Free CTA sample questions

Correct answers: Performance Testing; Load Testing; Security Testing

Performance, Load, and Security testing are critical non-functional tests for an application with these requirements. Performance testing checks the speed and responsiveness. Load testing simulates concurrent user access to ensure stability under stress. Security testing identifies vulnerabilities in the custom code and integrations. While Usability testing is important, it's a functional aspect. Unit testing is a developer-level activity focused on individual code components, not the overall application stability and scalability.

Correct answer: True

This statement is true. In the Common Service Data Model (CSDM), the Business Application represents the conceptual or logical application used by the business (the 'what'). The Application Service represents the deployed, operational instance of that application (the 'how'). A core principle of CSDM is linking the operational world (Application Service) to the business portfolio world (Business Application) to enable capabilities like impact analysis and application portfolio management.

Correct answer: Two production instances: one in an EU data center for European data and one primary global instance. Use ServiceNow's instance-to-instance integration capabilities to sync non-sensitive data for global reporting and to provide a unified portal experience.

This hybrid approach is the most robust and balanced solution. It directly addresses the strict data sovereignty requirement by having a dedicated EU production instance. It leverages standard platform features for instance-to-instance integration to meet the global reporting and unified portal requirements without building a complex custom solution. This strategy also naturally provides development isolation. A single instance with Domain Separation or Edge Encryption does not satisfy the 'data must physically reside' requirement. A single EU-hosted instance might violate data residency laws of other regions. A fully custom multi-instance portal is complex, costly, and difficult to maintain.

Correct answer: Defining and enforcing standards for custom application development and configuration.

The primary focus of a Technical Governance Board is to maintain the architectural integrity and long-term health of the platform. This is achieved by defining and enforcing standards for development, configuration, integrations, and data. This prevents the accumulation of 'technical debt' and ensures the platform remains scalable and easy to upgrade. Budgeting, project prioritization, and user training are typically handled by a steering committee, project management office, or business stakeholders, although the governance board may provide input.

Correct answer: A pre-defined rollback strategy and procedure.

While communication, post-mortem analysis, and training are all important parts of go-live and Hypercare, the most critical plan for a deployment-blocking defect is the rollback strategy. The ability to quickly and safely revert to the last known good state is paramount to minimize business impact. A well-defined rollback procedure, including criteria for when to execute it, is a cornerstone of go-live preparation.

Correct answer: To provide a visual representation of the solution and how it delivers the required business capabilities.

For business stakeholders, the primary purpose of an architecture blueprint is to visually translate complex technical plans into an understandable format that demonstrates how the proposed solution will meet their business needs and deliver specific capabilities. It bridges the gap between technical implementation and business value. Technical specifications and hardware requirements are important but are secondary details for a different audience (developers and infrastructure teams).

Correct answer: An Enterprise Service Bus (ESB) as a middle layer to handle protocol translation and orchestration.

Using an Enterprise Service Bus (ESB) is the best practice for integrating with legacy systems that use proprietary protocols. The ESB acts as a middleware layer, abstracting the complexity of the mainframe from ServiceNow. It handles the protocol translation (e.g., from REST/SOAP to the mainframe's protocol), orchestrates the communication, and provides a standardized interface for ServiceNow to interact with. This decouples the systems, making the integration more resilient, maintainable, and easier to manage. A point-to-point integration would be brittle and hard to maintain. JDBC is for databases, and IntegrationHub spokes typically require standard protocols like REST or SOAP.

Correct answer: Identification and Reconciliation Engine (IRE)

The Identification and Reconciliation Engine (IRE) is the core component responsible for maintaining CMDB data integrity when multiple data sources are involved. It uses identification rules to determine if an incoming record matches an existing CI, preventing duplicates. It then uses reconciliation rules to control which data sources are allowed to update which attributes, ensuring that the most authoritative source always wins. RTE is for data import, and the Business Rule engine is a general-purpose logic engine.

Correct answers: Create a read ACL on `u_compliance_issue` that requires the 'Compliance' role.; Create a second read ACL on `u_compliance_issue` with a script that checks if `gs.getUserID() == current.opened_by`.

The best practice is to use multiple ACLs to handle different access contexts. The first ACL grants broad access to the 'Compliance' group via a role. The second ACL grants specific, record-level access to the creator of the issue using a condition or script. ServiceNow's security model evaluates all matching ACLs, and if any one of them grants access, the user can read the record. Using a Business Rule for security is not a best practice and can be easily bypassed. A single, complex scripted ACL is harder to maintain than two separate, specific ACLs.

Correct answer: It reduces the time and effort required to validate that existing functionality is not broken by the upgrade.

The primary benefit of ATF for regression testing is efficiency. Upgrades can introduce unintended changes to existing functionality, especially in customized environments. Manually testing all critical business processes is time-consuming and prone to error. ATF allows organizations to build a suite of repeatable tests that can be executed quickly after an upgrade, providing confidence that core functionality remains intact and significantly reducing the validation effort.