the Incident table. The rule sets the caller_id field to the sys_id of the user who last modified the record. However, the rule does not fire when an update is made via web services. What is the most likely cause?

Accepted Answer

The business rule's 'When' field is set to 'UI action only' which excludes web service updates.. When the 'When' field of a business rule is set to 'UI action only', the rule only triggers on UI actions and not on web service updates. Option B is incorrect because if the business rule were inactive, it would never fire at all, but the question states it doesn't fire only when updated via web services, so it must be active. Option C is incorrect because business rules do run on web service updates unless specifically excluded. Option D is incorrect because the condition 'current.operation() == 'update'' would still be true for web service updates since web services use the update operation.

Answer

The business rule is inactive.

Answer

Business rules never run when updates are made via web services.

Answer

The business rule's condition is 'current.operation() == 'update'' but the web service uses a different operation.

Question 15

A small IT department uses ServiceNow for incident management. They have a business rule that runs after insert on the Incident table. The rule is intended to send an email notification to the assignment group whenever a new incident is created. The rule uses a standard "send event" method, and the email notification is set up in the system mail properties. Recently, the group leader noticed that some incidents are not triggering emails. The developer investigates the business rule and confirms that the script executes without errors, but the email is not sent for those specific incidents. The developer checks the email notification configuration and finds that it is set to send to the "assigned user" rather than the "assigned group". After correcting this, the emails start working. However, the developer wants to understand why only some incidents were affected. Which of the following best explains the issue?

Accepted Answer

The email notification was incorrectly configured to send to the user, so only incidents assigned to a specific user triggered emails; incidents assigned to a group had no recipient. The email notification was configured to send to the 'assigned user' field, which is populated only when an incident is assigned to a specific individual. Incidents assigned directly to a group (with no user assigned) would have an empty 'assigned user' field, causing the notification to have no recipient and thus not be sent. After correcting the configuration to send to the 'assigned group', emails were triggered for all incidents, confirming that the issue was the recipient field mismatch.

Answer

The assignment group did not have any members for those incidents

Answer

The business rule script had a condition that randomly skipped some incidents

Answer

The SMTP server was intermittently down