ServiceNow CAD Study Guide: How to Pass the Certified Application Developer Exam

The ServiceNow Certified Application Developer (CAD) exam proves you can design, build, secure and deploy scoped applications on the Now Platform. You won't pass by memorizing menu paths. You need to know which tool or API solves a given problem and where the code runs.

The topics that matter most: application scope, the difference between client-side and server-side scripting, Business Rule timing, ACLs and Application Access settings, Flow Designer, and how applications are published and moved between instances.

CAD exam at a glance

Exam detail	Value
Questions	60 (multiple choice and multiple select)
Time	90 minutes
Passing score	Not published by ServiceNow
Recommended background	CSA-level admin knowledge and hands-on app development experience
Official training	Application Development Fundamentals and Scripting in ServiceNow Fundamentals (ServiceNow University)

Always confirm the current blueprint and prerequisites on ServiceNow University before booking.

CAD blueprint and domain weights

Domain	Approx. weight
Designing and Creating an Application	20%
Application User Interface	20%
Security and Restricting Access	20%
Application Automation	20%
Working with External Data	10%
Managing Applications	10%

What to study in each domain

Designing and Creating an Application (20%)

• Application scope: the namespace prefix (x_ + vendor prefix), what scope protects, and what "Caller Access" and cross-scope privileges do.
• Creating tables, extending tables (e.g., Task), choosing field types and relationships.
• Deciding whether an application is a good fit for the platform.

Application User Interface (20%)

• Forms, lists, related lists and form sections.
• Client Scripts (onLoad, onChange, onSubmit, onCellEdit) and UI Policies. Use UI policies when no script is needed.
• g_form, g_user and g_scratchpad (filled by a display Business Rule).
• UI Actions, modules and application menus; basics of Workspaces and UI Builder.

Security and Restricting Access (20%)

• Access Control Lists: table vs. field rules, roles, conditions and scripts.
• Application roles and how to design them (user vs. admin role for the app).
• Application Access settings on tables: Accessible from, Can read/create/update/delete, Allow access via web services.
• Why client-side checks are never a security control.

Application Automation (20%)

• Business Rules: before (change current without update()), after, async and display.
• Script Includes, including client-callable ones used with GlideAjax.
• GlideRecord patterns (addQuery, query(), next()), GlideSystem (gs) utilities.
• Events (gs.eventQueue()), notifications, scheduled jobs and Flow Designer flows, subflows and custom actions.

Working with External Data (10%)

• Outbound REST with sn_ws.RESTMessageV2 and REST Message records.
• Scripted REST APIs for inbound integrations; import sets and transform maps.
• Credentials, connection aliases and IntegrationHub spokes.

Managing Applications (10%)

• Source control integration (Git), branches and Studio / App Engine tools.
• Publishing to the application repository vs. update sets.
• Application versioning, dependencies and delegated development.

Most common CAD exam traps

1. Client vs. server. g_form is client-side; GlideRecord in Business Rules and Script Includes is server-side. Many wrong answers mix the two.
2. current.update() in a before rule. In before rules you just set values on current. Calling update() causes recursion.
3. Display rules and g_scratchpad. The only Business Rule type that can pass server data to the form on load.
4. Security in the right layer. Hiding a field with a UI policy does not secure it. ACLs do.
5. Scope boundaries. A scoped app can't write to another scope's table unless Application Access allows it.

A 6-week CAD study plan

Week	Focus
1	Application Development Fundamentals; build a small scoped app on a Personal Developer Instance
2	Tables, forms, lists, client scripts, UI policies, g_scratchpad
3	Business Rules, Script Includes, GlideRecord, GlideAjax
4	ACLs, application roles, Application Access settings
5	Flow Designer, events, notifications, REST integrations; first timed practice exam
6	Source control, publishing; review every mistake, then 2-3 more timed exams

Check where you stand with our 10 free CAD sample questions. Every answer option is explained.

Exam-day tips

• Scan code snippets for where they run (client or server) before reading the details.
• For multiple-select questions the number of correct answers is stated. There is no partial credit.
• When options look similar, prefer the no-code or low-code solution unless the question requires a script.

How hard is the ServiceNow CAD exam?

The CAD is harder than the CSA for most people because it mixes platform configuration with scripting. You won't write code during the exam, but you will read short snippets and decide what they do, where they run and whether they follow best practice.

Candidates with a pure admin background usually struggle with Business Rule timing, GlideAjax and scope; candidates with a pure JavaScript background usually struggle with ACLs, Application Access and publishing. Aim to be comfortable with both sides.

Best CAD study resources

• Application Development Fundamentals and Scripting in ServiceNow Fundamentals on ServiceNow University.
• A Personal Developer Instance. Build one small scoped app from start to finish, including roles, ACLs and a flow.
• Developer documentation and API reference for GlideRecord, GlideSystem, g_form and GlideAjax.
• Timed practice exams with explanations to spot the client/server and security gaps.

Related guides

Haven't passed the CSA yet? Start with our ServiceNow CSA study guide. Planning your next step? See the ServiceNow certification path.