SNOW-CAD Practice Test 33 — 15 Questions

Question 1

An application scope includes a Business Rule that runs on the 'before' operation of the Incident table. It attempts to set the 'assignment_group' based on the caller's company. However, the assignment is not being applied. Which is the most likely cause?

Accepted Answer

The field 'assignment_group' is not in the current scope's accessible table columns due to cross-scope privilege. Option D is correct because in ServiceNow, cross-scope privilege restrictions prevent a scoped application from accessing or modifying columns in the Incident table that are not explicitly granted via the application's scope. Even though the Business Rule runs on the 'before' operation, if the 'assignment_group' field is not in the application's accessible table columns, the assignment will silently fail. This is a common issue when a scoped application attempts to interact with global table fields without proper cross-scope access.

Answer

The Business Rule is set to 'async' which delays execution

Answer

The script uses 'current.assignment_group = something' without calling setValue

Answer

The Business Rule is set to run on 'display' instead of 'update'

Question 2

Which THREE are valid actions that can be performed by a Workflow Activity in Legacy Workflow Editor?

Accepted Answer

Run a script. Option A is correct because the Legacy Workflow Editor includes a 'Run Script' activity that executes server-side JavaScript (GlideRecord, GlideSystem, etc.) within the workflow context. This allows custom logic such as data manipulation, condition checks, or API calls to be performed as part of the workflow flow.

Answer

Approve a record

Answer

Wait for condition

Question 3

Which THREE considerations are important when designing a ServiceNow REST API for external consumption? (Choose three.)

Accepted Answer

Implement rate limiting to protect the instance from overload.. Option A is correct because implementing rate limiting is crucial for protecting a ServiceNow instance from being overwhelmed by excessive API requests from external consumers. Without rate limiting, a single client could degrade performance for all users or even cause an outage. ServiceNow provides built-in mechanisms like the REST API rate limit property (glide.rest.rate_limit) to control request frequency per client.

Answer

Use GlideAggregate for performance in the API script.

Answer

Always use OAuth 2.0 for authentication.

Question 4

A developer needs to import CSV data into a custom table using Import Sets. The data contains a reference field to a user record. Which configuration ensures that the user record is correctly matched?

Accepted Answer

Set the target field 'email' as coalesce on the transform map.. Option A is correct because setting the 'email' field as a coalesce field on the transform map tells the Import Set engine to use that field to match incoming records against existing target table records. When the reference field points to a user record, the coalesce field (e.g., email) is used to look up the sys_user table and automatically populate the correct sys_id, ensuring the reference is properly resolved without manual scripting.

Answer

Set the source field as coalesce on the transform map.

Answer

Configure the import set row to be ignored if the user is not found.

Answer

Use a script in the 'on before' transform script to find the user.

Question 5

Which TWO approaches are valid for importing data from an external database into ServiceNow on a recurring basis? (Choose two.)

Accepted Answer

Set up a MID Server to run a scheduled transform map from an external SQL query.. Option A is correct because a MID Server can execute a scheduled SQL query against an external database and then run a transform map to map the retrieved data into ServiceNow tables. This approach is a standard pattern for recurring data imports using the MID Server's JDBC capabilities combined with scheduled import sets.

Answer

Use a REST API with a periodic flow that calls an external endpoint.

Answer

Write a business rule that triggers on an external event via web service.

Answer

Use an email inbound action to parse CSV attachments from the external system.

Question 6

A company uses ServiceNow to manage IT assets. An integration sends asset data from an external CMDB to ServiceNow via REST API. The external system sends a payload that includes the asset's serial number, location, and status. The developer has created a Scripted REST API to receive this data. However, when testing, the external system receives an HTTP 500 error. The developer inspects the script log and sees the error: 'java.lang.NullPointerException' at line 10 of the script. The script uses the GlideRecord API to query for an existing asset by serial number. The relevant code is: var gr = new GlideRecord('alm_asset'); gr.get('serial_number', request.body.serial); What is the most likely cause of the NullPointerException?

Accepted Answer

The request body is not being parsed; 'request.body' is null because the content type is not set to JSON or the API is not expecting a body. Option C is correct because the NullPointerException occurs when trying to access a property of a null object. In this case, `request.body` is null, meaning the request body was not parsed into a JavaScript object. This typically happens when the Content-Type header is not set to `application/json` or the Scripted REST API endpoint is not configured to expect a request body, so `request.body.serial` evaluates to `null.serial`, causing the exception.

Answer

The 'serial_number' field in the 'alm_asset' table does not exist or is misspelled

Answer

The GlideRecord.get() method is incorrectly used; it should be gr.get('serial_number') without the value

Answer

The external system is sending the serial number as part of the URL instead of the request body

Question 7

A developer is creating a REST API in ServiceNow to expose incident data. The API must return only incidents with 'state' = 2 (in progress) and limit results to 50. Which implementation is correct?

Accepted Answer

In the script, use 'gr.addQuery('state', 2); gr.setLimit(50);' and return the records.. Option B is correct because it uses the standard GlideRecord pattern to query the incident table with an 'addQuery' filter for state=2 and 'setLimit' to restrict results to 50, which is the proper server-side approach when building a custom REST API endpoint in a Scripted REST API or similar. The other options misuse table API syntax or GlideRecord methods in ways that would not work as intended.

Answer

Use the ServiceNow table API with endpoint '/api/now/table/incident?state=2&sysparm_limit=50'.

Answer

Use a REST API endpoint with path /api/incidents and set the query parameter 'sysparm_query=state=2' and 'sysparm_limit=50'.

Answer

In the script, use 'gr.get('state', 2)' and then limit via 'gr.setLimit(50)'.

Question 8

An organization has a ServiceNow instance that integrates with a third-party monitoring tool using a webhook. The monitoring tool sends HTTP POST requests to a Scripted REST API in ServiceNow to create incidents automatically. Recently, the monitoring tool started sending duplicate requests due to a retry mechanism. The developer wants to ensure that duplicate incidents are not created. The Scripted REST API currently creates a new incident record for every request without checking for duplicates. The request payload includes a unique 'alert_id' field. The developer decides to implement idempotency logic. Which approach should the developer use to prevent duplicate incident creation?

Accepted Answer

In the Scripted REST API, use a GlideRecord to query the incident table with a condition on the 'alert_id' field before inserting a new record; if a record exists, skip creation and return the existing record's sys_id. Option A is correct because it implements idempotency directly within the Scripted REST API by querying the incident table using GlideRecord with a condition on the unique 'alert_id' field before inserting. If a record with that 'alert_id' already exists, the API skips creation and returns the existing sys_id, ensuring no duplicate incidents are created despite duplicate webhook requests.

Answer

Create a GlideAggregate script that counts incidents with the same 'alert_id'; proceed only if count is zero

Answer

Add a before-insert business rule on the incident table that checks for duplicates using the 'alert_id' field

Answer

Use a flow in Flow Designer triggered by the REST API that creates an incident only if the 'alert_id' is not already present in a custom table

Question 9

A ServiceNow instance needs to synchronize data with an external SQL database nightly. Which integration method is most appropriate?

Accepted Answer

Use a MID Server with a JDBC data source.. A MID Server with a JDBC data source is the most appropriate method for nightly batch synchronization with an external SQL database because JDBC provides a direct, efficient, and secure database-level connection without requiring the external database to expose a web service or API. The MID Server acts as a secure proxy, allowing the ServiceNow instance to execute SQL queries against the external database over a persistent, encrypted connection, which is ideal for scheduled bulk data transfers.

Answer

Use a REST API exposed by the external database.

Answer

Use a SOAP web service with a MID Server.

Answer

Use an email-based integration to send CSV files.

Question 10

A ServiceNow developer is integrating with an external system using a REST message. The external system requires a custom header 'X-API-Key' to be included in every request. Where should the developer configure this header to ensure it is automatically included in all REST messages that call this endpoint?

Accepted Answer

In the 'HTTP Headers' tab of the REST message definition. Option B is correct because the 'HTTP Headers' tab in a REST message definition allows you to define custom headers that are automatically included in every request sent to that endpoint. This is the standard location for headers like 'X-API-Key' that must accompany all calls, as they are part of the HTTP request metadata, not query parameters or authentication credentials.

Answer

In the 'Query Parameters' tab of the REST message definition

Answer

In the 'Authentication Profile' associated with the REST message

Answer

In the Scripted REST API used to create the endpoint

Question 11

An organization uses ServiceNow with an external identity provider (IdP) for single sign-on (SSO). Users report that they cannot log in via SSO, but direct username/password login still works. The ServiceNow administrator checks the SAML2 configuration and sees that the 'Validate AuthnResponse Signature' checkbox is enabled and the 'X.509 Certificate' field is filled. What is the most likely cause of the SSO failure?

Accepted Answer

The IdP's signing certificate has been rotated, but the new certificate is not uploaded to ServiceNow. The most likely cause is that the IdP's signing certificate has been rotated, but the new certificate is not uploaded to ServiceNow. When 'Validate AuthnResponse Signature' is enabled, ServiceNow uses the uploaded X.509 certificate to verify the SAML assertion signature. If the IdP signs responses with a new certificate that ServiceNow does not have, signature validation fails, blocking SSO login while direct username/password login remains unaffected.

Answer

The 'Account lockout after invalid attempts' property is set too low

Answer

The 'Single Sign-On (SSO)' module is disabled in the ServiceNow application menu

Answer

The 'AuthnRequest Signed' checkbox is not enabled in the SAML2 configuration

Question 12

A company is using a MID Server to run a discovery probe. The probe fails with a timeout error. The developer checks the MID Server logs and sees 'Connection refused'. What is the most likely issue?

Accepted Answer

The target host's firewall is blocking the port used by the probe.. The 'Connection refused' error in the MID Server logs indicates that the target host actively rejected the connection attempt on the specified port. This is most commonly caused by a firewall on the target host blocking the port used by the discovery probe, as the firewall sends a TCP RST packet to refuse the connection. Incorrect credentials would result in an authentication failure, not a connection refusal, and an unreachable host would produce a 'No route to host' or timeout error.

Answer

The MID Server credentials are incorrect.

Answer

The MID Server's SSL certificate is expired.

Answer

The target host is unreachable from the MID Server network.

Question 13

A ServiceNow instance integrates with an external inventory system via a scheduled REST import job. Recently, the import started failing intermittently with HTTP 429 (Too Many Requests) errors. The external system enforces a rate limit of 100 requests per minute. The existing job pulls 1500 records at a time using a single REST message. Which design change would best resolve this issue while ensuring the import completes successfully?

Accepted Answer

Reduce the batch size to 50 records and add a 1-second delay between consecutive REST calls. Option A is correct because reducing the batch size to 50 records ensures that each REST call stays within the external system's rate limit of 100 requests per minute. Adding a 1-second delay between consecutive calls further prevents bursts that could trigger HTTP 429 errors, while still allowing the import to complete by making multiple smaller requests over time.

Answer

Increase the number of threads in the import set table loader to process records faster

Answer

Increase the batch size to 5000 records per request to reduce the number of calls

Answer

Switch the REST message to use Basic Authentication instead of OAuth to reduce overhead

Question 14

A developer needs to create a flow in Flow Designer that sends an email to a manager when a high-priority incident is created. The flow should retrieve the manager's email from the caller's user record. Which data pill should be used to access the caller's manager's email in the 'Send Email' action?

Accepted Answer

{{trigger.caller.manager.email}}. Option B is correct because in Flow Designer, the dot-walking syntax `trigger.caller.manager.email` navigates from the incident record's caller field to the user record, then to the manager reference field (which is a sys_user record), and finally retrieves the email attribute of that manager's user record. This directly accesses the caller's manager's email address without needing an intermediate lookup.

Answer

Answer

Answer

Question 15

A ServiceNow instance has a custom table 'u_integration_log' that stores integration transactions. A flow in Flow Designer logs errors by creating records in this table. The flow is running with high volume, and the table is growing quickly causing performance issues. What is the best design to mitigate this?

Accepted Answer

Configure a scheduled job to archive and delete records older than 30 days.. Option A is correct because it directly addresses the root cause of performance degradation—uncontrolled table growth—by implementing a scheduled job to archive and delete records older than 30 days. This reduces table size, improves query performance, and maintains the ability to retain recent logs for debugging. In ServiceNow, scheduled jobs can use GlideRecord to delete records based on a date condition, and archiving can be done via export to CSV or a separate archive table.

Answer

Disable error logging in the flow.

Answer

Use a 'Log to file' action in the flow instead of a table.

Answer

Store logs in a separate instance via MID Server.