SNOW-CAD Hard Questions — 25 Difficult Questions

Question 1

A company has a custom table 'u_training_course' with a reference field to 'sys_user' named 'u_instructor'. The requirement is that only users with the 'instructor' role can be selected in this field. Which approach should be used to enforce this?

Accepted Answer

Add a reference qualifier on the field to filter users with the 'instructor' role. Option B is correct because a reference qualifier is the declarative way to filter the records available in a reference field on ServiceNow. By adding a condition like 'roles=instructor' to the reference qualifier of the 'u_instructor' field, only users with the 'instructor' role will appear in the lookup, enforcing the requirement at the database query level without custom scripting.

Answer

Create a business rule on the table to check the role and reject invalid selections

Answer

Use a client script to validate the selection before form submission

Answer

Configure an ACL on the reference field to restrict write access

Question 2

A developer needs to create a new application scope. Which of the following is a best practice when defining the scope?

Accepted Answer

Set the scope to 'Protected' to prevent other applications from modifying its records.. Setting the scope to 'Protected' is a best practice because it prevents other applications from modifying the application's records while still allowing the application to access records from other scopes. This balances security and interoperability, ensuring that the application's data integrity is maintained without unnecessarily restricting cross-scope access.

Answer

Use the global scope to avoid access restrictions.

Answer

Use a scope name that is already in use to leverage existing configurations.

Answer

Create the scope and later change the name if needed.

Question 3

An application has a custom table 'u_project' with a field 'u_status' (choice list: Not Started, In Progress, Completed). The developer wants to prevent any update to the record if the status is 'Completed'. Which approach should be used?

Accepted Answer

Create a Business Rule with condition 'current.u_status.changesTo("Completed")' and set 'current.setAbortAction(true)' in the script.. Option C is correct because a Business Rule with the condition `current.u_status.changesTo('Completed')` triggers only when the status field transitions to 'Completed', and `current.setAbortAction(true)` aborts the database update operation at the server level, ensuring that no update can persist regardless of client-side behavior. This approach enforces the restriction server-side, which is essential for data integrity because client-side scripts can be bypassed.

Answer

Create a Database View that filters out Completed records.

Answer

Create a Client Script that sets the field to read-only when status is Completed.

Answer

Create a UI Policy to disable the entire form when status is Completed.

Question 4

Refer to the exhibit. A developer created this Script Include to be used as a REST API endpoint. However, when calling the API, the response is empty. What is the most likely reason?

Accepted Answer

The Script Include is not marked as 'REST API endpoint' or does not extend the appropriate class.. Option D is correct because a Script Include used as a REST API endpoint must either extend the appropriate class (such as 'RESTAPI' or 'RESTAPIV2') or be explicitly marked as a REST API endpoint in its definition. Without this, the platform does not recognize it as a valid endpoint, resulting in an empty response when the API is called.

Answer

The Script Include is not marked as 'Client callable'.

Answer

The function name 'getOpenIncidents' is not exposed.

Answer

The GlideRecord query returns no results.

Question 5

A developer is troubleshooting a business rule in a scoped application that is not triggering. The rule is set to run 'before' query, with condition 'current.state == 1'. The table has read ACLs that restrict access. What is the most likely reason the business rule is not executing?

Accepted Answer

The user does not have read access to the records, so the query does not execute the rule.. Business rules that run 'before query' execute when a query is made against the table. If the user lacks read access due to ACL restrictions, the query itself is not permitted, so the business rule never triggers. This is because the platform's security layer evaluates ACLs before executing business rules, preventing the rule from running when the user cannot read the records.

Answer

The condition 'current.state == 1' is incorrect syntax.

Answer

Another business rule with higher order is preventing execution.

Answer

The business rule is scoped and cannot access the table.

Question 6

A developer creates a business rule on the Incident table that executes a GlideRecord query to update related records. The rule runs on 'after' update and queries the Problem table to set a field. However, the update is not being committed. What is the most likely reason?

Accepted Answer

The GlideRecord query requires an explicit gr.updateMultiple() or gr.commit() to persist changes.. In ServiceNow, when a GlideRecord query is used in an 'after' business rule to update records on another table, the changes are not automatically committed. The developer must explicitly call gr.updateMultiple() to persist updates to multiple records, or gr.update() for a single record. Option B correctly identifies this requirement, as the update is not being committed without an explicit method call.

Answer

The developer forgot to use gr.insert() instead of gr.update().

Answer

After business rules cannot update other tables.

Answer

The query returns more than 100 records, causing a governor limit.

Question 7

A developer is designing a custom application with a table that stores sensitive employee data. The requirement is that only managers can view records where they are the manager of the employee. Which two configurations are needed to implement this requirement?

Accepted Answer

Use a UI Policy to set fields to read-only or invisible for non-managers. Option A is correct because UI Policies can be configured to set fields as read-only or invisible based on conditions, such as the user's role or relationship to the record. This allows non-managers to see the record but prevents them from viewing sensitive fields, aligning with the requirement to restrict visibility at the field level.

Answer

Create a new view that excludes sensitive fields

Answer

Create a Business Rule that deletes records if the user is not the manager

Answer

Use a Client Script to hide fields if the user is not the manager

Question 8

An organization uses ServiceNow Discovery to populate the CMDB. They notice that some CI relationships are missing after a discovery run. The discovery logs show no errors. What is the most likely cause?

Accepted Answer

The CI Class Manager does not have the correct relationship types defined for the discovered CIs. Option B is correct because the CI Class Manager defines which relationship types are valid for each CI class. If the relationship types are not defined or incorrectly configured, Discovery will not create those relationships even if the probes run successfully and no errors are logged. The absence of errors indicates the discovery process completed normally, but the missing relationships are due to missing or incorrect relationship definitions in the CI Class Manager.

Answer

The MID server credentials do not have permission to query relationship data

Answer

The discovery probes are not configured to capture relationships

Answer

The CMDB is set to read-only mode

Question 9

A ServiceNow instance integrates with an external HR system via REST. The integration retrieves employee records and updates the 'sys_user' table. Recently, the integration started failing with '403 Forbidden' errors. The REST API endpoint and authentication credentials have not changed. Which action should the administrator take first to resolve the issue?

Accepted Answer

Check the Access Control List (ACL) rules on the sys_user table for the integration user.. A 403 Forbidden error indicates that the server understood the request but is refusing to authorize it. Since the REST endpoint and credentials haven't changed, the most likely cause is that the integration user's access rights within ServiceNow have been altered, specifically the Access Control List (ACL) rules on the 'sys_user' table. The administrator should first check these ACLs to ensure the integration user still has the necessary read/write permissions.

Answer

Review the inbound REST message configuration for rate limiting settings.

Answer

Reset the password for the integration user in the external system.

Answer

Verify the REST API endpoint URL in the integration record.

Question 10

A developer notices that a scheduled job runs but does not execute the script. The job is set to run every hour. The script uses the 'gs.log' function to write messages. The log shows no output. What is the most likely cause?

Accepted Answer

The job is set to 'Inactive'.. Option C is correct because if a scheduled job is set to 'Inactive', it will still appear in the scheduled jobs list and may be considered 'running' in the sense that the system processes it, but the associated script will not execute. The 'gs.log' function would produce no output because the script never runs. This is a common oversight when a developer creates or clones a job but forgets to activate it.

Answer

The job's condition script has a syntax error.

Answer

The 'sys_updated_on' field is not being updated.

Answer

The job condition is set to 'false' so it never triggers.

Question 11

A Service Portal widget is failing to update a reference field on a form after a user selects a value from a reference picker. The developer reviews the widget's client controller and sees the following code snippet: $scope.c.data.selectedItem = value; The server script expects 'selectedItem' to be a sys_id string, but it is receiving an object. What is the most likely cause?

Accepted Answer

The reference field returns an object with 'value' and 'display' properties; the code should extract the sys_id.. Option D is correct because when a reference picker returns a value in Service Portal, it typically provides an object containing both the display value and the sys_id (e.g., {value: 'sys_id', display: 'name'}). The client controller code assigns this entire object to $scope.c.data.selectedItem, but the server script expects a plain sys_id string. The developer must extract the sys_id property (e.g., value.sys_id or value.value) before assigning it to the scope variable.

Answer

The server script expects the parameter in a different scope variable, like $scope.c.data.item.

Answer

The $scope.c.data assignment is incorrect; it should be $scope.data.

Answer

The client controller is not allowed to set $scope.c variables.

Question 12

A developer writes a business rule that queries the 'incident' table using GlideRecord. The script loops through all incidents and updates a field. After running, the developer notices that only a subset of records were updated. What is the most likely cause?

Accepted Answer

The GlideRecord query did not include a condition, so it used a default filter that limited results. Option B is correct because GlideRecord queries in ServiceNow automatically apply a default filter when no explicit condition is set, typically limiting results to records where the `active` field is `true`. This default behavior, known as the 'active filter,' causes the script to only process a subset of incidents (those that are active) rather than all records in the table, explaining why only some were updated.

Answer

The user running the script lacks write ACL on the table

Answer

The field name used in the update was misspelled

Answer

The script did not call getRowCount() before the loop

Question 13

Which THREE conditions must be met for a user to successfully see a record in a ServiceNow list view?

Accepted Answer

The user has read permission on the table via an ACL.. Option B is correct because ServiceNow uses Access Control Lists (ACLs) to enforce read permissions on tables. Without a read ACL that evaluates to true for the user, the system will not display any records from that table in a list view, regardless of other conditions.

Answer

The user has write permission on the table.

Answer

The user has configured a personalized list view for the table.

Question 14

A ServiceNow instance is being integrated with an external HR system using a SOAP message. The SOAP call is failing intermittently. The developer notices that the XML payload contains special characters like '&' and '<'. What is the best practice to handle these characters in SOAP messages?

Accepted Answer

Escape the characters using XML entities (e.g., & for &).. SOAP messages are XML-based, and special characters like '&' and '<' must be escaped using XML entities (e.g., & for &, < for <) to maintain valid XML syntax. This ensures the XML parser correctly interprets the payload without breaking the message structure, which is the standard practice per the XML specification and SOAP protocol.

Answer

Wrap the payload in a CDATA section.

Answer

Encode the entire payload in Base64.

Answer

Use URL encoding for the payload.

Question 15

Which TWO of the following are valid methods to authenticate a REST API call to ServiceNow?

Accepted Answer

Basic Authentication with username and password.. Option C is correct because ServiceNow supports Basic Authentication, where the REST API call includes an HTTP Authorization header with a Base64-encoded string of 'username:password'. This is a straightforward method for authenticating API requests, though it requires HTTPS to avoid exposing credentials in plaintext.

Answer

SAML assertion authentication.

Answer

LDAP authentication.

Answer

API Key authentication.

Question 16

A global company is using ServiceNow for IT Service Management. They have an external asset management system that needs to update asset records in ServiceNow in real-time. The integration is implemented using REST API calls from the external system to ServiceNow. Recently, the integration started failing intermittently with HTTP 429 (Too Many Requests) errors. The external system is sending a high volume of update requests (up to 1000 per minute) to the /api/now/table/alm_asset endpoint. The administrator noticed that the instance performance is degraded during peak times. The company wants to resolve the 429 errors while ensuring data is updated as quickly as possible, but without overloading the instance. Which course of action should the administrator take?

Accepted Answer

Implement a queue-based integration using Flow Designer to process updates asynchronously with a controlled rate.. Option C is correct because it addresses the root cause of the 429 errors—overwhelming the REST API endpoint with synchronous requests—by decoupling the external system from direct writes. Using Flow Designer with a queue (e.g., via the ServiceNow Queue or a custom table) allows the external system to submit requests asynchronously, and then a scheduled flow or script processes them at a controlled rate (e.g., using a rate limiter or batch size). This ensures data is updated as quickly as possible without exceeding the instance's API rate limits or degrading performance, as the processing is throttled server-side.

Answer

Increase the API rate limit in the instance's system properties.

Answer

Reduce the number of requests from the external system to 500 per minute.

Answer

Switch the authentication method from basic to OAuth to reduce overhead.

Question 17

A developer is writing a business rule that should trigger on update of the 'short_description' field of an incident. The rule needs to check if the new value contains 'urgent' and, if so, set the priority to 1. Which TWO statements are true about implementing this rule?

Accepted Answer

The condition 'current.short_description.changes()' can be used to ensure the rule runs only when short_description changes.. Option A is correct because the `changes()` method in ServiceNow returns true only when the specified field's value has been modified during the current transaction. This ensures the business rule triggers exclusively on updates to the `short_description` field, preventing unnecessary execution on other field changes. Option B is correct because `current.short_description` always holds the new (updated) value of the field when the business rule runs after the database update.

Answer

The new value of short_description can be accessed using previous.short_description.

Answer

To set the priority, use current.priority.setValue(1).

Answer

The comparison should use current.short_description.indexOf('urgent') !== -1.

Question 18

A developer needs to create a new table that will store confidential employee feedback. The table must have the following characteristics: (1) Only authorized HR users can read the records. (2) The table should use the 'task' model to leverage assignment and state fields. (3) The table should be accessible via web services for integration. Which TWO actions are required to meet these requirements?

Accepted Answer

Extend the 'task' table. Option D is correct because extending the 'task' table allows the new table to inherit the assignment and state fields required by the 'task' model. This is the standard approach in ServiceNow for creating tables that leverage task-related functionality, such as assignments and workflow states.

Answer

Set the 'table' access policy to 'Internal'

Answer

Extend the 'incident' table instead of 'task'

Answer

Enable the 'Allow web service access' property on the table

Question 19

A developer encounters this error when running a business rule in a scoped application. The table 'x_myapp_incident' was created in the application scope and has records in it. What is the most likely cause?

Accepted Answer

The table was removed from the application scope after creation.. When a table is removed from an application scope after creation, the table still exists in the instance but is no longer associated with the application. Business rules running in the scoped application cannot access tables that are not part of the application's scope, causing an error. This is because scoped applications enforce strict table visibility rules, and only tables explicitly included in the application scope are accessible.

Answer

The ACLs on the table restrict access for the script's user.

Answer

The business rule is trying to access a table in a different scope without using the 'global.' prefix.

Answer

The application was installed via an update set and the table was not included.

Question 20

A developer implemented the client script shown in the exhibit to auto-populate the assigned-to field based on the task type. However, when the task type is changed, the assigned-to field is not updated. The server-side script 'TaskTypeAjax' is correctly defined and returns a valid sys_id. What is the most likely reason for the failure?

Accepted Answer

The Script Include 'TaskTypeAjax' is not client-callable. The client script attempts to call a Script Include named 'TaskTypeAjax' from the client side. By default, Script Includes are not accessible from client scripts unless the 'Client callable' checkbox is enabled in the Script Include record. Since the script is failing to update the assigned-to field, the most likely cause is that 'TaskTypeAjax' is not marked as client-callable, preventing the GlideAjax request from executing successfully.

Answer

The client script does not check if oldValue is different from newValue

Answer

The client script returns on isLoading, preventing execution

Answer

A UI policy is overriding the assigned-to field