SNOW-CAD Core Application Development Practice Test 4 — 15 Questions

Question 1

The business rule above does not set the urgency on new incidents created via web service when the caller's department is IT. What is the most likely reason?

Accepted Answer

The condition uses current.urgency == '' but the field may have a default value of 3. The business rule condition checks if `current.urgency` is an empty string, but the Incident table has a default value of 3 for the urgency field. When a new record is created via web service, the system populates the urgency field with the default value before the business rule runs, so the condition `current.urgency == ''` evaluates to false, and the script never executes to set the urgency.

Answer

The table is not 'Incident' but 'Incident Task'

Answer

The business rule is set to 'before' but web service calls trigger after rules

Answer

The gs.log statement is preventing the script from completing

Question 2

The ACL is meant to allow users to read an incident only if they are the manager of the assigned user. However, users who are not managers can also read the incident. What is the flaw?

Accepted Answer

The script should include an else statement that sets answer = false. When an ACL condition script runs, it must explicitly set the answer variable to true or false. If the script lacks an else statement that sets answer = false, the script returns undefined (or the last evaluated expression) for non-matching conditions, which ServiceNow treats as true, inadvertently granting read access to unauthorized users. Adding an else statement that sets answer = false ensures that only users who satisfy the manager condition are granted read access.

Answer

The operation should be 'write' not 'read'

Answer

The table should be 'sys_user'

Answer

The condition in the ACL condition field should be removed and replaced with the script

Question 3

The data policy is intended to require short description when category changes during an update. However, the short description is never made mandatory. Which issue exists?

Accepted Answer

The script uses setMandatory which is not available in Data Policies. `setMandatory()` is a client-side method used in client scripts or UI policies, not in data policies. Data policies run server-side and use `mandatory=true` on a dictionary element or `gs.addErrorMessage()` to enforce field requirements. Since the script attempts to call `setMandatory()` within a data policy, it will fail to make the short description mandatory, leaving the requirement unmet.

Answer

The table is Incident but the policy uses current.operation() incorrectly

Answer

The condition should use AND instead of OR

Answer

The policy should be of type 'Constraint'

Question 4

A developer needs to ensure that a catalog variable of type 'Reference' displays only active users from the sys_user table. Which property configuration should be applied to the variable?

Accepted Answer

Set 'Ref qual' to 'active=true'. The 'Ref qual' (Reference qualifier) property on a reference variable allows you to specify a condition to filter the records displayed in the lookup. Setting it to 'active=true' restricts the reference field to show only active users from the sys_user table, ensuring the developer meets the requirement.

Answer

Set 'Reference qual' to 'active=true'

Answer

Set 'Condition' to 'active=true'

Answer

Set 'Default value' to 'active=true'

Question 5

A business rule runs on 'before' and 'update' for the incident table. The rule sets the short_description to 'Test' only when the state changes to 'In Progress'. However, the short_description is being updated even when the state does not change. What is the most likely cause?

Accepted Answer

The business rule does not have an 'if (current.state.changes())' condition.. The business rule lacks an 'if (current.state.changes())' condition. Without this check, the script runs on every update, setting the short_description to 'Test' regardless of whether the state field actually changed. The 'before' and 'update' triggers ensure the rule executes on every update, but the conditional logic must explicitly verify the state transition.

Answer

The business rule is set to run globally.

Answer

The business rule script modifies the field directly without checking.

Answer

The business rule is using the 'cancel' action.

Question 6

A developer creates a script include with client-callable true. The script include is used in a client script to validate a field. However, when the client script runs, it throws an error that GlideAjax is not defined. What is the most likely issue?

Accepted Answer

The client script is running in a UI policy instead of a client script.. The error 'GlideAjax is not defined' occurs when GlideAjax is used in a context that does not support it, such as a UI policy script. UI policies run on the server side and do not have access to client-side APIs like GlideAjax. Even though the script include is marked client-callable, the client script itself must be a true client script (e.g., onChange, onLoad) to use GlideAjax. Option B correctly identifies this scenario: the developer may have accidentally placed the script in a UI policy instead of a client script.

Answer

The script include is not marked as 'Client-callable'.

Answer

The script include is a global scope but the client script is in a scoped application.

Answer

The client script is not using the correct GlideAjax syntax.

Question 7

A developer wants to prevent users from closing an incident after it has been resolved for more than 30 days. Which approach should be used?

Accepted Answer

Create a business rule on 'before' that aborts the operation if the condition is met.. A 'before' business rule with an abort action is the correct server-side approach to prevent an operation from completing. When the condition (resolved_at is more than 30 days ago) is true, the business rule can call current.setAbortAction(true) to stop the incident from being updated or closed, ensuring the restriction is enforced regardless of the client interface.

Answer

Create an ACL to deny closing after 30 days.

Answer

Create a UI policy that disables the close button.

Answer

Create a client script that alerts the user.

Question 8

A developer needs to create a scheduled job that runs every Monday at 8 AM to update all incidents with a priority of '1' that are still open. Which condition script should be used in the scheduled job?

Accepted Answer

var gr = new GlideRecord('incident'); gr.addQuery('priority', 1); gr.addQuery('active', true); gr.query();. D is correct because it uses chained addQuery calls on a GlideRecord for the incident table to filter priority=1 and active=true, then executes the query to retrieve all matching records. Option A incorrectly uses GlideAggregate, which is intended for aggregation, not record retrieval. Option C incorrectly uses get with two arguments, which retrieves a single record and does not combine multiple conditions. Option B uses addEncodedQuery, which could produce the same results, but the single-answer item expects the standard programmatic approach using addQuery.

Answer

var gr = new GlideAggregate('incident'); gr.addQuery('priority', 1); gr.query();

Answer

var gr = new GlideRecord('incident'); gr.addEncodedQuery('priority=1^active=true'); gr.query();

Answer

var gr = new GlideRecord('incident'); gr.get('priority', 1); gr.get('active', true);

Question 9

A developer is troubleshooting a UI policy that sets a field to mandatory when another field equals 'Yes'. The UI policy works on desktop but not on the mobile app. What is the most likely cause?

Accepted Answer

The UI policy is set to 'Run on desktop' only.. UI policies have a 'Run on desktop' and 'Run on mobile' checkbox. By default, a new UI policy is set to run on desktop only. If the developer did not explicitly check the 'Run on mobile' option, the policy will not execute on the mobile app, causing the mandatory behavior to be absent on mobile while working on desktop.

Answer

The UI policy is set to 'Run on mobile' but the script is incompatible.

Answer

The field is not available on the mobile form.

Answer

The mobile app uses a different table.

Question 10

A developer wants to restrict access to a specific record in the incident table so that only members of the 'ITIL' group can read it. Which type of ACL should be created?

Accepted Answer

Create a record-level ACL with a condition that checks group membership.. A record-level ACL with a condition that checks group membership is the correct approach because it controls read access to the entire record based on the user's group membership. In ServiceNow, record-level ACLs evaluate conditions against the user's session and the record's data, and if the condition (e.g., 'member of ITIL group') is false, the record is hidden from the user entirely. This directly meets the requirement to restrict read access to a specific incident record for only the 'ITIL' group.

Answer

Create a field-level ACL on the sys_id field.

Answer

Create a business rule to delete the record for unauthorized users.

Answer

Create a UI policy to hide the record.

Question 11

A developer needs to capture the time when a field (assigned_to) was last changed. Which approach should be used?

Accepted Answer

Create a business rule on 'after' update that sets a 'last_assigned' field when assigned_to changes.. A business rule running 'after' update can check if the 'assigned_to' field value changed (using previous()) and set a 'last_assigned' field to the current date/time (gs.nowDateTime()). This server-side, platform-native approach reliably captures the timestamp when the field changes. Option A (calculated field) is incorrect because calculated fields are read-only and derive values from other fields; they cannot set a timestamp when a field changes. Option C (database trigger) is not recommended as it bypasses the ServiceNow platform and could cause synchronization issues. Option D (dictionary override to enable auditing) is incorrect because auditing tracks all changes to the field in the audit table but does not store the last change timestamp in a separate field on the record; it would require querying the audit log to find the last change.

Answer

Create a calculated field using a formula.

Answer

Create a database trigger to log the change.

Answer

Use a dictionary override to enable auditing.

Question 12

A developer is debugging an issue where a Script Action in a Flow Designer flow is not triggering. The flow is configured to run when a record is created or updated in the incident table. The Script Action is supposed to set a field based on a condition, but it never executes. What should the developer check first?

Accepted Answer

Check the flow's trigger conditions to ensure they match the record update.. The most common reason a Script Action fails to trigger is that the flow's trigger conditions do not match the record update event. Flow Designer evaluates trigger conditions before any actions execute; if the conditions are misconfigured (e.g., expecting a specific field change that isn't occurring), the entire flow, including the Script Action, will not run. The developer should first verify that the trigger conditions align with the actual record creation or update scenario.

Answer

Check if the flow is published.

Answer

Check if the script include used in the Script Action is accessible.

Answer

Check if the Script Action script has syntax errors.

Question 13

Which TWO of the following are valid ways to reference a sys_id of a record in a business rule? (Choose two.)

Accepted Answer

current.getUniqueValue(). Options B, C, and E are all valid ways to reference the sys_id of a record in a business rule. Option B uses the `getUniqueValue()` method, which returns the sys_id even for new unsaved records. Option C uses `current.get('sys_id')` to retrieve the sys_id field value. Option E directly accesses the `sys_id` field via dot notation. All three methods correctly return the unique identifier of the current record.

Answer

current.number

Answer

current.getRow()

Question 14

Which TWO of the following are true about client-callable script includes? (Choose two.)

Accepted Answer

They must have a function that returns a value.. Client-callable script includes must have at least one function that returns a value. This is required because the GlideAjax API processes the response asynchronously and expects a return value to be sent back to the client via the callback function. Without a return value, the client-side callback would receive undefined or null, breaking the intended data flow.

Answer

They can only be used in scoped applications.

Answer

They cannot be used in UI policies.

Answer

They can be called directly without GlideAjax if marked as synchronous.

Question 15

Which THREE of the following statements are true about ACLs? (Choose three.)

Accepted Answer

An ACL with 'require_role' set to true will only be checked after the user has at least one role in the ACL's role list.. The 'require_role' attribute on an ACL record means the ACL rule is only evaluated after the system confirms the user has at least one of the roles listed in the ACL's role list. Option B is correct: by default, if no explicit ACL is defined for a table, the default ACL grants read access to all users. Option C is incorrect: ACLs are evaluated in a deterministic order based on type and the 'order' field, not the script condition. Option D is incorrect: ACLs are enforced on data access operations (e.g., GlideRecord queries), but they are not directly 'enforced on server-side scripts'—scripts can bypass ACLs if run with elevated privileges. Option E is correct: condition scripts on table ACLs can restrict access to specific records.

Answer

ACLs are evaluated in a deterministic order based on the type (record, field, etc.) and the script condition.

Answer

ACLs can be enforced on server-side scripts.