CADcertificationsstudy-guidescriptingexam-prep

ServiceNow CAD Exam 2026: Complete Study Guide

A sourced Certified Application Developer guide: the January 2026 blueprint domain by domain, what runs when, choosing integration mechanisms, a build-one-app study plan, scenarios, and 2026 booking rules.

By the SNReady teamLast reviewed

•Published•15 min read

The Certified Application Developer exam rewards people who have built and shipped a scoped application, and it is unforgiving to people who have only read about one. The questions describe a requirement and ask where the logic belongs, who should be able to reach it, and how it gets to production. This guide shows how to prepare for that: what each blueprint domain really asks, the runtime model you need in your head, a study plan built around one real app, and the 2026 booking rules.

For the architecture overview of a scoped app, start with the CAD exam overview. If you haven't done CSA yet, the CSA exam overview covers the platform layers CAD builds on.

Step 1

The blueprint, domain by domain

The CAD blueprint (KB0011498, January 2026) weights four domains at 20% and two at 10%:

CAD blueprint domain weightsDesigning and Creating an Application20%Application User Interface20%Security and Restricting Access20%Application Automation20%Working with External Data10%Managing Applications10%
Domain weights from the official CAD exam blueprint (KB0011498, updated January 2026).

Designing and Creating an Application (20%)

Is this a good fit for ServiceNow, what is the data model, which modules, and why scope it? Scope restricts access to application files and data, and ServiceNow recommends scoped apps for new tables (Application scope).

Application User Interface (20%)

Forms, fields, client- and server-side scripts, and record producers as an app's UI. Know the client script types and that they don't protect data (Client scripts).

Security and Restricting Access (20%)

Restricting apps and modules, creating and debugging access controls, scripting security with GlideSystem, and using scope to protect artefacts. ACL evaluation, deny-by-default and scope rules come from the ACL documentation.

Application Automation (20%)

Flow Designer and workflows, application properties, events, scheduled jobs, utility script includes, and email. Know when ServiceNow prefers Flow Designer over business rules (Flow Designer).

Working with External Data (10%)

Importing CSV or Excel, and integrating with an external source using REST, including testing and debugging (Import sets, Scripted REST).

Managing Applications (10%)

Installing applications, Delegated Development for source code and code review, and the ServiceNow Git integration (Delegated development).

The blueprint points to Welcome to ServiceNow, Scripting in ServiceNow Fundamentals and Application Development Fundamentals as recommended courses, and to the ServiceNow Developer site.

Step 2

Know what runs when

Many CAD questions are timing questions in disguise. If you can picture what happens when a user opens a form, changes a field and clicks save, you can rule out most wrong answers.

What runs when a user edits and saves a record on a formBrowser: client scriptsServer: business rulesonLoadform rendersonChangefield changesonSubmitfalse cancelsbeforepre-writeDB writeafterpost-writeasyncscheduled jobdisplay rules run before the form is shown, after data is read
Order and behaviour from the client scripts and business rules documentation. Async rules run through a scheduled job, and their order isn't guaranteed when several update the same record.

Client scripts run in the browser on forms; onSubmit can cancel the save by returning false (source). Before business rules run after submission but before the database write, so changes they make are saved with the record; after rules run once the write has happened; async rules run through a scheduled job; display rules run before the form is shown (source). Script includes hold shared server code and load only when called, which is why they are preferred over global business rules (source).

Rule of thumb

Change the record you are saving? Before rule. React to the save, such as updating related records? After rule. Slow or non-urgent work? Async. Make data available to the form? Display rule or a client-callable script include.

Step 3

Pick the right integration door

Choosing the integration mechanismA file or another system's export lands in ServiceNowImport set + transform mapAn external system calls into your appScripted REST API (versioned, REST_Endpoint ACL)A form needs server data without a page reloadGlideAjax → client-callable script includeA process reaches out to an external systemFlow Designer action in that system's spoke
From the import sets, Scripted REST API, script includes and Flow Designer documentation.

A Scripted REST API is a custom endpoint made of resources, each with an HTTP method and a script; you version it in the URI so existing integrations keep working, and callers must satisfy at least one REST_Endpoint ACL (source). Client-callable script includes are private by default, so guests on public pages can't run them unless you change that deliberately (source). Runtime access settings on the application decide whether API or web service calls can run against its tables at all (source).

Step 4

A study plan built on a real app

The most effective CAD preparation is to build one small scoped application end to end in a personal instance, touching every domain. Pick something concrete, such as an equipment-loan tracker, and work through it in this order:

  1. Design. Create the scoped app, two or three tables and the modules. Write down why each table is in your scope.
  2. UI. Build the form, add onLoad and onChange client scripts, then a record producer as an alternative entry point.
  3. Security. Add ACLs for a borrower role and a manager role, then test as each user. Try to break your own rules.
  4. Automation. Add an approval flow in Flow Designer, an application property, and a script include used by a business rule.
  5. External data. Import a spreadsheet of equipment, then expose a read-only Scripted REST endpoint for loan status.
  6. Managing. Set up delegated development for a second user and add an ATF test you can run after changes, on your non-production instance (ATF).

Then switch to CAD practice questions. Every miss should send you back to the part of your app where that concept lives.

Step 5

Worked scenarios

Illustrative scenarios, not exam questions.

Healthcare

A patient-transport app must not let porters see clinical notes

Porters need the pickup location and time; clinical staff need the full record. Both use the same table.

Field-level ACLs control read access for each role; hiding the field on the porter form is cosmetic (source, source). Keep the tables in the app's own scope so other applications need explicit permission (source).

What the exam is checking: Field ACLs over form logic, inside a scoped app.

Manufacturing

Quality inspections need a supervisor sign-off and a notification

A developer proposes an after business rule that creates approval records and sends email.

ServiceNow recommends Flow Designer over business rules unless specific sequencing or immediate database logic is required, and Flow Designer handles approvals, tasks and notifications without code (source).

What the exam is checking: Choosing Flow Designer for a human approval process.

Media

A partner integration needs a breaking change to a response format

Two partners call your endpoint; one needs a new field structure, the other can't change yet.

Publish a new version of the Scripted REST API in the URI, so the existing integration keeps using the old version; if no version is marked default, the latest is used (source).

What the exam is checking: API versioning instead of in-place changes.

Education

A school district's app keeps breaking after upgrades

Each upgrade surfaces regressions that users report days later.

The Automated Test Framework exists to confirm the instance still works after changes such as upgrades, and tests should run only on non-production instances (source).

What the exam is checking: ATF as upgrade regression protection, outside production.

Myths

Misconceptions that cost marks

Misconception

“Client scripts run on lists too.”

What the sources say

Client scripts generally run on forms and search pages, not lists, with onCellEdit as the exception (source).

Misconception

“Async business rules run in a fixed order.”

What the sources say

Async rules run through a scheduled job, and the order isn't guaranteed when several update the same record (source).

Misconception

“A user must pass every matching ACL.”

What the sources say

A user must pass all conditions within an ACL, but if several ACLs match at the same point, passing any one grants access (source).

Misconception

“Global scope is fine for new apps.”

What the sources say

ServiceNow recommends scoped apps for new tables because global apps can unintentionally alter data (source).

Logistics

Booking, fees and retakes in 2026

  • Exams are registered and paid for in ServiceNow University and scheduled through Pearson VUE; vouchers no longer exist (source). A May 2026 Community reply for a CAD candidate confirms this and notes you have 90 days to schedule and complete the exam once registered (source).
  • The CAD exam fee is $300 USD excluding tax; a retake is $150 (source).
  • Retake waits: 3 days before the second attempt, 30 days before the third, then 6 months (source).
  • The cut score isn't published; exams are scored against a predetermined cut score that isn't shared (source).
  • We haven't found a public ServiceNow source for the current CAD question count and time limit, so we don't quote one. Check the blueprint.

For costs across certifications, see ServiceNow certification cost in 2026.

Practice

Try some free CAD practice questions

Three free questions from our CAD bank are below. The rest, organised by blueprint area, are on the CAD practice questions page.

Sample Practice Questions

Try a few questions to see what to expect on the CAD exam

View All Practice Questions

15 free questions available

Sources

Every exam fact and product behaviour on this page links to one of these ServiceNow sources. Check them before you book: exam rules change between releases.

  1. CAD exam blueprint, KB0011498 (updated January 2026)
  2. Welcome to ServiceNow (Now Learning course page)
  3. ServiceNow Developer site
  4. Application scope
  5. Client scripts
  6. Classic business rules
  7. Script includes
  8. Explore Access Control Lists
  9. Flow Designer
  10. Scripted REST APIs
  11. Import sets
  12. Delegated development and deployment
  13. Automated Test Framework
  14. Mark Roethof, “2026 exam vouchers, courses, exams & retakes – major changes explained”, ServiceNow Community, 18 Jan 2026
  15. “CAD Voucher”, ServiceNow Community Developer forum, 3 May 2026
  16. “CSA Exam” (cut score question), ServiceNow Community SysAdmin forum, 16 Jul 2026

Ready to practice?

Test your knowledge with questions generated from official ServiceNow content.

Related Certifications