SNOW-CAD Platform Features and Integration Practice Test 2 — 15 Questions

Question 1

A company uses IntegrationHub to connect to an external CRM. The OAuth provider record and REST message are configured. When testing, authentication fails. What is the most likely cause?

Accepted Answer

The OAuth provider profile is not linked to the REST message.. The OAuth provider profile must be linked to the REST message; otherwise, the authentication configuration is not applied. Option A is not required for client credentials. Option B: grant_type is in the body, not URL. Option C: POST is correct for token endpoint.

Answer

The client secret is not base64 encoded.

Answer

The token URL is missing the grant_type parameter.

Answer

The REST message is set to POST instead of GET.

Question 2

A developer needs to import CSV data into a custom table using Import Sets. The data contains a reference field to a user record. Which configuration ensures that the user record is correctly matched?

Accepted Answer

Set the target field 'email' as coalesce on the transform map.. Option A is correct because setting the 'email' field as a coalesce field on the transform map tells the Import Set engine to use that field to match incoming records against existing target table records. When the reference field points to a user record, the coalesce field (e.g., email) is used to look up the sys_user table and automatically populate the correct sys_id, ensuring the reference is properly resolved without manual scripting.

Answer

Set the source field as coalesce on the transform map.

Answer

Configure the import set row to be ignored if the user is not found.

Answer

Use a script in the 'on before' transform script to find the user.

Question 3

A ServiceNow instance needs to synchronize data with an external SQL database nightly. Which integration method is most appropriate?

Accepted Answer

Use a MID Server with a JDBC data source.. A MID Server with a JDBC data source is the most appropriate method for nightly batch synchronization with an external SQL database because JDBC provides a direct, efficient, and secure database-level connection without requiring the external database to expose a web service or API. The MID Server acts as a secure proxy, allowing the ServiceNow instance to execute SQL queries against the external database over a persistent, encrypted connection, which is ideal for scheduled bulk data transfers.

Answer

Use a REST API exposed by the external database.

Answer

Use a SOAP web service with a MID Server.

Answer

Use an email-based integration to send CSV files.

Question 4

A developer is creating a REST API in ServiceNow to expose incident data. The API must return only incidents with 'state' = 2 (in progress) and limit results to 50. Which implementation is correct?

Accepted Answer

In the script, use 'gr.addQuery('state', 2); gr.setLimit(50);' and return the records.. Option B is correct because it uses the standard GlideRecord pattern to query the incident table with an 'addQuery' filter for state=2 and 'setLimit' to restrict results to 50, which is the proper server-side approach when building a custom REST API endpoint in a Scripted REST API or similar. The other options misuse table API syntax or GlideRecord methods in ways that would not work as intended.

Answer

Use the ServiceNow table API with endpoint '/api/now/table/incident?state=2&sysparm_limit=50'.

Answer

Use a REST API endpoint with path /api/incidents and set the query parameter 'sysparm_query=state=2' and 'sysparm_limit=50'.

Answer

In the script, use 'gr.get('state', 2)' and then limit via 'gr.setLimit(50)'.

Question 5

A company is using a MID Server to run a discovery probe. The probe fails with a timeout error. The developer checks the MID Server logs and sees 'Connection refused'. What is the most likely issue?

Accepted Answer

The target host's firewall is blocking the port used by the probe.. The 'Connection refused' error in the MID Server logs indicates that the target host actively rejected the connection attempt on the specified port. This is most commonly caused by a firewall on the target host blocking the port used by the discovery probe, as the firewall sends a TCP RST packet to refuse the connection. Incorrect credentials would result in an authentication failure, not a connection refusal, and an unreachable host would produce a 'No route to host' or timeout error.

Answer

The MID Server credentials are incorrect.

Answer

The MID Server's SSL certificate is expired.

Answer

The target host is unreachable from the MID Server network.

Question 6

A developer needs to invoke a third-party SOAP web service from a business rule. The WSDL is imported and the SOAP message is created. What is the correct way to send the request?

Accepted Answer

Create a SOAPMessage object and use the send() method.. Option A is correct because the SOAPMessage object, part of the javax.xml.soap API, provides a send() method that handles the entire SOAP request-response cycle over HTTP. This method automatically marshals the SOAP message, sends it to the endpoint defined in the WSDL, and returns the response as a SOAPMessage object, making it the appropriate choice for invoking a SOAP web service from a business rule.

Answer

Use the XMLDocument object to parse the response only.

Answer

Use a GlideRecord insert to write the SOAP envelope to a table.

Answer

Use the RESTMessageV2 object to send the request as a POST.

Question 7

A ServiceNow instance has a custom table 'u_integration_log' that stores integration transactions. A flow in Flow Designer logs errors by creating records in this table. The flow is running with high volume, and the table is growing quickly causing performance issues. What is the best design to mitigate this?

Accepted Answer

Configure a scheduled job to archive and delete records older than 30 days.. Option A is correct because it directly addresses the root cause of performance degradation—uncontrolled table growth—by implementing a scheduled job to archive and delete records older than 30 days. This reduces table size, improves query performance, and maintains the ability to retain recent logs for debugging. In ServiceNow, scheduled jobs can use GlideRecord to delete records based on a date condition, and archiving can be done via export to CSV or a separate archive table.

Answer

Disable error logging in the flow.

Answer

Use a 'Log to file' action in the flow instead of a table.

Answer

Store logs in a separate instance via MID Server.

Question 8

A developer is implementing a custom integration using the ServiceNow REST API Explorer. The endpoint requires an API key in the header. Which approach should be used to secure the API key?

Accepted Answer

Create an authentication profile of type 'API Key' and reference it in the REST message.. Option A is correct because the ServiceNow REST API Explorer and REST messages support authentication profiles, which securely store and manage API keys. By creating an 'API Key' authentication profile and referencing it in the REST message, the API key is automatically injected into the request header without exposing it in scripts or system properties. This approach follows ServiceNow best practices for credential management and ensures the key is encrypted and centrally managed.

Answer

Hardcode the API key in the script.

Answer

Store the API key in a system property encrypted.

Answer

Use a REST message variable and set the header directly.

Question 9

A company is integrating ServiceNow with an external system using a custom SOAP web service. The external system requires WS-Security with a username token and a timestamp. How should the developer configure this?

Accepted Answer

Configure the WS-Security tab under the SOAP Message record with UsernameToken and timestamp.. Option C is correct because ServiceNow's SOAP Message record includes a dedicated WS-Security tab where you can configure UsernameToken and timestamp elements to meet WS-Security requirements. This allows the platform to generate the proper SOAP envelope headers with the security token and timestamp, which the external system expects for authentication and message freshness validation.

Answer

Use a RESTMessageV2 with Basic Authentication.

Answer

Add the username and password to the SOAP message's HTTP headers.

Answer

Set the SOAP action header to include the token.

Question 10

Which TWO actions are valid for handling errors in a Flow Designer integration action? (Choose two.)

Accepted Answer

Configure the action to log error details to a local log table.. Correct: B and C. Flow Designer allows writing to a log table and sending an email. Option A does not exist as standard output. Option D is for conditions, not error handling. Option E is manual.

Answer

Return a specific error code as a flow variable.

Answer

Send an email notification to the system administrator using a notification action.

Answer

Set the action to automatically retry on failure without configuration.

Question 11

Which TWO approaches are valid for importing data from an external database into ServiceNow on a recurring basis? (Choose two.)

Accepted Answer

Set up a MID Server to run a scheduled transform map from an external SQL query.. Option A is correct because a MID Server can execute a scheduled SQL query against an external database and then run a transform map to map the retrieved data into ServiceNow tables. This approach is a standard pattern for recurring data imports using the MID Server's JDBC capabilities combined with scheduled import sets.

Answer

Use a REST API with a periodic flow that calls an external endpoint.

Answer

Write a business rule that triggers on an external event via web service.

Answer

Use an email inbound action to parse CSV attachments from the external system.

Question 12

Which THREE considerations are important when designing a ServiceNow REST API for external consumption? (Choose three.)

Accepted Answer

Implement rate limiting to protect the instance from overload.. Option A is correct because implementing rate limiting is crucial for protecting a ServiceNow instance from being overwhelmed by excessive API requests from external consumers. Without rate limiting, a single client could degrade performance for all users or even cause an outage. ServiceNow provides built-in mechanisms like the REST API rate limit property (glide.rest.rate_limit) to control request frequency per client.

Answer

Use GlideAggregate for performance in the API script.

Answer

Always use OAuth 2.0 for authentication.

Question 13

A ServiceNow developer is integrating with an external system using a REST message. The external system requires a custom header 'X-API-Key' to be included in every request. Where should the developer configure this header to ensure it is automatically included in all REST messages that call this endpoint?

Accepted Answer

In the 'HTTP Headers' tab of the REST message definition. Option B is correct because the 'HTTP Headers' tab in a REST message definition allows you to define custom headers that are automatically included in every request sent to that endpoint. This is the standard location for headers like 'X-API-Key' that must accompany all calls, as they are part of the HTTP request metadata, not query parameters or authentication credentials.

Answer

In the 'Query Parameters' tab of the REST message definition

Answer

In the 'Authentication Profile' associated with the REST message

Answer

In the Scripted REST API used to create the endpoint

Question 14

An organization uses ServiceNow with an external identity provider (IdP) for single sign-on (SSO). Users report that they cannot log in via SSO, but direct username/password login still works. The ServiceNow administrator checks the SAML2 configuration and sees that the 'Validate AuthnResponse Signature' checkbox is enabled and the 'X.509 Certificate' field is filled. What is the most likely cause of the SSO failure?

Accepted Answer

The IdP's signing certificate has been rotated, but the new certificate is not uploaded to ServiceNow. The most likely cause is that the IdP's signing certificate has been rotated, but the new certificate is not uploaded to ServiceNow. When 'Validate AuthnResponse Signature' is enabled, ServiceNow uses the uploaded X.509 certificate to verify the SAML assertion signature. If the IdP signs responses with a new certificate that ServiceNow does not have, signature validation fails, blocking SSO login while direct username/password login remains unaffected.

Answer

The 'Account lockout after invalid attempts' property is set too low

Answer

The 'Single Sign-On (SSO)' module is disabled in the ServiceNow application menu

Answer

The 'AuthnRequest Signed' checkbox is not enabled in the SAML2 configuration

Question 15

A ServiceNow instance integrates with an external inventory system via a scheduled REST import job. Recently, the import started failing intermittently with HTTP 429 (Too Many Requests) errors. The external system enforces a rate limit of 100 requests per minute. The existing job pulls 1500 records at a time using a single REST message. Which design change would best resolve this issue while ensuring the import completes successfully?

Accepted Answer

Reduce the batch size to 50 records and add a 1-second delay between consecutive REST calls. Option A is correct because reducing the batch size to 50 records ensures that each REST call stays within the external system's rate limit of 100 requests per minute. Adding a 1-second delay between consecutive calls further prevents bursts that could trigger HTTP 429 errors, while still allowing the import to complete by making multiple smaller requests over time.

Answer

Increase the number of threads in the import set table loader to process records faster

Answer

Increase the batch size to 5000 records per request to reduce the number of calls

Answer

Switch the REST message to use Basic Authentication instead of OAuth to reduce overhead