ServiceNow CAD ServiceNow Certified Application Developer Online Training

Question #21

Which roles grant access to source control repository operations such as importing applications from source control, or linking an application to source control? (Choose two.)

A . source_control
B . source_control_admin
C . admin
D . git_admin

Reveal Solution Hide Solution

Question #22

When configuring the content of an Email Notification, which syntax should be used to reference the properties of an event triggering the Notification?

A . ${event. <property name>}
B . ${current. <property name>}
C . ${property name>.getDisplayValue()}
D . ${gs.<property name>}

Reveal Solution Hide Solution

Question #23

Which one of the following is true for a Script Include with a Protection Policy value of Protected?

A . Any user with the protected_edit role can see and edit the Script Include
B . The Protection policy option can only be enabled by a user with the admin role
C . The Protection Policy is applied only if the glide.app.apply_protection system property value is true
D . The Protection Policy is applied only if the application is downloaded from the ServiceNow App Store

Reveal Solution Hide Solution

Correct Answer: D
D

Explanation:

https://docs.servicenow.com/bundle/rome-application-development/page/build/applications/concept/c_ScriptProtectionPolicy.html

The following is true for a Script Include with a Protection Policy value of Protected:

The Protection Policy is applied only if the application is downloaded from the ServiceNow App Store. This is true because the Protection Policy is a feature that allows developers to protect their Script Includes from being viewed or modified by other users when they distribute their applications through the ServiceNow App Store. The Protection Policy is only enforced when the application is installed from the App Store, not when it is developed or tested on the instance.

The following are not true for a Script Include with a Protection Policy value of Protected:

Any user with the protected_edit role can see and edit the Script Include. This is false because the protected_edit role is not related to the Protection Policy, but to the Access Control (ACL) rules. The protected_edit role allows users to edit protected fields on a table, such as the script field on the sys_script table, which stores the Business Rules. The Protection Policy does not use roles to control access to the Script Includes, but a cryptographic key that is generated when the application is published to the App Store.

The Protection policy option can only be enabled by a user with the admin role. This is false because the Protection policy option can be enabled by any user who has the application_admin role for the scoped application that contains the Script Include. The application_admin role grants full access to the application development and administration within the scope of the application.

The Protection Policy is applied only if the glide.app.apply_protection system property value is true. This is false because the glide.app.apply_protection system property is not related to the Protection Policy, but to the Application Restricted Caller Access (ARCA) feature. The ARCA feature allows developers to restrict the access to the Script Includes from other applications based on the caller’s scope. The glide.app.apply_protection system property determines whether the ARCA feature is enabled or disabled on the instance.

Reference: Script Includes, Protect Script Includes, Application Restricted Caller Access

Question #24

Which one of the following is true for GlideUser (g_user) methods?

A . Can be used in Client Scripts and UI Policies only
B . Can be used in Business Rules only
C . Can be used in Client Scripts, UI Policies, and UI Actions
D . Can be used in Business Rules, and Scripts Includes

Reveal Solution Hide Solution

Question #25

When configuring a module, what does the Override application menu roles configuration option do?

A . Users with the module role but without access to the application menu access the module
B . Self-Service users can access the module even though they do not have roles
C . Admin is given access to the module even if Access Controls would ordinarily prevent access
D . Users with access to the application menu can see the module even if they don’t have the module role

Reveal Solution Hide Solution

Question #26

Which platform feature can be used to determine the relationships between field in an Import Set table to field in an existing ServiceNow table?

A . Business Service Management Map
B . Data Sources
C . Transform Map
D . Cl Relationship Builder

Reveal Solution Hide Solution

Question #27

When configuring a REST Message, the Endpoint is:

A . The commands to the REST script to stop execution
B . The URI of the data to be accessed, queried, or modified
C . Information about the format of the returned data
D . The response from the provider indicating there is no data to send back

Reveal Solution Hide Solution

Correct Answer: B
B

Explanation:

When configuring a REST Message, the Endpoint is:

The URI of the data to be accessed, queried, or modified. This is the correct answer because the Endpoint is the part of the REST Message that specifies the location and the resource of the REST provider. The Endpoint is composed of the base URL and the resource path, which can include query parameters or variables. For example, the Endpoint for a REST Message that retrieves the weather information for a city from a web service could be https://api.openweathermap.org/data/2.5/weather?q=London.

The following are not correct definitions of the Endpoint when configuring a REST Message:

The commands to the REST script to stop execution. This is not correct because the commands to the REST script to stop execution are not part of the REST Message, but of the Scripted REST API, which is a feature that allows users to create custom REST endpoints on the ServiceNow platform. The commands to the REST script to stop execution are methods of the RESTAPIResponse object, such as setStatusCode, setError, or complete.

Information about the format of the returned data. This is not correct because the information about the format of the returned data is not part of the Endpoint, but of the HTTP headers or the Accept field of the REST Message. The HTTP headers or the Accept field can be used to specify the content type of the response, such as JSON, XML, or HTML.

The response from the provider indicating there is no data to send back. This is not correct because the response from the provider indicating there is no data to send back is not part of the Endpoint,

but of the HTTP status code or the response body of the REST Message. The HTTP status code or the response body can be used to indicate the result of the REST request, such as 200 OK, 404 Not Found, or 500 Internal Server Error.

Reference: REST Messages, Scripted REST APIs

Reference: https://docs.servicenow.com/bundle/orlando-application-development/page/integrate/outbound- rest/reference/r_RESTMessageElements.html

Question #28

When evaluating Access Controls, ServiceNow searches and evaluates:

A . Only for matches on the current table
B . Only for matches on the current field
C . From the most specific match to the most generic match
D . From the most generic match to the most specific match

Reveal Solution Hide Solution

Correct Answer: C
C

Explanation:

When evaluating Access Controls, ServiceNow searches and evaluates:

From the most specific match to the most generic match. This is the correct answer because ServiceNow follows a top-down approach when evaluating Access Control (ACL) rules, which are used to restrict the access to the data and functionality of the ServiceNow platform based on the user’s roles and conditions. ServiceNow starts with the most specific match, which is the field-level ACL rule, then moves to the table-level ACL rule, and finally to the global or * ACL rule. ServiceNow grants access if any of the ACL rules evaluates to true, and denies access if all of the ACL rules evaluate to false.

The following are not correct descriptions of how ServiceNow searches and evaluates Access Controls:

Only for matches on the current table. This is not correct because ServiceNow does not only look for matches on the current table, but also on the parent tables and the global or * table. For example, if there is no ACL rule for the incident table, ServiceNow will look for an ACL rule for the task table, which is the parent table of the incident table, and then for the global or * table, which is the parent table of all tables.

Only for matches on the current field. This is not correct because ServiceNow does not only look for matches on the current field, but also on the table that contains the field and the global or * table. For example, if there is no ACL rule for the short_description field on the incident table, ServiceNow will look for an ACL rule for the incident table, and then for the global or * table.

From the most generic match to the most specific match. This is not correct because ServiceNow does not follow a bottom-up approach when evaluating Access Controls, but a top-down approach, as explained above.

Reference: Access Control Rules, ACL Evaluation Order

https://developer.servicenow.com/dev.do#!/learn/learning-plans/paris/new_to_servicenow/app_store_learnv2_securingapps_paris_access_controls_evaluation_order

Question #29

In a Business Rule, which one of the following returns true if the currently logged in user has the admin role?

A . g_form.hasRoleExactly(‘admin’)
B . gs.hasRole(‘admin’)
C . g_form.hasRole(‘admin’)
D . gs.hasRoleExactly(‘admin’)

Reveal Solution Hide Solution

Question #30

From the list below, identify one reason an application might NOT be a good fit with ServiceNow.

The application:

A . Needs workflow to manage processes
B . Requires “as-is” use of low-level programming libraries
C . Requires reporting capabilities
D . Uses forms extensively to interact with data

Reveal Solution Hide Solution