SNOW-CAD Core Application Development Practice Test 6 — 15 Questions

Question 1

The ACL is meant to allow users to read an incident only if they are the manager of the assigned user. However, users who are not managers can also read the incident. What is the flaw?

Accepted Answer

The script should include an else statement that sets answer = false. When an ACL condition script runs, it must explicitly set the answer variable to true or false. If the script lacks an else statement that sets answer = false, the script returns undefined (or the last evaluated expression) for non-matching conditions, which ServiceNow treats as true, inadvertently granting read access to unauthorized users. Adding an else statement that sets answer = false ensures that only users who satisfy the manager condition are granted read access.

Answer

The operation should be 'write' not 'read'

Answer

The table should be 'sys_user'

Answer

The condition in the ACL condition field should be removed and replaced with the script

Question 2

A business rule runs on 'before' and 'update' for the incident table. The rule sets the short_description to 'Test' only when the state changes to 'In Progress'. However, the short_description is being updated even when the state does not change. What is the most likely cause?

Accepted Answer

The business rule does not have an 'if (current.state.changes())' condition.. The business rule lacks an 'if (current.state.changes())' condition. Without this check, the script runs on every update, setting the short_description to 'Test' regardless of whether the state field actually changed. The 'before' and 'update' triggers ensure the rule executes on every update, but the conditional logic must explicitly verify the state transition.

Answer

The business rule is set to run globally.

Answer

The business rule script modifies the field directly without checking.

Answer

The business rule is using the 'cancel' action.

Question 3

A developer wants to prevent users from closing an incident after it has been resolved for more than 30 days. Which approach should be used?

Accepted Answer

Create a business rule on 'before' that aborts the operation if the condition is met.. A 'before' business rule with an abort action is the correct server-side approach to prevent an operation from completing. When the condition (resolved_at is more than 30 days ago) is true, the business rule can call current.setAbortAction(true) to stop the incident from being updated or closed, ensuring the restriction is enforced regardless of the client interface.

Answer

Create an ACL to deny closing after 30 days.

Answer

Create a UI policy that disables the close button.

Answer

Create a client script that alerts the user.

Question 4

A developer is troubleshooting a UI policy that sets a field to mandatory when another field equals 'Yes'. The UI policy works on desktop but not on the mobile app. What is the most likely cause?

Accepted Answer

The UI policy is set to 'Run on desktop' only.. UI policies have a 'Run on desktop' and 'Run on mobile' checkbox. By default, a new UI policy is set to run on desktop only. If the developer did not explicitly check the 'Run on mobile' option, the policy will not execute on the mobile app, causing the mandatory behavior to be absent on mobile while working on desktop.

Answer

The UI policy is set to 'Run on mobile' but the script is incompatible.

Answer

The field is not available on the mobile form.

Answer

The mobile app uses a different table.

Question 5

A developer needs to capture the time when a field (assigned_to) was last changed. Which approach should be used?

Accepted Answer

Create a business rule on 'after' update that sets a 'last_assigned' field when assigned_to changes.. A business rule running 'after' update can check if the 'assigned_to' field value changed (using previous()) and set a 'last_assigned' field to the current date/time (gs.nowDateTime()). This server-side, platform-native approach reliably captures the timestamp when the field changes. Option A (calculated field) is incorrect because calculated fields are read-only and derive values from other fields; they cannot set a timestamp when a field changes. Option C (database trigger) is not recommended as it bypasses the ServiceNow platform and could cause synchronization issues. Option D (dictionary override to enable auditing) is incorrect because auditing tracks all changes to the field in the audit table but does not store the last change timestamp in a separate field on the record; it would require querying the audit log to find the last change.

Answer

Create a calculated field using a formula.

Answer

Create a database trigger to log the change.

Answer

Use a dictionary override to enable auditing.

Question 6

The exhibit shows an ACL condition script intended to allow read access to an incident only if the user has the 'itil' role and is a member of the incident's assignment group. However, users who are members of the assignment group but do not have the 'itil' role are still able to read the incident. What is the most likely problem?

Accepted Answer

There is another ACL on the incident table that grants read access to users with the 'itil' role without the group membership check.. ServiceNow ACLs are evaluated in a hierarchy: if any ACL on the same table and operation grants access, the user is allowed. Even if the intended ACL correctly denies access when the group membership check fails, another ACL that grants read access to users with the 'itil' role (without the group condition) will override the denial. The condition script in the intended ACL never gets a chance to block the user because the granting ACL is evaluated first and returns true.

Answer

The condition script must return true explicitly for the ACL to deny access.

Answer

The ACL is set to condition type 'script' but the script is not structured correctly.

Answer

The isMemberOf method requires a group sys_id, not a user ID.

Question 7

A company is expanding its use of ServiceNow and needs to create a custom application for managing employee onboarding tasks. The application includes several tables: Onboarding Request, Task, and Checklist Items. The business requires that when an onboarding request is submitted, a set of tasks should be automatically created in a specific order. Additionally, when all tasks are completed, the onboarding request status should automatically update to 'Completed'. The developer decides to use Flow Designer to automate this process. The developer creates a flow with a trigger on the Onboarding Request table for 'Record created or updated' and adds actions to create tasks. However, during testing, the flow creates tasks but does not update the request status when tasks are completed. What is the most likely issue?

Accepted Answer

The flow is not configured to listen for updates on the Task table.. The flow is triggered only by events on the Onboarding Request table. To update the request status when tasks are completed, the flow must also listen for updates on the Task table (e.g., via a separate flow or a 'Wait for condition' that polls the Task table). Without a trigger or condition monitoring the Task table, the flow has no way to know when tasks finish.

Answer

The flow is set to run only on create, not on update.

Answer

The flow uses a 'Wait for condition' action that is not configured correctly.

Answer

The user does not have rights to update the Onboarding Request table.

Question 8

A company uses a custom application with a table 'incident_task' to track work on incidents. The requirement is to automatically reassign any incident_task that has not been updated in the last 7 days to a specific 'Escalation' group. A developer writes a Business Rule on the 'incident_task' table with the condition 'Current' table and runs on 'before query'. The script checks if (gs.daysAgo(current.sys_updated_on) >= 7) and then performs a current.assignment_group.setValue('escalation_group_sys_id'), followed by current.update(). After testing, the tasks are not being reassigned. What is the most likely cause of this issue?

Accepted Answer

Before query business rules cannot perform updates; they are read-only.. Before query business rules in ServiceNow are executed during the retrieval of records from the database, and they are strictly read-only. They cannot perform updates, inserts, or deletes because the database operation is not yet complete. Attempting to call current.update() within a before query business rule will be ignored or cause an error, which is why the reassignment never occurs.

Answer

The business rule should be changed to 'after' update.

Answer

The condition should use 'sys_updated_on' instead of 'sys_updated_on' (the same field).

Answer

The script uses current.update() which causes recursion.

Question 9

A developer is building a custom scoped application for tracking IT assets. The application includes a table named 'u_asset' and a related table named 'u_asset_audit' that extends 'u_asset'. The developer needs to ensure that whenever a record is inserted into 'u_asset_audit', a corresponding record is automatically created in a separate 'u_asset_history' table. The developer writes a Business Rule on 'u_asset_audit' with the 'after insert' timing. However, during testing, the history record is not being created. The developer confirms that the Business Rule is active, the condition is empty, and the script contains no errors. What is the most likely reason the Business Rule is not executing?

Accepted Answer

The Business Rule is set to run 'after insert' but the developer is testing by updating an existing record, not inserting a new one.. The correct answer is that the Business Rule is set to run on insert, but the developer is testing by updating a record. Business Rules are operation-specific: an 'after insert' rule only triggers when a new record is inserted. If the developer is updating an existing record, the rule will not fire. This is a frequent mistake when testing Business Rules, as developers may not realize the operation being performed does not match the rule's timing. The other options are incorrect because they either misrepresent ServiceNow capabilities or assume test conditions that contradict the scenario.

Answer

Business Rules on extended tables do not inherit to child tables unless the 'Inherit' check box is selected on the parent table's Business Rule.

Answer

The 'after insert' Business Rule is not triggered because the 'u_asset_audit' table is a child table and ServiceNow does not allow Business Rules on child tables.

Answer

The Business Rule is not executing because the 'u_asset_audit' table does not have any records inserted into it.

Question 10

A developer is troubleshooting a new business rule that should populate the 'assigned_to' field on the 'incident' table with the caller's manager when the incident is created. The business rule is set to 'before insert' and is active. However, after testing, the 'assigned_to' field remains empty on new incidents. The script includes the line: current.assigned_to = current.caller_id.manager; There are no errors in the system log. What is the most likely cause?

Accepted Answer

The 'caller_id' field does not reference a user record with a populated 'manager' field.. The business rule uses dot-walking to access the manager of the caller. If the caller's user record lacks a manager, the assigned_to field will be empty. Since the rule is before insert and active, and no errors occur, the most plausible cause is that the manager field is not populated for that caller. Checking the caller's user record would confirm this.

Answer

The 'assigned_to' field is not writable on the incident table.

Answer

The business rule is running before the 'caller_id' field is populated.

Answer

Business rules cannot set fields on the same record they are triggered on.

Question 11

A developer needs to create a script that runs on the server side and is triggered whenever a new record is inserted into the 'problem' table. The script must set the 'opened_at' field to the current date and time if it is not already set. Which type of script should the developer use?

Accepted Answer

A business rule with the 'before' insert timing.. The requirement is to run server-side logic when a new problem record is inserted, specifically to set opened_at if empty. A before insert business rule executes on the server before the record is saved, allowing modification of the current record. This ensures the field is set correctly at creation time without user intervention.

Answer

A client script with an onSubmit function.

Answer

A UI action with the 'client' checkbox selected.

Answer

A scheduled job that runs every minute.

Question 12

A developer is creating a client script that should run when a user changes the 'priority' field on an incident form. The script should display an alert if the priority is set to '1 - Critical'. Which type of client script should the developer use?

Accepted Answer

onChange. The onChange client script type is triggered when a specified field's value changes on a form. By configuring the script with the field name 'priority', it will run each time the user selects a different priority, enabling the alert condition to be evaluated immediately. This matches the scenario's need for dynamic feedback on field modification.

Answer

onCellEdit

Answer

onSubmit

Answer

onLoad

Question 13

A developer is creating a Script Include that will be called from a client script. The Script Include must be accessible from the client side and should not expose sensitive logic. The developer writes the following code:

var MyUtils = Class.create();
MyUtils.prototype = {
    initialize: function() {},
    getData: function() {
        return 'sensitive';
    },
    type: 'MyUtils'
};

Which two statements about making this Script Include client-callable are true? (Choose two.)

Accepted Answer

The Script Include must have the 'Client callable' checkbox selected.. To make a Script Include client-callable, the 'Client callable' checkbox must be selected, which generates a client-side proxy. Additionally, the methods intended for client use must be defined on the prototype so they are exposed through that proxy. These two conditions enable secure, controlled access to server-side logic from client scripts.

Answer

The Script Include must extend the AbstractAjaxProcessor class to be client callable.

Answer

The Script Include must be written using ES5 syntax to be compatible with all browsers.

Answer

The Script Include must be defined as a global Script Include, not scoped.

Question 14

A developer is building a custom scoped application in ServiceNow. The application includes a table named 'u_asset_request' that extends the 'task' table. The developer needs to ensure that when an asset request is created, a related record is automatically created in the 'u_asset_request_line' table. The developer writes a business rule on 'u_asset_request' that runs after insert and uses GlideRecord to insert into 'u_asset_request_line'. However, during testing, the related record is not being created. The business rule is active and has no conditions. What is the most likely cause?

Accepted Answer

The user running the business rule does not have write access to the 'u_asset_request_line' table.. Business rules run under the security context of the user who initiated the action. If that user does not have write access to the target table, the insert will be denied, often without an explicit error in the UI. Since the business rule is active and unconditional, the most likely cause is insufficient permissions on the 'u_asset_request_line' table. Developers should verify ACLs and consider running the rule as system if appropriate.

Answer

The business rule is missing the 'setWorkflow(false)' call, causing a recursive loop.

Answer

The 'u_asset_request_line' table does not have a reference field to 'u_asset_request', so the insert fails silently.

Answer

The business rule is not running because it is set to run after insert, but the record is being inserted via a script that bypasses business rules.

Question 15

A developer needs to create a UI Action that is visible only to users with the 'itil' role and only when the incident state is 'Resolved'. The UI Action should appear as a button on the incident form. Which condition should be used in the UI Action's 'Condition' field?

Accepted Answer

gs.hasRole('itil') && current.state == 6. The UI Action condition must be a server-side JavaScript expression that evaluates to true or false. To check role membership, gs.hasRole('itil') is the correct method. To check the state value, current.state == 6 is correct because the incident state field stores integer values, with 6 representing Resolved. Using the logical AND ensures both conditions must be met for the button to appear.

Answer

gs.hasRole('itil') && current.state == 'Resolved'

Answer

current.state == 6 && gs.getUser().isMemberOf('itil')

Answer

gs.hasRole('itil') || current.state == 6