SNOW-CAD Core Application Development Practice Test 4 — 15 Questions

Question 1

The ACL is meant to allow users to read an incident only if they are the manager of the assigned user. However, users who are not managers can also read the incident. What is the flaw?

Accepted Answer

The script should include an else statement that sets answer = false. Option D is correct because when an ACL condition script runs, it must explicitly set the answer variable to true or false. If the script lacks an else statement that sets answer = false, the script returns undefined (or the last evaluated expression) for non-matching conditions, which ServiceNow treats as true, inadvertently granting read access to unauthorized users. Adding an else statement that sets answer = false ensures that only users who satisfy the manager condition are granted read access.

Answer

The operation should be 'write' not 'read'

Answer

The table should be 'sys_user'

Answer

The condition in the ACL condition field should be removed and replaced with the script

Question 2

The data policy is intended to require short description when category changes during an update. However, the short description is never made mandatory. Which issue exists?

Accepted Answer

The script uses setMandatory which is not available in Data Policies. Option C is correct because `setMandatory()` is a client-side method used in client scripts or UI policies, not in data policies. Data policies run server-side and use `mandatory=true` on a dictionary element or `gs.addErrorMessage()` to enforce field requirements. Since the script attempts to call `setMandatory()` within a data policy, it will fail to make the short description mandatory, leaving the requirement unmet.

Answer

The table is Incident but the policy uses current.operation() incorrectly

Answer

The condition should use AND instead of OR

Answer

The policy should be of type 'Constraint'

Question 3

A developer needs to ensure that a catalog variable of type 'Reference' displays only active users from the sys_user table. Which property configuration should be applied to the variable?

Accepted Answer

Set 'Ref qual' to 'active=true'. Option C is correct because the 'Ref qual' (Reference qualifier) property on a reference variable allows you to specify a condition to filter the records displayed in the lookup. Setting it to 'active=true' restricts the reference field to show only active users from the sys_user table, ensuring the developer meets the requirement.

Answer

Set 'Reference qual' to 'active=true'

Answer

Set 'Condition' to 'active=true'

Answer

Set 'Default value' to 'active=true'

Question 4

A business rule runs on 'before' and 'update' for the incident table. The rule sets the short_description to 'Test' only when the state changes to 'In Progress'. However, the short_description is being updated even when the state does not change. What is the most likely cause?

Accepted Answer

The business rule does not have an 'if (current.state.changes())' condition.. Option B is correct because the business rule lacks an 'if (current.state.changes())' condition. Without this check, the script runs on every update, setting the short_description to 'Test' regardless of whether the state field actually changed. The 'before' and 'update' triggers ensure the rule executes on every update, but the conditional logic must explicitly verify the state transition.

Answer

The business rule is set to run globally.

Answer

The business rule script modifies the field directly without checking.

Answer

The business rule is using the 'cancel' action.

Question 5

A developer creates a script include with client-callable true. The script include is used in a client script to validate a field. However, when the client script runs, it throws an error that GlideAjax is not defined. What is the most likely issue?

Accepted Answer

The script include is a global scope but the client script is in a scoped application.. Option C is correct because when a script include is marked as client-callable, it must be in the global scope to be accessible from a client script via GlideAjax. If the script include is in a scoped application and the client script is in a different scope (or even the same scope), the GlideAjax call will fail because scoped script includes are not automatically available to client-side code unless explicitly exposed via the 'Accessible from' property. The error 'GlideAjax is not defined' indicates the client-side API cannot find the script include, which is a scope isolation issue.

Answer

The script include is not marked as 'Client-callable'.

Answer

The client script is running in a UI policy instead of a client script.

Answer

The client script is not using the correct GlideAjax syntax.

Question 6

A developer wants to prevent users from closing an incident after it has been resolved for more than 30 days. Which approach should be used?

Accepted Answer

Create a business rule on 'before' that aborts the operation if the condition is met.. A 'before' business rule with an abort action is the correct server-side approach to prevent an operation from completing. When the condition (resolved_at is more than 30 days ago) is true, the business rule can call current.setAbortAction(true) to stop the incident from being updated or closed, ensuring the restriction is enforced regardless of the client interface.

Answer

Create an ACL to deny closing after 30 days.

Answer

Create a UI policy that disables the close button.

Answer

Create a client script that alerts the user.

Question 7

A developer needs to create a scheduled job that runs every Monday at 8 AM to update all incidents with a priority of '1' that are still open. Which condition script should be used in the scheduled job?

Accepted Answer

var gr = new GlideRecord('incident'); gr.addEncodedQuery('priority=1^active=true'); gr.query();. Option B is correct because it uses `addEncodedQuery` with an encoded query string that combines both conditions (`priority=1^active=true`) into a single query, which is the standard approach for filtering records in a scheduled job. The `GlideRecord` object is properly instantiated and the query is executed with `gr.query()`, ensuring only incidents matching both criteria are retrieved for update.

Answer

var gr = new GlideAggregate('incident'); gr.addQuery('priority', 1); gr.query();

Answer

var gr = new GlideRecord('incident'); gr.get('priority', 1); gr.get('active', true);

Question 8

A developer is troubleshooting a UI policy that sets a field to mandatory when another field equals 'Yes'. The UI policy works on desktop but not on the mobile app. What is the most likely cause?

Accepted Answer

The UI policy is set to 'Run on desktop' only.. Option D is correct because UI policies have a 'Run on desktop' and 'Run on mobile' checkbox. By default, a new UI policy is set to run on desktop only. If the developer did not explicitly check the 'Run on mobile' option, the policy will not execute on the mobile app, causing the mandatory behavior to be absent on mobile while working on desktop.

Answer

The UI policy is set to 'Run on mobile' but the script is incompatible.

Answer

The field is not available on the mobile form.

Answer

The mobile app uses a different table.

Question 9

A developer wants to restrict access to a specific record in the incident table so that only members of the 'ITIL' group can read it. Which type of ACL should be created?

Accepted Answer

Create a record-level ACL with a condition that checks group membership.. A record-level ACL with a condition that checks group membership is the correct approach because it controls read access to the entire record based on the user's group membership. In ServiceNow, record-level ACLs evaluate conditions against the user's session and the record's data, and if the condition (e.g., 'member of ITIL group') is false, the record is hidden from the user entirely. This directly meets the requirement to restrict read access to a specific incident record for only the 'ITIL' group.

Answer

Create a field-level ACL on the sys_id field.

Answer

Create a business rule to delete the record for unauthorized users.

Answer

Create a UI policy to hide the record.

Question 10

A developer needs to capture the time when a field (assigned_to) was last changed. Which approach should be used?

Accepted Answer

Create a business rule on 'after' update that sets a 'last_assigned' field when assigned_to changes.. Option B is correct because a business rule configured on the 'after' update event can check if the 'assigned_to' field value has changed and then set a 'last_assigned' field to the current date/time. This approach is native to the platform, runs server-side, and ensures the timestamp is captured reliably without external dependencies.

Answer

Create a calculated field using a formula.

Answer

Create a database trigger to log the change.

Answer

Use a dictionary override to enable auditing.

Question 11

A developer is debugging an issue where a Script Action in a Flow Designer flow is not triggering. The flow is configured to run when a record is created or updated in the incident table. The Script Action is supposed to set a field based on a condition, but it never executes. What should the developer check first?

Accepted Answer

Check the flow's trigger conditions to ensure they match the record update.. Option D is correct because the most common reason a Script Action fails to trigger is that the flow's trigger conditions do not match the record update event. Flow Designer evaluates trigger conditions before any actions execute; if the conditions are misconfigured (e.g., expecting a specific field change that isn't occurring), the entire flow, including the Script Action, will not run. The developer should first verify that the trigger conditions align with the actual record creation or update scenario.

Answer

Check if the flow is published.

Answer

Check if the script include used in the Script Action is accessible.

Answer

Check if the Script Action script has syntax errors.

Question 12

Which TWO of the following are valid ways to reference a sys_id of a record in a business rule? (Choose two.)

Accepted Answer

current.getUniqueValue(). Option B is correct because `getUniqueValue()` is a GlideRecord method that returns the unique identifier (sys_id) of the current record, even if the record is new and hasn't been saved yet. Option E is correct because `current.sys_id` directly accesses the sys_id field of the GlideRecord object, which is a standard way to reference the record's unique key in a business rule.

Answer

current.number

Answer

current.get('sys_id')

Answer

current.getRow()

Question 13

Which TWO of the following are true about client-callable script includes? (Choose two.)

Accepted Answer

They must have a function that returns a value.. Option A is correct because client-callable script includes must have at least one function that returns a value. This is required because the GlideAjax API processes the response asynchronously and expects a return value to be sent back to the client via the callback function. Without a return value, the client-side callback would receive undefined or null, breaking the intended data flow.

Answer

They can only be used in scoped applications.

Answer

They cannot be used in UI policies.

Answer

They can be called directly without GlideAjax if marked as synchronous.

Question 14

Which THREE of the following statements are true about ACLs? (Choose three.)

Accepted Answer

An ACL with 'require_role' set to true will only be checked after the user has at least one role in the ACL's role list.. Option A is correct because the 'require_role' attribute on an ACL record means the ACL rule is only evaluated after the system confirms the user has at least one of the roles listed in the ACL's role list. If the user has none of those roles, the ACL is skipped entirely, and the next ACL in the evaluation order is checked. This prevents unnecessary condition script execution for users who lack the prerequisite roles.

Answer

If no ACL is defined for a table, all users have access to all records.

Answer

ACLs are evaluated in a deterministic order based on the type (record, field, etc.) and the script condition.

Question 15

The exhibit shows a business rule script snippet. The business rule is triggered on 'before update' of incident table. When an incident's state is changed to 2 (Resolved), the short_description is set to 'Resolved'. However, the short_description is also being set to 'Resolved' when the state is already 2 and other fields are updated. Which change to the script would fix this issue?

Accepted Answer

Change 'current.state == 2' to 'current.state.changesTo(2)'.. Option B is correct because `current.state.changesTo(2)` is a GlideRecord method that returns true only when the `state` field is being changed *to* the value 2 during the current update. This ensures the short_description is set to 'Resolved' only when the state transitions to 2, not when other fields are updated while the state is already 2. The original script used `current.state == 2`, which evaluates to true whenever the state is 2, regardless of whether it just changed.

Answer

Change the trigger order from 'before' to 'after'.

Answer

Remove the condition and let the script run always.

SNOW-CAD Core Application Development Practice Test 4 — 15 Questions

Exhibit

SNOW-CAD Core Application Development Practice Test 4 — 15 Questions

Exhibit