SNOW-CAD Platform Features and Integration Practice Question
A ServiceNow instance is configured to use LDAP for user authentication and role membership. After a recent LDAP schema change, users can authenticate but some users are missing their assigned roles. The LDAP server is returning all attributes correctly. What is the most likely cause of this issue?
⚠ Common exam trap
Many candidates confuse a missing 'memberOf' attribute with a Group DN format mismatch, but the question explicitly states all attributes are returned correctly, so the issue must be in how ServiceNow constructs the group search filter, not in the data itself.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The 'LDAP Group DN' format in the LDAP server configuration does not match the new schema
The LDAP Group DN format defines how ServiceNow maps LDAP groups to roles. After a schema change, if the DN structure for groups has been altered (e.g., OU names changed), the stored format in the LDAP server configuration will no longer match, causing role membership to fail even though user authentication (which uses a separate base DN and filter) still works. The LDAP server returning all attributes correctly confirms the issue is in the mapping configuration, not in data retrieval.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The 'LDAP Group DN' format in the LDAP server configuration does not match the new schema
Why this is correct
Role mapping uses LDAP groups; if the DN format changed, groups won't be found, so roles are not applied.
- ✗
The LDAP server's base DN for user search has changed
Why it's wrong here
If the base DN changed, authentication would also likely fail.
- ✗
The 'Use secure connection' checkbox is unchecked in the LDAP configuration
Why it's wrong here
That would cause connection failure, not partial role assignment.
- ✗
The LDAP server is not returning the 'memberOf' attribute for users
Why it's wrong here
The issue states all attributes are returned correctly.
Go deeper
Related to this question
About these practice questions
Courseiva writes every SNOW-CAD question from scratch — 481 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SNOW-CAD practice question is part of Courseiva's free ServiceNow certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SNOW-CAD exam.