ServiceNow CAD Practice Test 37
Question 360
A department needs a ticket to reference its owning location without copying every location attribute. Which practical correction or implementation decision is MOST directly appropriate?
- Store user names as comma-separated free text and assume they are reliable foreign keys.
- Create and test a reference relationship with appropriate access controls.
- Define and test an appropriate identifier and constraints for lookup workflows.
- Verify parent suitability and test inherited behavior before deploying.
Explanation
Correct Answer
B:Create and test a reference relationship with appropriate access controls. The intended behavior can be checked because reference selection opens and resolves the correct existing record.
Incorrect Answers
A:Store user names as comma-separated free text and assume they are reliable foreign keys. This would not correct the Reference field relations workflow. Typing display names into arbitrary strings creates stale and ambiguous links.
C:Define and test an appropriate identifier and constraints for lookup workflows. This could help Unique business identifier and indexes, but it does not resolve the Reference field relations case. Reference fields model relationships using a target table rather than ordinary unvalidated text.
D:Verify parent suitability and test inherited behavior before deploying. This could help Table extension and inherited fields, but it does not resolve the Reference field relations case. Reference fields model relationships using a target table rather than ordinary unvalidated text.
Question 361
A flow triggers but never creates the expected related task. After the recommended Flow execution logs and troubleshooting change is implemented, which observation MOST directly verifies that it works?
- Evidence identifies trigger record, step inputs, error and controlled correction.
- A test record invokes the flow only for the selected insert or state change.
- Tests traverse only the intended branch and record branch outcomes.
- Test replies update the intended case only when sender and conditions permit.
Explanation
Correct Answer
A:Evidence identifies trigger record, step inputs, error and controlled correction. This directly tests whether the Flow execution logs and troubleshooting goal was met. Execution history and logs support diagnosis beyond assuming the flow ran.
Incorrect Answers
B:A test record invokes the flow only for the selected insert or state change. This is evidence about Flow Designer record trigger, not direct proof of the required Flow execution logs and troubleshooting behavior. The relevant check is that evidence identifies trigger record, step inputs, error and controlled correction.
C:Tests traverse only the intended branch and record branch outcomes. This is evidence about Flow conditions and branching, not direct proof of the required Flow execution logs and troubleshooting behavior. The relevant check is that evidence identifies trigger record, step inputs, error and controlled correction.
D:Test replies update the intended case only when sender and conditions permit. This is evidence about Inbound email action parsing, not direct proof of the required Flow execution logs and troubleshooting behavior. The relevant check is that evidence identifies trigger record, step inputs, error and controlled correction.
Question 362
Requests assigned to one department must be visible only to authorized role holders meeting record criteria. Which approach BEST meets the requirement while respecting the system constraints?
- Configure ACL role and condition requirements and verify records that satisfy each part.
- Use the platform's Access Control Debug tools and user impersonation where authorized.
- Obtain authorized privileged role elevation, such as security_admin when required, before ACL edits.
- Check only one successful administrative record and assume all other record conditions are correct.
Explanation
Correct Answer
A:Configure ACL role and condition requirements and verify records that satisfy each part. ACL role, condition and script gates are evaluated to determine permitted operations. Verification should demonstrate that access tests reflect both role membership and field condition evaluation.
Incorrect Answers
B:Use the platform's Access Control Debug tools and user impersonation where authorized. This primarily addresses Access Control Debug and denial analysis, not the specific Access control condition versus role decision. Here, aCL role, condition and script gates are evaluated to determine permitted operations.
C:Obtain authorized privileged role elevation, such as security_admin when required, before ACL edits. This primarily addresses Elevated security_admin privilege for ACL edits, not the specific Access control condition versus role decision. Here, aCL role, condition and script gates are evaluated to determine permitted operations.
D:Check only one successful administrative record and assume all other record conditions are correct. This is an unsafe or ineffective shortcut for Access control condition versus role. Granting access based on either unrelated condition alone may bypass intended restrictions.
Question 363
A developer needs to maintain a legacy workflow while planning modernization. An engineer must explain the recommendation for Workflow versus Flow Designer lifecycle. Which underlying principle is the MOST accurate?
- Automation must handle action failures rather than treating step initiation as completion.
- Legacy Workflow and Flow Designer coexist in some instances but differ in maintenance and capability.
- Event parameters can carry contextual data between the event producer and consumer.
- Data pills carry typed step and trigger outputs through a flow.
Explanation
Correct Answer
B:Legacy Workflow and Flow Designer coexist in some instances but differ in maintenance and capability. Therefore the implementation decision is to review existing Workflow behavior and select an appropriate supported Flow Designer design for new automation.
Incorrect Answers
A:Blind replacement without mapping approvals and conditions can change business behavior. Automation must handle action failures rather than treating step initiation as completion.
C:Blind replacement without mapping approvals and conditions can change business behavior. Event parameters can carry contextual data between the event producer and consumer.
D:Blind replacement without mapping approvals and conditions can change business behavior. This describes the separate Flow Designer data pills mechanism; the present case instead requires Workflow versus Flow Designer lifecycle.
Question 364
An external API returns a timeout after it may have created a task. After the recommended REST timeout and retry safety change is implemented, which observation MOST directly verifies that it works?
- Authorized calls succeed and credentials are absent from source code and public logs.
- Repeated tests do not create duplicate external records for the same business operation.
- Errors identify authorization, path or payload issues without logging secrets.
- The final table contains valid records and an exception report tracks rejects.
Explanation
Correct Answer
B:Repeated tests do not create duplicate external records for the same business operation. This directly tests whether the REST timeout and retry safety goal was met. Network failure does not prove a remote write was never committed.
Incorrect Answers
A:Authorized calls succeed and credentials are absent from source code and public logs. This is evidence about REST authentication with stored credentials, not direct proof of the required REST timeout and retry safety behavior. The relevant check is that repeated tests do not create duplicate external records for the same business operation.
C:Errors identify authorization, path or payload issues without logging secrets. This is evidence about REST logging and diagnostics, not direct proof of the required REST timeout and retry safety behavior. The relevant check is that repeated tests do not create duplicate external records for the same business operation.
D:The final table contains valid records and an exception report tracks rejects. This is evidence about Import reconciliation and onBefore rejection, not direct proof of the required REST timeout and retry safety behavior. The relevant check is that repeated tests do not create duplicate external records for the same business operation.
Question 365
A user opens a case form and should see a contextual introductory message. Which approach BEST meets the requirement while respecting the system constraints?
- Use an onLoad client script and supported g_form methods for initial presentation.
- Put a form-load requirement solely in an onSubmit handler and expect it before save.
- Use an accessible client-callable Script Include with asynchronous GlideAjax and validated input.
- Use an onSubmit client script to provide feedback and return false when invalid.
Explanation
Correct Answer
A:Use an onLoad client script and supported g_form methods for initial presentation. onLoad scripts execute during form initialization, distinct from onChange or submit events. Verification should demonstrate that the message or supported field state appears when the form loads.
Incorrect Answers
B:Put a form-load requirement solely in an onSubmit handler and expect it before save. This is an unsafe or ineffective shortcut for onLoad client script initialization. Triggering initialization on every field change can create redundant behavior.
C:Use an accessible client-callable Script Include with asynchronous GlideAjax and validated input. This primarily addresses GlideAjax asynchronous client-server pattern, not the specific onLoad client script initialization decision. Here, onLoad scripts execute during form initialization, distinct from onChange or submit events.
D:Use an onSubmit client script to provide feedback and return false when invalid. This primarily addresses onSubmit client script validation, not the specific onLoad client script initialization decision. Here, onLoad scripts execute during form initialization, distinct from onChange or submit events.
Question 366
A developer wants to automate obvious field mapping without losing renamed columns. An engineer must explain the recommendation for Auto Map Matching Fields limits. Which underlying principle is the MOST accurate?
- Transform Maps determine how import set fields populate target table fields.
- Auto-map assists matching field names but cannot infer every semantic transformation.
- Transform scripts allow custom mapping logic where declarative mapping is insufficient.
- Integration authentication should be managed separately from code configuration.
Explanation
Correct Answer
B:Auto-map assists matching field names but cannot infer every semantic transformation. Therefore the implementation decision is to use Auto Map Matching Fields and manually review unmatched or incorrect mappings.
Incorrect Answers
A:Unexamined auto mapping can omit fields whose source names differ. Transform Maps determine how import set fields populate target table fields.
C:Unexamined auto mapping can omit fields whose source names differ. Transform scripts allow custom mapping logic where declarative mapping is insufficient.
D:Unexamined auto mapping can omit fields whose source names differ. This describes the separate REST authentication with stored credentials mechanism; the present case instead requires Auto Map Matching Fields limits.
Question 367
An application must calculate a stored default before a record is committed. Which practical correction or implementation decision is MOST directly appropriate?
- Test before-rule conditions and ensure no unnecessary recursive updates.
- Update the same record again from an after rule to perform simple pre-save field assignment.
- Keep synchronous invariants separate from safe async follow-up.
- Verify after-rule conditions and idempotent related record creation.
Explanation
Correct Answer
A:Test before-rule conditions and ensure no unnecessary recursive updates. The intended behavior can be checked because the transaction reflects the intended value or is aborted according to the rule.
Incorrect Answers
B:Update the same record again from an after rule to perform simple pre-save field assignment. This would not correct the Before Business Rule validation workflow. Placing required pre-save validation only in a post-commit notification is too late.
C:Keep synchronous invariants separate from safe async follow-up. This could help Async Business Rule processing, but it does not resolve the Before Business Rule validation case. Before Business Rules act before the database operation in the applicable transaction.
D:Verify after-rule conditions and idempotent related record creation. This could help After Business Rule related records, but it does not resolve the Before Business Rule validation case. Before Business Rules act before the database operation in the applicable transaction.
Question 368
A client script shows a user-friendly warning when a numeric value is invalid. If the relevant Client-side validation versus authoritative enforcement safeguard is omitted, which outcome is the MOST directly associated failure?
- A REST update may bypass browser-only checks and store invalid data.
- Maintaining only one sprawling view can hinder usability for distinct personas.
- Copying sensitive hidden server data into a client scratchpad can disclose it.
- A UI policy cannot replace ACL enforcement or every server-side data validation.
Explanation
Correct Answer
A:A REST update may bypass browser-only checks and store invalid data. Client behavior improves usability but is not a trusted server security or integrity boundary. The corrective approach is to enforce critical constraints server-side in addition to UI checks.
Incorrect Answers
B:Maintaining only one sprawling view can hinder usability for distinct personas. This failure pattern belongs chiefly to Multiple form views by persona; it is not the failure most directly tested in the Client-side validation versus authoritative enforcement situation. A REST update may bypass browser-only checks and store invalid data.
C:Copying sensitive hidden server data into a client scratchpad can disclose it. This failure pattern belongs chiefly to Display Business Rule and g_scratchpad; it is not the failure most directly tested in the Client-side validation versus authoritative enforcement situation. A REST update may bypass browser-only checks and store invalid data.
D:This failure pattern belongs chiefly to UI policies for required and visible fields; it is not the failure most directly tested in the Client-side validation versus authoritative enforcement situation.
Question 369
A code owner wants changes from a ServiceNow application tracked in version control. Which practical correction or implementation decision is MOST directly appropriate?
- Link the correct app and repository and validate initial synchronization.
- Rename the app without configuring repository access and assume it starts committing automatically.
- Review modified app files and commit only verified changes.
- Compare branch and revision references before updating instance metadata.
Explanation
Correct Answer
A:Link the correct app and repository and validate initial synchronization. The intended behavior can be checked because the app is linked to the expected repository and committed changes are traceable.
Incorrect Answers
B:Rename the app without configuring repository access and assume it starts committing automatically. This would not correct the Link app to Git repository in Studio workflow. Untracked manual editing can produce undocumented deployment drift.
C:Review modified app files and commit only verified changes. This could help Commit application changes to Git, but it does not resolve the Link app to Git repository in Studio case. ServiceNow source control integration manages application metadata versions through repository operations.
D:Compare branch and revision references before updating instance metadata. This could help Retrieve upstream source changes, but it does not resolve the Link app to Git repository in Studio case. ServiceNow source control integration manages application metadata versions through repository operations.
Question 370
A role design includes elevated review rights but should avoid unrelated privileged access. Which practical correction or implementation decision is MOST directly appropriate?
- Test security with direct read attempts and impersonated users.
- Assume role names alone enforce inheritance without configuration.
- Model scoped roles and test each persona's allowed operations.
- Audit effective role memberships for sample users before deployment.
Explanation
Correct Answer
D:Audit effective role memberships for sample users before deployment. The intended behavior can be checked because role inspection demonstrates only expected included rights.
Incorrect Answers
A:Test security with direct read attempts and impersonated users. This could help Distinguish module access from record roles, but it does not resolve the Role inclusion and effective access case. User access can depend on assigned roles and configured role relationships.
B:Assume role names alone enforce inheritance without configuration. This would not correct the Role inclusion and effective access workflow. Unexamined role inheritance can grant a broad permission unexpectedly.
C:Model scoped roles and test each persona's allowed operations. This could help Application role assignment model, but it does not resolve the Role inclusion and effective access case. User access can depend on assigned roles and configured role relationships.