CAD - Certified Application Developer
How a scoped ServiceNow application fits together, what each Certified Application Developer blueprint domain asks, worked industry scenarios, and sourced 2026 exam logistics.
By the SNReady teamLast reviewed
ServiceNow does not publish the cut score, and the official exam blueprint says it is not always 70%. Exams are registered and paid for in ServiceNow University, scheduled through Pearson VUE (source).
The Certified Application Developer exam is less about writing clever JavaScript and more about knowing where code should live. A ServiceNow application is a scoped bundle of tables, forms, server logic, access rules, automation and integrations. The exam asks you to place each requirement in the right part of that bundle and to protect the bundle from everything outside it. This page builds that mental model, maps it to the official blueprint, and works through scenarios from different industries.
Blueprint
What the CAD exam tests
The CAD exam blueprint (KB0011498, updated January 2026) splits the exam into six domains. Four of them carry 20% each, so no single area lets you skip the others.
1. Designing and Creating an Application (20%)
- •Determine if an application is a good fit with ServiceNow
- •Design and implement a data model
- •Create modules
- •Use Application scope
2. Application User Interface (20%)
- •Create, design, and customize forms
- •Add/Remove fields from forms and tables
- •Write, test, and debug client-side scripts for desktop
- •Write, test, and debug server-side scripts
- •Use a Record Producer as an application's UI
3. Security and Restricting Access (20%)
- •Restrict access to applications and application modules
- •Manually and automatically create, test, and debug Access Controls
- •Use GlideSystem methods to script security
- •Use Application Scope to protect application artifacts
4. Application Automation (20%)
- •Write, test, and debug Workflow and Flow Designer
- •Create and use Application Properties
- •Create Events, Scheduled Script Executions (Scheduled Jobs), and Utils (application) Script Includes
- •Send and receive email
5. Working with External Data (10%)
- •Import data in CSV or Excel format
- •Integrate to, including testing and debugging, an external data source using REST
6. Managing Applications (10%)
- •Download and install applications
- •Use Delegated Development to manage source code and code review
- •Use the ServiceNow Git integration to manage source code
Read the objectives closely and a pattern appears: almost every domain mixes a design decision with an implementation skill. “Determine if an application is a good fit with ServiceNow” sits next to “design and implement a data model”. “Use Application Scope to protect application artifacts” sits next to “use GlideSystem methods to script security”. Managing Applications asks about Delegated Development and the ServiceNow Git integration, which are about how teams work, not about syntax.
The blueprint points to the Welcome to ServiceNow course and to the ServiceNow Developer site as resources. If you haven't passed CSA, start with the CSA exam overview: CAD assumes you already understand the platform layers it covers.
Mental model
How a scoped application fits together
Scope is the boundary. Application scoping protects applications by “identifying and restricting access to application files and data”. A scoped app can access and change its own tables and business logic, while other applications need explicit permission, and each app gets a namespace identifier that prevents naming conflicts. ServiceNow recommends scoped apps for new tables, and runtime access settings decide whether API or web service calls can run against an application table (Application scope).
Code lives where it runs. Client scripts run in the browser on forms: onLoad when the form renders, onChange when a field changes, onSubmit when the form is submitted (returning false cancels it), and onCellEdit when a list cell is edited (Client scripts). Business rules run on the server before or after the database operation, asynchronously, or on display (Business rules). Script includes hold reusable server-side functions and classes; they load only when requested, which is why they are preferred over global business rules, and Glide AJAX-enabled script includes can be called from client scripts but are private by default (Script includes).
Security is evaluated, not hoped for
An ACL has a decision type (Allow-If or Deny-Unless), the object it secures, the operation, and conditions: roles, security attributes, data conditions and scripts. A user must pass all conditions of a matching ACL; if nothing grants access, access is denied. ACLs can target objects in their own scope, and wildcard table rules are only allowed in global (Access Control Lists).
Automation has a preferred tool
ServiceNow recommends Flow Designer over legacy workflows for new process flows in almost all cases, and over business rules unless specific sequencing or immediate database logic is needed. For IntegrationHub, the guidance is one spoke per integration system (Flow Designer).
External data enters through defined doors
Inbound files go through import sets and transform maps (Import sets). Custom endpoints are Scripted REST APIs: each resource defines an HTTP method and a processing script, versions in the URI (such as v1) let you change an API without breaking existing integrations, and callers must satisfy at least one ACL of type REST_Endpoint (Scripted REST APIs).
Teams, not just code
Delegated development lets designated users without the admin role build or deploy applications, with permissions that are specific to each application (Delegated development). The Automated Test Framework checks that an instance still works after a change, and ServiceNow says to run tests only on non-production instances (ATF).
The two questions to ask on every CAD scenario
1. Where does this logic run: browser, server, or the integration edge?
2. Who is allowed to touch it: this app, another scope, an external caller, or a delegated developer?
Worked scenarios
Industry scenarios, solved like a developer
These are illustrative situations, not real exam questions.
Insurance
A claims app must read policy data owned by another team's application
You are building a scoped claims-intake app. Adjusters need to see policy details that live in a different scoped application.
Scope means the other application's tables are not yours by default: other apps need explicit permission, which the owning application grants through its application and table settings (source). The design conversation is with the owning team about what access to grant, not a workaround in your own code.
What the exam is checking: Cross-scope access is granted by the owner of the data, not assumed by the consumer.
Logistics
A shipment form must block impossible delivery dates, including from integrations
Dispatchers enter shipments on a form, but a partner system also creates shipments through an API.
An onChange or onSubmit client script gives dispatchers instant feedback, and returning false from onSubmit cancels the submission (source). It does nothing for the API path. A before business rule applies whether records arrive via forms, lists or web services (source), so the rule that must always hold goes on the server; the client script is a usability extra.
What the exam is checking: Client-side validation for experience, server-side validation for integrity.
Telecom
A partner needs an endpoint to check order status
A reseller wants to query order status from its own portal without seeing anything else in your instance.
A Scripted REST API gives you a purpose-built endpoint with its own resources and parameters, a version in the URI so you can evolve it safely, and REST_Endpoint ACLs the caller must satisfy (source). Exposing a narrow, versioned resource is a better answer than handing out broad table access.
What the exam is checking: Choosing a scripted, versioned, ACL-protected endpoint for a custom integration.
Public sector
A department wants its own developers to maintain a small case app
The central platform team doesn't want to give department staff the admin role, but the department needs to build and deploy changes to its own app.
Delegated development grants application-specific developer and deployment permissions without admin rights (source). Pair it with ATF tests run on non-production instances so changes are checked before they move (source).
What the exam is checking: Delegated development as a governance tool, and ATF as a safety net outside production.
Misconceptions
Common CAD misconceptions
Misconception
“CAD is a JavaScript exam.”
What the sources say
Misconception
“Business rules are the default way to automate.”
What the sources say
Misconception
“A client-callable script include is open to everyone.”
What the sources say
Misconception
“You need 70% to pass.”
What the sources say
Logistics
CAD exam logistics in 2026
Booking and delivery
- Exams are registered and paid for in ServiceNow University and scheduled through Pearson VUE, signing in with SSO. Exam vouchers no longer exist (ServiceNow Community, Jan 2026; see also this July 2026 thread).
- Training: on-demand courses are free but don't include an exam attempt; instructor-led training is paid ($1,900 for 2 days, $2,700 for 3 days) and includes the first attempt (source). Sources differ on whether a course is mandatory: the January 2026 summary says completing the course unlocks eligibility, while a May 2026 reply describes the recommended courses as “not required but highly recommended” (CAD thread). Check the registration page for your exam.
- Once registered, you must sit the exam within 90 days or the attempt is forfeited. Exam payments are non-refundable, but you can reschedule without a fee inside the rescheduling window (source).
CAD format, fees and scoring
- We couldn't find a public ServiceNow source for the current question count and time limit, so we don't quote one. Check the official CAD blueprint after signing in to Now Learning.
- Exam fee: $300 USD excluding tax. Retake fee: $150 USD (source).
- ServiceNow doesn't publish the cut score: each exam is scored against a predetermined cut score that is not shared with candidates, and it is the same for everyone (ServiceNow Community, Jul 2026). Treat any “70% to pass” claim as a guess.
For a study plan built around these domains, read the CAD exam study guide on the blog.
Practice
Practise placing code in the right place
Try the free sample questions further down this page, then continue with CAD practice questions by topic. For each answer, say out loud where the code runs and who can reach it. If you can't, that topic needs another pass.
Sources
Every exam fact and product behaviour on this page links to one of these ServiceNow sources. Check them before you book: exam rules change between releases.
- CAD exam blueprint, KB0011498 (updated January 2026)
- Welcome to ServiceNow (Now Learning course page)
- ServiceNow Developer site
- Application scope
- Client scripts
- Classic business rules
- Script includes
- Explore Access Control Lists
- Flow Designer
- Scripted REST APIs
- Import sets
- Delegated development and deployment
- Automated Test Framework
- Mark Roethof, “2026 exam vouchers, courses, exams & retakes – major changes explained”, ServiceNow Community, 18 Jan 2026
- “Exam vouchers eligibility”, ServiceNow Community, 6–8 Jul 2026
- “CAD Voucher”, ServiceNow Community Developer forum, 3 May 2026
- “CSA Exam” (cut score question), ServiceNow Community SysAdmin forum, 16 Jul 2026
Practice by Topic
Focus on specific areas to strengthen your weak points.
Scripting & APIs
Master GlideRecord, GlideSystem, GlideAjax, and server-side scripting on the ServiceNow platform. Learn essential APIs for querying, updating, and managing records programmatically.
Business Rules
Create and manage business rules for server-side automation. Understand when business rules execute, how to use conditions and scripts, and best practices for server-side logic.
Client Scripts
Implement client-side scripting for form customization and improved user experience. Master g_form, g_user, and g_list APIs for dynamic form behavior.
UI Policies & Actions
Dynamically change form behavior without scripting using UI Policies. Create custom buttons and menu items with UI Actions for streamlined workflows.
Script Includes
Build reusable server-side JavaScript libraries with Script Includes. Learn to extend classes, create client-callable scripts, and implement the AbstractAjaxProcessor pattern.
Integration & REST APIs
Build integrations using REST APIs, web services, and data import tools. Master inbound and outbound REST, Import Sets, and Transform Maps.
Application Development
Build and deploy scoped applications using ServiceNow Studio. Manage update sets, implement application security, and test with the Automated Test Framework.
Sample Practice Questions
Try a few questions to see what to expect on the CAD exam
15 free questions available
Get Full CAD Access
Unlock all 194 practice questions with detailed explanations
CAD Only — Lifetime
Because we want you to succeed ✨
- All CAD questions
- Timed mock exams
- Personalized study plan generator
- Detailed explanations
- Lifetime access — never expires
Lifetime Access
- ALL certifications included
- All practice questions
- Timed mock exams
- Personalized study plan generator
- Detailed explanations
- Lifetime access — never expires
- Future updates included
15 free questions available to try first • One-time payment, no subscription
CAD Study Resources
Everything you need to prepare for the CAD certification exam
Timed exam simulation with pass/fail scoring
Personalized week-by-week schedule
Take our 2-minute quiz
See where this cert fits in your career
Related Articles
A sourced Certified Application Developer guide: the January 2026 blueprint domain by domain, what runs when, choosing integration mechanisms, a build-one-app study plan, scenarios, and 2026 booking rules.
Read article →CSA or CAD First? Real Talk From Someone Who's Done BothSkip the generic advice. Here's the actual decision framework for choosing between ServiceNow CSA and CAD certifications based on your background and goals.
Read article →All 28 ServiceNow Certifications Explained (2026 Complete Guide)Every ServiceNow certification in one place: requirements, costs, difficulty, career impact, and which ones to get first. Updated for 2026.
Read article →Why ServiceNow Brain Dumps Will Fail You (And What Actually Works)Brain dump sites like ExamTopics promise easy CSA certification. Here's why they backfire — and the approach that actually prepares you for real ServiceNow work.
Read article →Ready to Start Practicing?
Begin with our free questions to assess your current knowledge level.