SNOW-CAD Practice Test 34 — 15 Questions

Question 1

A ServiceNow instance is configured to use LDAP for user authentication and role membership. After a recent LDAP schema change, users can authenticate but some users are missing their assigned roles. The LDAP server is returning all attributes correctly. What is the most likely cause of this issue?

Accepted Answer

The 'LDAP Group DN' format in the LDAP server configuration does not match the new schema. The correct answer is A because the LDAP Group DN format defines how ServiceNow maps LDAP groups to roles. After a schema change, if the DN structure for groups has been altered (e.g., OU names changed), the stored format in the LDAP server configuration will no longer match, causing role membership to fail even though user authentication (which uses a separate base DN and filter) still works. The LDAP server returning all attributes correctly confirms the issue is in the mapping configuration, not in data retrieval.

Answer

The LDAP server's base DN for user search has changed

Answer

The 'Use secure connection' checkbox is unchecked in the LDAP configuration

Answer

The LDAP server is not returning the 'memberOf' attribute for users

Question 2

A developer is implementing a custom integration using the ServiceNow REST API Explorer. The endpoint requires an API key in the header. Which approach should be used to secure the API key?

Accepted Answer

Create an authentication profile of type 'API Key' and reference it in the REST message.. Option A is correct because the ServiceNow REST API Explorer and REST messages support authentication profiles, which securely store and manage API keys. By creating an 'API Key' authentication profile and referencing it in the REST message, the API key is automatically injected into the request header without exposing it in scripts or system properties. This approach follows ServiceNow best practices for credential management and ensures the key is encrypted and centrally managed.

Answer

Hardcode the API key in the script.

Answer

Store the API key in a system property encrypted.

Answer

Use a REST message variable and set the header directly.

Question 3

A ServiceNow instance needs to expose a REST API endpoint for external applications to query incident data. The developer creates a Scripted REST API and needs to ensure that only authorized applications can access it. Which THREE methods can be used to secure the Scripted REST API?

Accepted Answer

Require the request to include a valid ServiceNow username and password (Basic Authentication). Option A is correct because ServiceNow supports HTTP Basic Authentication, which requires the request to include a valid ServiceNow username and password in the Authorization header. This is a standard method for securing Scripted REST APIs, as the platform validates credentials against its user table before processing the request.

Answer

Require a valid SAML 2.0 assertion in the request body

Answer

Require that the request originates from an IP address within a specified LDAP directory

Question 4

A developer wants to trigger a Business Rule on a child table when a parent record is updated. How can this be achieved?

Accepted Answer

Add a condition on the child table's Business Rule referencing the parent.. Option B is correct because a Business Rule on the child table can include a condition that checks whether a related parent record has been updated. This is done by referencing the parent table's fields via dot-walking (e.g., `current.parent_field.changes()`) or by querying the parent record's sys_updated_on field. The Business Rule runs on the child table when a child record is inserted or updated, and the condition evaluates the parent's state, allowing the rule to trigger logic based on parent changes without requiring a direct trigger on the parent table.

Answer

Use a workaround with a scheduled job.

Answer

This is not possible in ServiceNow.

Answer

Use a before query Business Rule on the child table.

Question 5

A Business Rule uses 'current.setAbortAction(true)' to stop a record from being saved. However, the record is still saved under certain conditions. Which scenario could cause this?

Accepted Answer

The Business Rule runs after the database operation.. Option A is correct because `current.setAbortAction(true)` must be called in a Business Rule that runs before the database operation (e.g., 'before' or 'before query' order). If the Business Rule runs 'after' the database operation, the record has already been committed to the database, so aborting the action has no effect on the save. The abort flag only prevents the pending database write; once the write is complete, the flag is irrelevant.

Answer

The Business Rule is on a table that is extended from a table with a higher order Business Rule.

Answer

Another Business Rule runs in the same order but sets abort to false.

Answer

The Business Rule has a condition that is not met.

Question 6

Which THREE statements are correct about script includes and their usage across scopes? (Select THREE)

Accepted Answer

A script include can be accessed from a Business Rule in a different scope if the script include is defined as a global script include.. Option A is correct because script includes in ServiceNow are isolated by scope by default. To make a script include accessible from a business rule in a different scope, it must be defined as a global script include (i.e., its scope is set to 'Global'). This allows the script include to be referenced and executed from any scope without requiring the global scope prefix.

Answer

Script includes defined as 'public' can be accessed from any scope without restriction.

Answer

To call a script include from another scope, you must use the global scope prefix.

Question 7

Which script function is used to query the database in a business rule?

Accepted Answer

new GlideRecord('table').query();. Option B is correct because in ServiceNow, a business rule must instantiate a new GlideRecord object using the 'new' keyword and then call the query() method on that instance to retrieve records from the database. The syntax 'new GlideRecord('table').query()' properly creates a GlideRecord object for the specified table and executes the query to fetch matching records.

Answer

GlideRecord.query();

Answer

gs.query();

Answer

GlideRecord.newQuery();

Question 8

A developer is creating a business rule that should run on after update of the Incident table. The developer wants to ensure the rule only fires when the incident is assigned to a specific assignment group. Which conditions should be used in the business rule's condition field? (Choose two.)

Accepted Answer

current.operation() == 'update'. Option A is correct because `current.operation() == 'update'` ensures the business rule only runs during an update operation on the Incident table. This is the standard way to check the database operation type in ServiceNow business rules, matching the requirement that the rule should fire 'on after update'.

Answer

current.assignment_group.isValidRecord()

Answer

current.assignment_group.changes()

Answer

gs.getUser().getManager() == 'admin'

Question 9

Refer to the exhibit. Which scenario most likely caused this error?

Accepted Answer

The Business Rule uses 'previous.sys_id' but the record is new.. Option C is correct because when a Business Rule runs on 'insert' or 'update' and references 'previous.sys_id', the 'previous' object is null for new records (since there is no prior version). This causes a 'Cannot read property 'sys_id' of null' error. The error occurs specifically because the script attempts to access a property on an undefined object.

Answer

The Business Rule runs on delete and 'current' is null.

Answer

The Business Rule tries to access a field that doesn't exist.

Answer

The Business Rule is not active.

Question 10

A company uses a business rule to set a field on the Incident table based on the caller's department. However, the rule runs correctly on insert but not on update. The developer suspects the condition is incorrect. The current script uses: if (current.operation() == 'insert' && gs.getUser().getDepartment() == 'IT'). What might be the issue?

Accepted Answer

The condition should check current.caller_id.department instead. Option A is correct because the business rule should check the department of the caller associated with the incident record, not the logged-in user. The condition `current.caller_id.department` retrieves the department value from the caller's user record via a dot-walk to the sys_user table, ensuring the rule triggers based on the incident's caller, not the session user. The current script incorrectly uses `gs.getUser().getDepartment()`, which returns the department of the user running the update, which may differ from the caller's department, causing the rule to fail on update.

Answer

The rule is set to run only on insert

Answer

The script uses synchronous business rule instead of asynchronous

Answer

The condition should use current.operation() == 'update' as well

Question 11

Which THREE factors should be considered when designing a Business Rule for optimal performance? (Select THREE)

Accepted Answer

Limit the use of gs.log() statements in production.. Option B is correct because excessive gs.log() statements in production can degrade performance by writing to the system log, which consumes I/O resources and can fill up the database. In ServiceNow, logging should be minimized or removed in production scripts to avoid unnecessary overhead, especially in high-volume Business Rules.

Answer

Avoid using synchronous GlideAjax calls.

Answer

Set the Business Rule to run on 'before' if possible.

Question 12

What is the effect of this business rule?

Accepted Answer

It sets assignment_group to 'IT Support' every time the caller or short description changes.. Option C is correct because the business rule is configured to trigger 'on change' for both the 'caller' and 'short description' fields. When either field changes, the rule sets the 'assignment_group' field to 'IT Support'. This is a typical use of a business rule to automatically assign incidents based on field updates.

Answer

It will cause an error because assignment_group is a reference field.

Answer

It only runs when both caller and short description change.

Answer

It only sets assignment_group when the incident is first created.

Question 13

A developer is creating a business rule that should run after a record is inserted or updated. The script should fire on both insert and update. Which condition should be used?

Accepted Answer

current.operation() in ['insert','update']. Option C is correct because the `in` operator checks if `current.operation()` matches any value in the list `['insert','update']`, which is the exact requirement for a business rule that should fire on both insert and update. This is the most concise and idiomatic way in ServiceNow to test for multiple operation types.

Answer

current.operation().indexOf('insert') != -1

Answer

current.operation() == 'insert' || current.operation() == 'update'

Answer

current.operation() in ['insert','update','delete']

Question 14

A business rule on the Incident table runs 'after' update and calls a script include that modifies the current record. However, changes made by the script include are not saved. What is the reason?

Accepted Answer

The business rule is set to 'after' and cannot modify the current record.. Option D is correct because business rules set to run 'after' the database operation cannot modify the current record directly; any changes made to the current record in an 'after' business rule are not saved to the database. The script include may alter the record in memory, but since the database write has already occurred, those changes are discarded unless a separate database operation (like current.update()) is explicitly called.

Answer

The script include uses current.update() which triggers the same business rule recursively.

Answer

The business rule condition uses current.operation() incorrectly.

Answer

The script include uses gs.sleep(1000) and times out.

Question 15

Refer to the exhibit. A Business Rule in the same scope calls this script include using 'var total = new MyUtils().getTotal("invoice", "state=paid");' but gets '0' even though there are records. What is the most likely cause?

Accepted Answer

The 'amount' field is not numeric in the invoice table.. The Business Rule calls `getTotal` which uses `GlideAggregate` to sum the `amount` field. If the `amount` field is not numeric (e.g., it is a string or another non-numeric type), `GlideAggregate.addAggregate('SUM', 'amount')` will return `0` because it cannot perform a numeric aggregation on non-numeric data. This matches option B.

Answer

The getTotal method is not properly defined.

Answer

The GlideAggregate query syntax is incorrect.

Answer

The script include is not accessible from the Business Rule's scope.