SNOW-CAD Multiple Select — 10 Questions

Question 1

Which THREE of the following are true about ACLs (Access Control Lists)? (Choose three.)

Accepted Answer

ACLs can include conditions that must be met for access.. Option A is correct because ACLs are rule sets whose individual entries (ACEs) contain conditions—such as matching user, group, role, source IP, or time—that must be satisfied before the requested access is granted. Option D is correct because ACLs define permissions that explicitly allow or deny operations like read (SELECT/view) and write (INSERT/UPDATE/DELETE) on records or objects, which is their core purpose. Option E is correct because ACLs can be attached to specific resources and scoped to a particular application or context, so permissions apply only within that application's scope. Option B is wrong because ACLs are enforced server-side (by the database, OS, or service), not evaluated on the client, which the client could bypass. Option C is wrong because ACLs apply broadly to many object types—tables, records, files, network interfaces, and other resources—not only to system tables.

Answer

ACLs are evaluated on the client side.

Answer

ACLs are only applicable to system tables.

Question 2

Which THREE of the following are features available in ServiceNow for integrating data with external systems? (Choose three.)

Accepted Answer

SOAP Web Service. Option A (SOAP Web Service) is correct because ServiceNow provides outbound SOAP web service support via SOAP Message and related modules, and inbound SOAP via Scripted SOAP Web Services, enabling XML-based integration with external systems. Option B (LDAP) is correct because ServiceNow offers an LDAP integration through the LDAP Server and LDAP OU configuration records, used to import user and group data from directory servers. Option D (REST API) is correct because ServiceNow exposes the REST API (Table API, Import Set API, Scripted REST APIs) and outbound REST Message functionality for integrating with external systems over HTTP. Option C (Email) is not one of the marked integration features here, since email is primarily a notification and inbound email action mechanism rather than a data integration API. Option E (Print) is incorrect because printing is a UI/output capability, not a data integration feature.

Answer

Email

Answer

Print

Question 3

A developer is investigating why an outbound REST message is not sending data correctly. Which TWO actions should the developer check first? (Choose two.)

Accepted Answer

Check the authentication profile.. Option D (Check the authentication profile) is correct because outbound REST messages in ServiceNow rely on REST message authentication profiles (Basic, OAuth 2.0, API key, etc.) to authenticate to the target endpoint; a misconfigured or missing profile causes 401/403 responses and prevents data from being sent correctly. Option E (Verify the endpoint URL) is correct because an incorrect, malformed, or unreachable endpoint URL (wrong host, path, port, or protocol) means the REST call never reaches the intended service, so no data is transmitted as expected. Options A and B are not appropriate first checks: restarting the web server is a disruptive, non-targeted action that does not address REST message configuration, and reinstalling the ServiceNow instance is an extreme, destructive step unrelated to diagnosing a single outbound REST integration. Option C (Review the script include for errors) may be relevant later if custom scripting is involved, but it is not one of the two first checks for authentication and endpoint configuration issues.

Answer

Restart the web server.

Answer

Reinstall the ServiceNow instance.

Answer

Review the script include for errors.

Question 4

Which TWO are valid ways to create a new application scope in ServiceNow? (Choose two.)

Accepted Answer

Install an update set from an application repository that contains an application scope.. Installing an update set from an application repository that contains an application scope is a standard method to bring a scoped application into an instance. The update set carries the application definition and its scope, and upon commit, ServiceNow creates the application scope automatically if it does not already exist. This is a common approach for distributing scoped applications across instances.

Answer

Use the 'Application Creator' UI page to define a new scope via REST API.

Answer

Import a v1 update set that includes an application definition.

Answer

Navigate to 'All' > 'Scopes' and click 'New'.

Question 5

A developer wants to use a script include to reuse logic across multiple business rules. Which two considerations should be made? (Choose two.)

Accepted Answer

Script includes should not have side effects on current record.. Option B is correct because a script include is a reusable library of logic, so it should be designed as a stateless, side-effect-free function that operates on data passed to it rather than mutating the current record (e.g., calling current.update() or setting current.field values) as a hidden consequence of being invoked. Option D is correct because script includes are scope-aware: a script include created in a given application scope is accessible to business rules in that same scope without needing to be marked global, and it only needs the 'Accessible from all scopes' flag when it must be called from a different scope. Option A is wrong because script includes can absolutely call other script includes (via new ClassName() or ClassName.method()) as long as the called include is accessible in the caller's scope. Option C is wrong because making a script include global is not required for same-scope access; it is only needed for cross-scope access, so 'must be global' is an overstatement. Option E is wrong because script includes are not automatically evaluated at server start; they are loaded/instantiated on demand when referenced by a business rule or other server-side script.

Answer

Script includes cannot call other script includes.

Answer

Script includes must be global to be accessible from all scopes.

Answer

Script includes are automatically evaluated at server start.

Question 6

A developer is creating a REST API integration that retrieves data from an external system and updates ServiceNow records. Which THREE considerations are critical for handling authentication securely? (Choose three.)

Accepted Answer

Store credentials in the ServiceNow Credential Store instead of scripts. Storing credentials directly in scripts exposes them to unauthorized access and makes rotation difficult. The ServiceNow Credential Store securely encrypts and manages credentials, allowing scripts to reference them by alias without hardcoding sensitive data, which is a fundamental security best practice for REST API integrations.

Answer

Enable credential monitoring in the Security Operations Center

Answer

Configure the external system to authenticate ServiceNow requests

Question 7

Which TWO statements are true about using ServiceNow Studio for application development?

Accepted Answer

Studio provides a guided interface to create application files such as tables, business rules, and client scripts.. ServiceNow Studio provides a guided, low-code interface that simplifies the creation of application artifacts such as tables, business rules, client scripts, UI policies, and more. It offers wizards and templates to help developers build components without needing to manually write all the underlying XML or JavaScript from scratch, making it ideal for rapid application development within the Now Platform.

Answer

Studio requires a separate HI (High-Impact) instance to develop applications.

Answer

When creating a new application in Studio, a new scope is automatically generated without user input.

Answer

Studio can only be used by users with the admin role.

Question 8

Which TWO of the following are types of UI Policies? (Choose two.)

Accepted Answer

On change. In ServiceNow, UI Policies come in two distinct types: 'on load' policies, which run when a form is first loaded and can set fields to mandatory, read-only, or hidden before the user interacts with the record, and 'on change' policies, which run when a specified field value changes and dynamically adjust other fields' mandatory, read-only, or visible state. Therefore options B (On load) and A (On change) are the two correct UI Policy types. The remaining options do not exist as UI Policy types: 'On submit' (C) is not a UI Policy type (client-side submission logic is handled by onSubmit client scripts or UI Policy actions, not a policy type), 'On delete' (D) is not a UI Policy type (record deletion is governed by business rules or ACLs), and 'On query' (E) is not a UI Policy type (query behavior is controlled by before-query business rules or ACL read restrictions).

Answer

On submit

Answer

On delete

Answer

On query

Question 9

Which THREE factors can negatively impact the performance of a ServiceNow form?

Accepted Answer

Large client script files (e.g., 100KB+).. Option A is correct because large client script files (e.g., 100KB+) must be downloaded and parsed by the browser on every form load, increasing page weight and JavaScript execution time, which directly degrades form rendering and responsiveness. Option B is correct because synchronous Ajax calls block the browser's main thread until the server responds, freezing the UI and preventing other scripts or user interactions from proceeding, which severely harms form performance. Option C is correct because each UI Policy adds client-side logic that must be evaluated on form load and on field changes, so a large number of UI Policies increases processing overhead and slows form responsiveness. Option D is not correct because tabs/sections are primarily a layout construct; while excessive tabs can affect usability, they are not a primary technical driver of form performance degradation in the same way scripts and policies are. Option E is not correct because AngularJS directives are not a standard ServiceNow form performance concern; ServiceNow forms are not built on AngularJS directives, so their use is not a recognized factor negatively impacting form performance.

Answer

Many tabs (sections) on the form.

Answer

Use of AngularJS directives in the form.

Question 10

Which THREE conditions must be met for a user to successfully see a record in a ServiceNow list view?

Accepted Answer

The user has read permission on the table via an ACL.. ServiceNow uses Access Control Lists (ACLs) to enforce read permissions on tables. Without a read ACL that evaluates to true for the user, the system will not display any records from that table in a list view, regardless of other conditions.

Answer

The user has write permission on the table.

Answer

The user has configured a personalized list view for the table.