ServiceNow CAD Practice Test 56
Question 550
An imported source provides a full name but the target needs normalized components. After the recommended Transform scripts for calculated mappings change is implemented, which observation MOST directly verifies that it works?
- Target fields contain correct normalized values and invalid inputs are flagged.
- Matching source keys update existing records while new keys create new records.
- The final table contains valid records and an exception report tracks rejects.
- Authorized calls succeed and credentials are absent from source code and public logs.
Explanation
Correct Answer
A:Target fields contain correct normalized values and invalid inputs are flagged. This directly tests whether the Transform scripts for calculated mappings goal was met. Transform scripts allow custom mapping logic where declarative mapping is insufficient.
Incorrect Answers
B:Matching source keys update existing records while new keys create new records. This is evidence about Coalesce for update versus insert, not direct proof of the required Transform scripts for calculated mappings behavior. The relevant check is that target fields contain correct normalized values and invalid inputs are flagged.
C:The final table contains valid records and an exception report tracks rejects. This is evidence about Import reconciliation and onBefore rejection, not direct proof of the required Transform scripts for calculated mappings behavior. The relevant check is that target fields contain correct normalized values and invalid inputs are flagged.
D:Authorized calls succeed and credentials are absent from source code and public logs. This is evidence about REST authentication with stored credentials, not direct proof of the required Transform scripts for calculated mappings behavior. The relevant check is that target fields contain correct normalized values and invalid inputs are flagged.
Question 551
A custom intake producer needs to set a state and normalize an input on creation. Which approach BEST meets the requirement while respecting the system constraints?
- Edit a random unrelated table in the producer script instead of populating its target record.
- Map supported producer variables into the intended table columns and test transformations.
- Use an appropriate Record Producer script with permitted producer and current objects.
- Configure and test supported post-submit navigation or confirmation with the correct record reference.
Explanation
Correct Answer
C:Use an appropriate Record Producer script with permitted producer and current objects. Producer scripting can set target record fields during record creation. Verification should demonstrate that the new record has the intended initial values after submission.
Incorrect Answers
A:Edit a random unrelated table in the producer script instead of populating its target record. This is an unsafe or ineffective shortcut for Producer script for controlled assignment. Using arbitrary client-side logic alone cannot guarantee target record invariants.
B:Map supported producer variables into the intended table columns and test transformations. This primarily addresses Producer variable mapping, not the specific Producer script for controlled assignment decision. Here, producer scripting can set target record fields during record creation.
D:Configure and test supported post-submit navigation or confirmation with the correct record reference. This primarily addresses Producer post-submission behavior, not the specific Producer script for controlled assignment decision. Here, producer scripting can set target record fields during record creation.
Question 552
A developer needs to expose a utility safely to authorized caller scopes. Testing exposes this failure: Private script utilities cannot simply be called from any unrelated scope. Which remediation should be applied FIRST?
- Select the correct application context before saving artifacts.
- Expose documented limited interfaces and test cross-scope invocation.
- Mark every script include publicly callable regardless of caller authorization.
- Configure permitted cross-scope table access and ACLs for the actual consumers.
Explanation
Correct Answer
B:Expose documented limited interfaces and test cross-scope invocation. Confirmation requires seeing that only permitted application callers can execute the supported utility.
Incorrect Answers
A:Select the correct application context before saving artifacts. It addresses Application picker and context, not the diagnosed Restricted cross-scope scripting failure. Private script utilities cannot simply be called from any unrelated scope.
C:Mark every script include publicly callable regardless of caller authorization. This retains the Restricted cross-scope scripting problem. Script includes and API access can be constrained across application scopes.
D:Configure permitted cross-scope table access and ACLs for the actual consumers. It addresses Cross-scope table application access, not the diagnosed Restricted cross-scope scripting failure. Private script utilities cannot simply be called from any unrelated scope.
Question 553
An import contains changed descriptions for previously loaded employees. Testing exposes this failure: Without coalesce the same feed may insert duplicate business records. Which remediation should be applied FIRST?
- Use Auto Map Matching Fields and manually review unmatched or incorrect mappings.
- Coalesce on a nonunique description and assume the correct record is always selected.
- Choose a stable unique key and test re-import idempotency.
- Define an appropriate Transform Map and explicit field maps for source to target values.
Explanation
Correct Answer
C:Choose a stable unique key and test re-import idempotency. Confirmation requires seeing that matching source keys update existing records while new keys create new records.
Incorrect Answers
A:Use Auto Map Matching Fields and manually review unmatched or incorrect mappings. It addresses Auto Map Matching Fields limits, not the diagnosed Coalesce for update versus insert failure. Without coalesce the same feed may insert duplicate business records.
B:Coalesce on a nonunique description and assume the correct record is always selected. This retains the Coalesce for update versus insert problem. Coalesce matches imported values to target rows and chooses update versus insert.
D:Define an appropriate Transform Map and explicit field maps for source to target values. It addresses Transform map source-to-target mapping, not the diagnosed Coalesce for update versus insert failure. Without coalesce the same feed may insert duplicate business records.
Question 554
A server needs to send a small piece of precomputed context to a form before client scripts use it. If the relevant Display Business Rule and g_scratchpad safeguard is omitted, which outcome is the MOST directly associated failure?
- Depending on immediate async completion for form correctness creates race conditions.
- Ignoring the loading condition can produce unnecessary work while the form initializes.
- Placing required pre-save validation only in a post-commit notification is too late.
- Copying sensitive hidden server data into a client scratchpad can disclose it.
Explanation
Correct Answer
D:Copying sensitive hidden server data into a client scratchpad can disclose it. Display Business Rules can provide server-derived data to client form loading. The corrective approach is to prepare only allowed initial form context and verify permissions.
Incorrect Answers
A:Depending on immediate async completion for form correctness creates race conditions. This failure pattern belongs chiefly to Async Business Rule processing; it is not the failure most directly tested in the Display Business Rule and g_scratchpad situation. Copying sensitive hidden server data into a client scratchpad can disclose it.
B:Ignoring the loading condition can produce unnecessary work while the form initializes. This failure pattern belongs chiefly to onChange client script guards; it is not the failure most directly tested in the Display Business Rule and g_scratchpad situation. Copying sensitive hidden server data into a client scratchpad can disclose it.
C:Placing required pre-save validation only in a post-commit notification is too late. This failure pattern belongs chiefly to Before Business Rule validation; it is not the failure most directly tested in the Display Business Rule and g_scratchpad situation. Copying sensitive hidden server data into a client scratchpad can disclose it.
Question 555
A billing app exposes a read-only shared reference table to a scheduling app. Which approach BEST meets the requirement while respecting the system constraints?
- Configure allowed cross-scope operations at the target table and separately define ACLs.
- Review supported application file protection policies and their lifecycle before distribution.
- Switch to an authorized scope and follow the platform's security rules for the target object.
- Enable every Create Read Update Delete option for all scopes without checking the integration contract.
Explanation
Correct Answer
A:Configure allowed cross-scope operations at the target table and separately define ACLs. Table application access determines cross-scope operation possibilities beyond user permissions. Verification should demonstrate that authorized read requests succeed while forbidden cross-scope writes fail.
Incorrect Answers
B:Review supported application file protection policies and their lifecycle before distribution. This primarily addresses Protected application files and distribution, not the specific Table application access and CRUD scope decision. Here, table application access determines cross-scope operation possibilities beyond user permissions.
C:Switch to an authorized scope and follow the platform's security rules for the target object. This primarily addresses Scope context and security rule ownership, not the specific Table application access and CRUD scope decision. Here, table application access determines cross-scope operation possibilities beyond user permissions.
D:Enable every Create Read Update Delete option for all scopes without checking the integration contract. This is an unsafe or ineffective shortcut for Table application access and CRUD scope. Making a table accessible from all scopes does not by itself authorize end users.
Question 556
A newly deployed application opens but its workflow and ACLs behave differently than in development. Which approach BEST meets the requirement while respecting the system constraints?
- Declare production fully ready because the package appears in the application list.
- Review application records and installed version in My Company Applications or supported manager.
- Check required application dependencies and versions before installation.
- Smoke-test records, roles, flows and integrations and retain supported recovery steps.
Explanation
Correct Answer
D:Smoke-test records, roles, flows and integrations and retain supported recovery steps. Installation success alone does not validate full business behavior. Verification should demonstrate that a failed deployment is detected and a supported rollback or remediation path is available.
Incorrect Answers
A:Declare production fully ready because the package appears in the application list. This is an unsafe or ineffective shortcut for Post-install validation and rollback. Users may see broken forms or permissions after an incomplete release test.
B:Review application records and installed version in My Company Applications or supported manager. This primarily addresses My Company Applications lifecycle, not the specific Post-install validation and rollback decision. Here, installation success alone does not validate full business behavior.
C:Check required application dependencies and versions before installation. This primarily addresses App installation dependencies, not the specific Post-install validation and rollback decision. Here, installation success alone does not validate full business behavior.
Question 557
An app posts a JSON object with required product ID and state fields. If the relevant REST endpoint and payload validation safeguard is omitted, which outcome is the MOST directly associated failure?
- Writing unvalidated file rows directly into business tables risks corruption.
- Sending malformed JSON or wrong verbs produces rejected or incorrect requests.
- Retrying a non-idempotent POST without a key can create duplicate requests.
- Unchecked URLs and method choices can send confidential data to unintended destinations.
Explanation
Correct Answer
B:Sending malformed JSON or wrong verbs produces rejected or incorrect requests. REST integrations depend on endpoint, method, headers and payload schema. The corrective approach is to test valid and invalid bodies against a safe sandbox endpoint.
Incorrect Answers
A:Writing unvalidated file rows directly into business tables risks corruption. This failure pattern belongs chiefly to CSV file data source and import set; it is not the failure most directly tested in the REST endpoint and payload validation situation. Sending malformed JSON or wrong verbs produces rejected or incorrect requests.
C:Retrying a non-idempotent POST without a key can create duplicate requests. This failure pattern belongs chiefly to REST timeout and retry safety; it is not the failure most directly tested in the REST endpoint and payload validation situation. Sending malformed JSON or wrong verbs produces rejected or incorrect requests.
D:Unchecked URLs and method choices can send confidential data to unintended destinations. This failure pattern belongs chiefly to Outbound REST Message configuration; it is not the failure most directly tested in the REST endpoint and payload validation situation. Sending malformed JSON or wrong verbs produces rejected or incorrect requests.
Question 558
A developer in one scope attempts to change an unrelated application's protected ACL. Which approach BEST meets the requirement while respecting the system constraints?
- Switch to an authorized scope and follow the platform's security rules for the target object.
- Review cross-scope access tracking and approve the specific required privilege if justified.
- Rename an ACL as though a new label automatically changes its protected application scope.
- Keep internal application files within private scope and expose only approved APIs.
Explanation
Correct Answer
A:Switch to an authorized scope and follow the platform's security rules for the target object. Security metadata and application scope boundaries can constrain what ACLs may be edited. Verification should demonstrate that the controlled ACL or metadata change belongs to the intended application and passes review.
Incorrect Answers
B:Review cross-scope access tracking and approve the specific required privilege if justified. This primarily addresses Runtime cross-scope access tracking, not the specific Scope context and security rule ownership decision. Here, security metadata and application scope boundaries can constrain what ACLs may be edited.
C:Rename an ACL as though a new label automatically changes its protected application scope. This is an unsafe or ineffective shortcut for Scope context and security rule ownership. Arbitrary edits to foreign-scope ACLs can break isolation and fail permissions.
D:Keep internal application files within private scope and expose only approved APIs. This primarily addresses Private scope protects internal application files, not the specific Scope context and security rule ownership decision. Here, security metadata and application scope boundaries can constrain what ACLs may be edited.
Question 559
A developer wants a documented client API rather than direct DOM manipulation. Which practical correction or implementation decision is MOST directly appropriate?
- Use supported g_form calls and test the targeted UI type.
- Change field values by rewriting platform-generated DOM IDs instead of using g_form.
- Guard relevant changes and test newValue and isLoading.
- Design a scoped server endpoint with asynchronous client callbacks.
Explanation
Correct Answer
A:Use supported g_form calls and test the targeted UI type. The intended behavior can be checked because the form changes the intended field state and remains compatible with supported UI.
Incorrect Answers
B:Change field values by rewriting platform-generated DOM IDs instead of using g_form. This would not correct the g_form API for form fields workflow. Arbitrary DOM selectors can break after platform interface upgrades.
C:Guard relevant changes and test newValue and isLoading. This could help onChange client script guards, but it does not resolve the g_form API for form fields case. g_form is the supported client form API in suitable ServiceNow experiences.
D:Design a scoped server endpoint with asynchronous client callbacks. This could help GlideAjax asynchronous client-server pattern, but it does not resolve the g_form API for form fields case. g_form is the supported client form API in suitable ServiceNow experiences.
Question 560
A new custom app needs identifiers that will not collide with global artifacts. After the recommended Application scope namespace change is implemented, which observation MOST directly verifies that it works?
- Authorized cross-scope reads succeed while disallowed operations fail.
- Only permitted application callers can execute the supported utility.
- Stored values validate as intended dates, integers and bounded strings.
- Application files carry the correct scope identifiers and distinct names.
Explanation
Correct Answer
D:Application files carry the correct scope identifiers and distinct names. This directly tests whether the Application scope namespace goal was met. Scoped apps isolate application artifacts and reduce naming collisions.
Incorrect Answers
A:Authorized cross-scope reads succeed while disallowed operations fail. This is evidence about Cross-scope table application access, not direct proof of the required Application scope namespace behavior. The relevant check is that application files carry the correct scope identifiers and distinct names.
B:Only permitted application callers can execute the supported utility. This is evidence about Restricted cross-scope scripting, not direct proof of the required Application scope namespace behavior. The relevant check is that application files carry the correct scope identifiers and distinct names.
C:Stored values validate as intended dates, integers and bounded strings. This is evidence about Dictionary field attributes and type safety, not direct proof of the required Application scope namespace behavior. The relevant check is that application files carry the correct scope identifiers and distinct names.