How to Pass ServiceNow CSA & CAD Exams: Complete Prep Guide

Week 1 — Platform Basics

• ServiceNow UI: Banner Frame, Navigator, Content Frame
• Tables, records, fields, and sys_id
• Forms, lists, and column context menus

Week 2 — Core ITSM Modules

• Incident, Problem, Change, and Request Management
• Service Catalog: Catalog Items, Record Producers, Order Guides
• CMDB fundamentals and CI relationships

Week 3 — Administration

• User, Group, and Role management
• Access Control Lists and Update Sets
• Import Sets and Transform Maps

Week 4 — Practice & Review

• Take practice exams daily
• Review weak areas
• Use ServiceNow Now Learning platform

Q1. What is the correct order for Table Access Control rule processing?

• A. Any table name, parent table name, table name
• ✓ B. Table name, parent table name, any table name
• C. Parent table name, table name, any table name
• D. Any table name, table name, parent table name

💡 ServiceNow evaluates ACLs from most specific to most generic: table name first, then parent table, then wildcard.

Q2. Which term refers to application menus and modules you want to access quickly and often?

• A. Breadcrumb
• ✓ B. Favorite
• C. Tag
• D. Bookmark

💡 Favorites let users bookmark frequently accessed modules and records for quick access from the banner frame.

Q3. What is generated from the Service Catalog once a user places an order?

• A. A change request
• B. An Order Guide
• ✓ C. A request
• D. An SLA

💡 A REQ (Request) record is generated as the primary container for the order.

Q4. Which of the following is the platform name for the User table?

• A. u_users
• B. sys_users
• C. x_users
• ✓ D. sys_user

💡 sys_user is the correct system name for the User table in ServiceNow.

Q5. A knowledge article must be in which state to display to a user?

• ✓ A. Published
• B. Drafted
• C. Retired
• D. Reviewed

💡 Only Published articles are visible to end users in the knowledge base.

Q6. What are best practices regarding users, groups, and roles? (Choose two)

• A. Never assign roles to groups
• B. Assign roles to users
• C. Add users to groups
• D. Assign roles to groups

💡 Best practice is to assign roles to groups and add users to groups, not assign roles directly to individual users.

Q7. Which one of the following statements is true about business rules?

• A. Must run before a database action
• ✓ B. Can be a piece of JavaScript
• C. Must not run before a database action
• D. Monitors fields on a form

💡 Business rules are server-side scripts written in JavaScript that execute on database operations.

Q8. In what order should filter elements be specified?

• ✓ A. Field, Operator, then Value
• B. Field, Operator, then Condition
• C. Operator, Condition, then Value
• D. Value, Operator, then Field

💡 Filters in ServiceNow always follow the order: Field → Operator → Value.

Q9. What is a sys_id?

• ✓ A. Unique 32-character identifier assigned to every record
• B. A client-side Business Rule
• C. A server-side Business Rule
• D. Unique 64-character identifier

💡 Every record in ServiceNow receives a unique 32-character sys_id upon creation.

Q10. Which section of the ServiceNow UI allows you to perform a global search?

• A. Application Navigator
• ✓ B. Banner frame
• C. List pane
• D. Content frame

💡 The Banner Frame contains the global search field, persistently displayed at the top of the ServiceNow window.

Week 1 — App Fundamentals

• Studio and Guided Application Creator
• Application scope and the Application Picker
• Application Files and artifacts
• Delegated Development

Week 2 — Scripting

• Client-side: g_form, g_user, Client Scripts, UI Policies
• Server-side: GlideRecord, GlideSystem, Business Rules, Script Includes
• Debugging: Field Watcher, jslog(), gs.info()

Week 3 — Advanced Dev

• Flow Designer: Triggers, Actions, Subflows, Spokes
• REST Messages and web service integration
• Record Producers and Catalog Client Scripts

Week 4 — Practice & Review

• Build a scoped application end to end on your PDI
• Review cross-scope access rules
• Practice with Personal Developer Instance

Q1. Which one of the following is NOT a debugging strategy for client-side scripts?

• A. g_form.addInfoMessage()
• B. Field Watcher
• C. jslog()
• ✓ D. gs.log()

💡 gs.log() is a server-side function and cannot be used to debug client-side scripts in the browser.

Q2. Which method returns true only if the currently logged in user has the catalog_admin role and in no other case?

• A. g_user.hasRole()
• ✓ B. g_user.hasRoleExactly()
• C. g_user.hasRoleOnly()
• D. g_user.hasRoleFromList()

💡 hasRoleExactly() returns true only if the user has that exact role with no role inheritance considered.

Q3. Which of the following is NOT a trigger type in Flow Designer?

• ✓ A. Outbound Email
• B. Application
• C. Record
• D. Schedule

💡 Outbound Email is not a Flow Designer trigger. Valid triggers include Record, Schedule, and Application.

Q4. What syntax is used in a Record Producer script to access values from form fields?

• A. producer.field_name
• ✓ B. producer.variablename
• C. current.variable_name
• D. current.field_name

💡 In Record Producer scripts, form variables are accessed via the producer object using producer.variablename.

Q5. Which one of the following is true for GlideUser (g_user) methods?

• A. Client Scripts and UI Policies only
• B. Business Rules only
• ✓ C. Client Scripts, UI Policies, and UI Actions
• D. Business Rules and Script Includes

💡 g_user is a client-side API usable in Client Scripts, UI Policies, and UI Actions — not in server-side scripts.

Q6. A scoped application containing Flow Designer content for a particular application is called a?

• ✓ A. Spoke
• B. Bundle
• C. Action
• D. Flow

💡 A Spoke is a scoped application that packages pre-built actions, flows, and subflows for a specific app or integration.

Q7. Which one of the following is NOT a method used for logging in a privately-scoped application?

• ✓ A. gs.log()
• B. gs.error()
• C. gs.warn()
• D. gs.debug()

💡 gs.log() is not available in privately scoped applications. Use gs.info(), gs.warn(), gs.error(), or gs.debug() instead.

Q8. Which objects can be used in a Scheduled Script Execution script?

• A. GlideRecord and current
• B. GlideUser and GlideRecord
• ✓ C. GlideSystem and GlideRecord
• D. GlideSystem and current

💡 Scheduled Jobs run server-side and use GlideSystem (gs) for system operations and GlideRecord for data manipulation.

Q9. Which one of the following is true for a Script Include with Protection Policy set to Protected?

• A. Any user with protected_edit role can edit it
• B. Only admin can enable it
• C. Applied only if glide.app.apply_protection is true
• ✓ D. Applied only if the app is downloaded from the App Store

💡 The Protection Policy is specifically designed for applications distributed via the ServiceNow App Store to protect IP.

Q10. When creating a table in a privately-scoped application, which four Access Controls are created?

• A. Insert, Delete, Query, Write
• ✓ B. Create, Delete, Read, Write
• C. Create, Delete, Read, Update
• D. Insert, Delete, Query, Update

💡 ServiceNow automatically creates four default ACLs for new tables: Create, Delete, Read, and Write.