CAD vs CSA
The CSA tests platform administration. The CAD tests application development — scripting, data modelling, security, integrations. You need the CSA before sitting the CAD. The CAD requires hands-on development experience to pass — reading alone is not sufficient.
High-weight exam topics
- Application development — creating scoped applications, data models, table relationships, dictionary configuration. See Scoped applications guide.
- Scripting — GlideRecord, all four Business Rule types, all four Client Script types, Script Includes, GlideAjax. Know behaviour, not just syntax.
- Security — ACLs at table and field level, roles, Application Access settings on scoped tables
- Service Catalog — catalog items, Record Producers, Order Guides, variables, UI Policies on catalog forms
- Flow Designer basics — trigger types, actions, data pills, subflows
Topics that trip most candidates up
- Application Access settings — the Accessible from, Can create, Can read, Can write, Can delete settings on tables within scoped apps. Many candidates have limited scoped app experience and find these questions hard.
- GlideAjax setup requirements — Client callable checkbox, extending AbstractAjaxProcessor, sysparm_name parameter. All required, all tested. See GlideAjax guide.
- Business Rule execution order — which rule fires when, especially around cascading saves and Before vs After rule interaction. See current vs previous guide.
Study approach
- Complete ServiceNow's official CAD learning path on learning.servicenow.com
- Build a real application on your PDI — not a tutorial, your own idea. Expense tracker, vendor management, training request portal. It needs: custom tables, ACLs, Business Rules, a Catalog item, a report.
- Practice every scripting concept hands-on: write 20 different Business Rules, build 10 Script Includes, call them via GlideAjax from Client Scripts
- Take the CAD practice assessment on the ServiceNow portal to identify gaps
- Revisit every weak area hands-on before booking the exam
Related guides: Business Rule types · Client Scripts · Script Includes · ACLs · Scoped apps · CSA guide
The CAD exam format and what to expect
The Certified Application Developer exam is 60 questions, 110 minutes, passing score 70%. Questions are scenario-based — ServiceNow describes a business requirement and asks which approach is correct. This format rewards practitioners who understand not just what APIs do but when to use them. Pure memorisation of methods is not sufficient; you need to understand the architectural reasoning behind each choice.
The exam tests across five domains: Application UI (18%), Script (28%), Data (12%), Process Automation (20%), and Security (22%). The Script domain is the heaviest and the one most candidates find hardest if they have an admin background. Spend at least 40% of your study time on scripting — GlideRecord, Business Rules, Client Scripts, GlideAjax, and Script Includes.
High-value study areas by domain
Script domain (28%): Know when to use each script type — Business Rule vs Client Script vs Script Include vs Scheduled Job. Know the execution context of each. Know the difference between synchronous and asynchronous execution. Understand current vs previous objects in Business Rules. Know GlideRecord methods cold: getValue, setValue, addEncodedQuery, setLimit, setWorkflow, autoSysFields, getUniqueValue.
Security domain (22%): Understand the ACL evaluation stack — table, field, record-level. Know roles vs groups and when each is appropriate. Understand data policies vs ACLs. Know scoped application security — what a scope restricts and why.
Process Automation (20%): Know Flow Designer triggers, data pills, error handling, and when to use subflows. Understand the difference between Flow Designer and Workflow Editor. Know approval routing and catalog item fulfilment flows.
Hands-on practice priorities for CAD prep
The CAD exam heavily tests hands-on knowledge. Before sitting the exam, build these on your PDI: a complete scoped application with custom tables, ACLs, Business Rules, and a Service Catalog item. A working GlideAjax implementation end-to-end. A Flow Designer flow with error handling and a subflow. A Script Include with a client-callable method. These cover the majority of what the exam tests and build the hands-on confidence that scenario questions require.
Related: CSA exam guide — prerequisite certification · Interview questions — overlapping technical knowledge · CSA study guide · Scoped applications — CAD core topic
Practice questions to test your readiness
Q: A Business Rule should send a notification when an incident priority changes to P1. Where should the notification logic live? — In an Async Business Rule (fires after the save, runs in background, avoids holding up the save transaction) that checks current.priority.changes() and current.getValue('priority') == '1'. The notification itself should be triggered via gs.eventQueue() to fire a pre-configured Notification record, keeping the Business Rule logic clean.
Q: A developer needs to populate a field on a form based on the value of another field, without page reload. Which tool? — An onChange Client Script that calls a GlideAjax Script Include to get the server-side value and sets the target field via g_form.setValue().
Q: What is the correct way to prevent a Script Include from being called by client-side code? — Uncheck the "Client callable" checkbox on the Script Include record. Client callable Script Includes extend AbstractAjaxProcessor; non-client-callable Script Includes can only be instantiated from server-side code.
Q: An ACL on the incident table grants read access to the "itil" role. An ACL on the incident.priority field denies read access to the "itil" role. What happens when an ITIL user views an incident? — The user sees the incident record but the priority field is blank (field-level ACL denies access even though table-level allows it). More specific ACLs win at each level independently.
Work through questions like these on your PDI — set up the scenario, test the behaviour, understand why it works that way. This hands-on verification of exam concepts is what converts textbook knowledge into the confident, specific answers the CAD exam rewards. Budget 4–6 weeks of focused study for a first-time CAD pass, longer if you are building scripting skills from an admin background.
The scoped application requirement — why it matters for CAD
The CAD exam allocates significant weight to scoped application development. Understanding scoped applications means understanding: how the application scope prefix (x_myapp_) applies to all custom tables, scripts, and records created within the app; how cross-scope access works and when to use the Application Cross-Scope Access records to allow other scopes to call your APIs; how the application's roles are defined within the scope and how they interact with global roles; and how Update Sets and the Application Repository relate to scoped app deployment. Build a complete scoped application on your PDI before the exam — the hands-on experience of setting up scope, encountering cross-scope access errors, and resolving them is the most effective preparation for the scenario questions the exam uses to test this domain.
Time allocation on exam day
110 minutes for 60 questions works out to just under 2 minutes per question. Most questions take 45–90 seconds. Flag the ones you are unsure about and return to them — the exam interface allows flagging and review before submission. Do not spend 5 minutes on a difficult scenario question at the cost of rushing the last 10 questions. If you know the material, the time is sufficient; if you find yourself consistently needing 3+ minutes per question, that indicates areas where deeper knowledge is needed before you sit the exam.
See also: CSA guide — prerequisite · Interview questions · Scoped applications · ACLs · Business Rules