FREE ServiceNow CAD Exam Guide 2026: Pass Certified Application Developer

ServiceNow Certified Application Developer (CAD) Exam Guide 2026: The Only Walkthrough Built Around the Current Release

If you write scoped applications on the Now Platform - scripting business rules, building UI Builder pages, authoring Integration Hub spokes, or stitching Flow Designer actions together - the ServiceNow Certified Application Developer (CAD) is the credential that separates senior developers from admins on every ServiceNow partner, customer, and recruiter shortlist in 2026.

Unlike most IT certifications, CAD is tied to a specific Now Platform release. The base exam is anchored to a recent version, and ServiceNow then issues a short CAD Delta Exam each release cycle so your credential stays current. Miss the Delta window and your CAD expires on your ServiceNow certification record. This guide is written exclusively for the 2026 window (Zurich release) and the current Delta cadence - not the retired Paris / Rome / San Diego materials that still fill the first page of Google results.

CAD At-a-Glance (2026)

Source: ServiceNow University CAD exam specification and Credentialing Program Agreement (learning.servicenow.com). As of 2026, ServiceNow moved exam delivery from Kryterion/Webassessor to Pearson VUE and replaced exam vouchers with direct purchase on ServiceNow University. Always re-verify the current fee, cut score, and Delta cadence on ServiceNow University before you book - ServiceNow revises these on each release.

---

Start Your FREE CAD Prep Today

Start FREE ServiceNow CAD practice questionsPractice questions with detailed explanations

---

Developer Track vs CSA Admin Track: Which Exam First?

ServiceNow splits its role-based certifications into two parallel tracks that overlap in the middle:

CSA is not a formal prerequisite for CAD, but 95% of successful CAD candidates pass CSA first because the CAD exam assumes you already know the platform fundamentals (tables, ACLs at a surface level, update sets, user/group/role model). If you try CAD cold without CSA, you will burn time in the exam rereading questions whose platform vocabulary you do not yet own. Treat CSA as the "platform driving test" and CAD as the "platform engineering license."

ServiceNow officially recommends the order: CSA -> CAD -> CIS specialty.

The CAD Delta Exam Maintenance Model (Critical in 2026)

This is the single most misunderstood aspect of CAD, and the item competitor guides most often get wrong.

CAD is a release-tied credential. When you pass the base CAD exam, your ServiceNow University transcript shows something like "CAD - Zurich." To stay current, you must pass the short CAD Delta Exam for each subsequent Now Platform release and pay the annual $200 CMP (Certification Maintenance Program) fee. ServiceNow ships a new major release each cycle, and the Delta Exam window opens for roughly 90 days after each release GA.

Delta Exam facts:

• Open-book and non-proctored - you take it at home through ServiceNow University, not at a Pearson VUE test center.
• Short - approximately 6-20 questions focused exclusively on features new or changed in that release; up to 5 attempts allowed within the 90-day window.
• $200 CMP fee required - you must pay the annual Certification Maintenance Program fee before Delta exam access opens. For active ServiceNow partner employees, the employer typically covers this fee.
• Must be completed within the 90-day Delta window. If you fail all 5 attempts or miss the window entirely, your CAD certification expires and you must re-enter by passing the full mainline CAD exam again at full fee.
• Completion of the Delta Exam is also the path to re-qualify if you previously held a lapsed CAD.

Study implication: Never rely on a study guide or YouTube course tied to an older release for Delta prep. Read the current release notes end-to-end on docs.servicenow.com and complete the matching Delta Exam learning path on ServiceNow University.

Course Prerequisites and Eligibility (2026)

To sit the base CAD exam, ServiceNow recommends completing the CAD learning path on ServiceNow University. There are no strict prerequisites, but the standard preparation path in 2026 is:

1. Welcome to ServiceNow (On-Demand) - free on ServiceNow University.
2. Scripting in ServiceNow Fundamentals (On-Demand) - core scripting course, free on ServiceNow University.
3. Application Development Fundamentals (On-Demand) - the core CAD course, free on ServiceNow University.
4. Complementary On-Demand courses: Client Scripting, Server-Side Scripting, Flow Designer, Integration Hub, Service Portal, Automated Test Framework.
5. Hands-on in a Personal Developer Instance (PDI) - free, provisioned via developer.servicenow.com.

Alternative path (for returning candidates): pass the current CAD Delta Exam to re-qualify.

ServiceNow periodically revises the exact course list. Check the current CAD exam specification on ServiceNow University before you book; the spec PDF lists every mandatory module.

---

Build CAD Mastery with FREE Practice Questions

Access FREE CAD practice questionsPractice questions with detailed explanations

---

CAD Content Domains (2026)

ServiceNow groups the 60-item exam into six content domains. The distribution below reflects the current mainline CAD blueprint (Zurich release) as published on ServiceNow University.

Source: ServiceNow CAD exam specification (current mainline blueprint on ServiceNow University). The two heaviest domains - Managing Applications (25%) and Security / Working with Data / Automation (20% each) - account for 85% of the exam. Prioritize accordingly.

---

Deep Dive 1: Application Scope - The Single Most Tested Concept

Every CAD exam I have seen or heard reported contains at least five questions that hinge on understanding scoped applications. If you miss this concept you will not pass.

Global scope is the legacy sandbox where older customer customizations, most baseline tables, and direct cross-application access live. Anything in global can read and write almost anything else in global by default.

Scoped applications are the 2026 default for all new custom development. A scoped app:

• Gets a unique scope identifier (e.g., x_acme_app1) that prefixes every table, script include, and system property it owns.
• Cannot directly read or write records in another scope unless the other scope explicitly grants Application Access (Can read, Can create, Can update, Can delete, Can query on table records).
• Has its own restricted caller access controls for its script includes and tables.
• Ships as a discrete unit through the Application Repository - far cleaner than shipping global update sets.

Common exam traps:

• A business rule in scope A trying to update a record on a table owned by scope B will silently fail unless scope B has granted write access.
• GlideRecord in a scoped script obeys scope rules by default; using GlideRecord on a table in another scope may return zero rows even when records exist.
• cross-scope privileges can be granted via "cross scope privilege" records - know where they live and when to create one.
• Only a user with the app_admin role in the app (or System Administrator) can modify the application itself.

Deep Dive 2: Tables, Extensions, and the Dictionary

• Extend a table (not copy it) when you need a specialized type that shares the parent's columns, ACLs, and workflow eligibility. Example: extending task for a custom task type.
• Dictionary overrides let a child table override a parent's default value, mandatory flag, or display-by-value without touching the parent.
• Reference fields create a foreign-key relationship; many-to-many uses an M2M table (the CAD spec lists the specific sys_m2m pattern).
• Data policies enforce field behavior regardless of the interface (unlike UI policies, which only affect forms). Exam favors data policies for "enforced even through import sets and web services."
• Access controls on extended tables stack from parent -> child; you need to understand ACL evaluation order to predict what a user can and cannot see.

Deep Dive 3: UI Builder + Now Experience Framework (2025 Updates)

ServiceNow has spent the last four releases pushing UI Builder and the Now Experience Framework as the modern replacement for classic CMS / Service Portal for Workspace and Employee / Customer experiences.

What to know for CAD:

• UI Builder is the low-code drag-and-drop page composer that writes Now Experience pages and components. It replaces older workspace configuration UIs.
• Pages are collections of components; components consume data resources (REST, GlideRecord wrapped as data resource, server actions).
• Client state (page / component scopes) vs client controllers - the 2025 releases expanded the client controller API; expect at least one question.
• Service Portal (the older Angular-based portal) is still in scope, especially widgets (HTML + CSS + client script + server script), portal pages, and the portal configuration record.
• Know when to pick UI Builder vs Service Portal - workspace and modern employee experiences use UI Builder; public / anonymous customer-facing portals still commonly use Service Portal.

Deep Dive 4: Business Rules vs Client Scripts vs Script Actions

This trio generates at least 4-6 CAD questions, almost always in "which script type runs in which context" form.

Common trap: "Change a field when the user picks a value in another field, and validate it against a table with 400k rows."

• Client Script + GlideAjax (asking a "Client callable" Script Include on the server) is the right answer - not a raw client-side GlideRecord call, which is limited / discouraged.

Deep Dive 5: GlideRecord, GlideRecordSecure, GlideAggregate

GlideRecord is the canonical server API. Know these methods cold:

• initialize() - new empty record.
• addQuery(field, operator, value) / addEncodedQuery() - build query.
• query() - execute. In a loop you call next().
• get(sys_id) - populate by sys_id.
• insert(), update(), deleteRecord(), deleteMultiple() - DML. deleteMultiple() respects current query.
• setWorkflow(false) - suppress business rules, notifications, and workflows for bulk operations.
• autoSysFields(false) - do not update sys_updated_on/by (rare, but tested).
• setLimit(n) - cap results.
• getRowCount() - returns results of the last query.

GlideRecordSecure is the security-aware twin: it honors the current user's ACLs. Use it when writing scripts that must respect data security (for example, a client-callable script include returning records to a portal user). Do not use GlideRecord where GlideRecordSecure is required - one of the most common CAD scenarios.

GlideAggregate is for COUNT / SUM / AVG queries without pulling every row. Example: count incidents per assignment group. Know the groupBy / addAggregate / getAggregate pattern.

Deep Dive 6: Flow Designer vs Legacy Workflow

Flow Designer is the 2026 modern orchestration tool. Legacy Workflow Editor still exists for backward compatibility but new CAD content is explicitly Flow Designer.

• Flow - a full automation with a trigger + actions + subflows.
• Subflow - a reusable unit callable by flows, other subflows, or script via FlowAPI.
• Action - a reusable step; actions can be custom-authored and shipped in Integration Hub spokes.
• Trigger types - record trigger, scheduled, inbound email, REST (via Scripted REST + trigger), application event.
• Data pills - typed values passed between steps. Understand the difference between current record data pills and action outputs.
• IntegrationHub spokes - packaged collections of actions for third-party services (Slack, Microsoft Teams, Jira, AWS, Azure, Salesforce, SAP, etc.). Spokes often require an IntegrationHub subscription (verify licensing in exam context).

When to pick Flow Designer vs Script: Flow Designer for declarative, auditable orchestration. Server-side script for tight loops, complex data manipulation, or logic that does not fit the action model.

Deep Dive 7: REST / SOAP Integrations

ServiceNow exposes and consumes REST and SOAP APIs. CAD tests both directions:

• Inbound - external system -> ServiceNow.
  • Table API - built-in REST API for every table; simplest but less controlled.
  • Scripted REST API - custom endpoint, custom script, custom authentication; the right answer when external contracts do not match the table schema.
  • Authentication via Basic Auth, OAuth 2.0, Mutual TLS.
• Outbound - ServiceNow -> external system.
  • REST Message records define endpoint, methods, headers, auth profile.
  • Called from script (sn_ws.RESTMessageV2) or from a Flow Designer REST step (usually preferred).
  • Credentials and Connection & Credential Aliases keep secrets out of scripts.

Deep Dive 8: Access Controls (ACLs)

ACLs are evaluated in a specific order and at a specific object level. This is a guaranteed 3-5 questions.

• Levels: row (record-level read/write/create/delete), field (column-level read/write), ui_page / processor / rest_endpoint / client_callable_script_include.
• Evaluation order: for a field read, ServiceNow evaluates the field-level ACL; if there is no field-level ACL, it falls back to the table-level ACL. A user is granted access only if at least one matching ACL passes and all conditions and scripts on that ACL return true.
• Condition + Script + Roles: all three must be satisfied for an ACL to grant access.
• Deny-by-default: if no ACL matches, access is denied.
• Elevated privileges: certain roles like security_admin are required to edit high-sensitivity ACLs; users must elevate the role in their session.
• Application Access (at the app level) can allow or deny cross-scope reads/writes on the app's tables before ACLs even evaluate.

Deep Dive 9: Service Portal Basics

Even though UI Builder is the shiny new path, CAD still tests Service Portal:

• Portal record (sp_portal) - URL suffix, default page, theme, logo.
• Pages (sp_page) - collections of rows + columns + containers + widgets.
• Widgets - HTML template + CSS + client script + server script + option schema. Server script executes in a server context and prepares data; client script runs in the browser.
• Widget instances - same widget configured differently across pages.
• Portal-specific ACLs - access often uses the Public role or an anonymous user; know the Service Portal security model.

Deep Dive 10: Automated Test Framework (ATF)

ATF is ServiceNow's built-in regression testing tool and explicitly in CAD scope.

• Tests contain test steps (open a form, set a field value, submit, assert field value, assert message).
• Impersonation - an ATF step can impersonate a user so the test runs as that user (ACL-accurate testing).
• Test suites group tests for a release.
• Module tests - parameterized tests that validate entire modules / applications.
• Know which test steps exist in which category (Form, Server, REST, Service Catalog, Service Portal).
• Tests should never run on a production instance; ServiceNow enforces this with a property (glide.sys.atf.allow_run_on_prod) that is off by default.

Deep Dive 11: Update Sets and Plugins

• Update sets transport customizations between instances. They capture customer updates (sys_update_xml records) of configuration changes.
• Scoped applications are primarily transported via the Application Repository, not update sets - this is a classic CAD gotcha. You publish an app to the repo from the source instance and install it on the destination.
• Plugins activate ServiceNow product content (e.g., IntegrationHub spokes, HR SM, CSM).
• Batched update sets allow you to sequence dependencies.
• Know the preview / commit workflow and how to resolve collisions.

---

Cost and Registration (2026)

Register through your ServiceNow University account: complete the recommended On-Demand courses, then purchase and schedule the CAD exam through ServiceNow University and choose a Pearson VUE test center or OnVUE online proctoring. Exam vouchers no longer exist as of late 2025 - you purchase directly on ServiceNow University.

CAD Delta Exam - Every Release (Do Not Skip It)

Each release cycle a new Now Platform release ships (e.g., Zurich in 2025-2026). ServiceNow opens the Delta Exam window for approximately 90 days after each release GA. For the Zurich release, the Delta window ran January 16 to April 16, 2026.

1. Pay the $200 CMP fee on ServiceNow University (annual maintenance fee).
2. ServiceNow opens the Delta Exam on your ServiceNow University transcript.
3. You complete the Delta modules (1-3 hours of release-notes reading).
4. You sit the CAD Delta Exam (~6-20 questions, open-book, non-proctored, up to 5 attempts).
5. Your ServiceNow University transcript updates to show CAD - current release.

If you fail all 5 attempts or miss the 90-day window, your CAD certification expires. You must then re-enter by passing the full mainline CAD exam again at full fee ($300). Set a recurring reminder the week each new release GAs. Partner employees typically have the CMP fee covered by their employer - use it.

8-12 Week CAD Study Plan

This plan assumes you already hold CSA (or equivalent admin experience) and can spend ~8-10 hours per week. Compress to 6-8 weeks if you have shipped production scoped apps; extend to 12-14 weeks if CSA was your last ServiceNow study block 12+ months ago.

If your target exam anchors to a different release than your study materials, add a week for release-specific Delta reading on docs.servicenow.com.

Free + Paid CAD Resources

Hands-On PDI Lab Strategy

CAD is not a memorize-the-facts exam. The questions are scenario-based and assume you have built the things you are being asked about. Without a live PDI you will not pass.

Provision: developer.servicenow.com -> Sign in with free developer account -> Request instance. Instances hibernate after 10 days of inactivity; wake them up anytime.

Build these 10 scenarios end-to-end. If you have built all ten you will recognize every scenario on the exam:

1. Create a scoped application with at least three custom tables, one reference field, one M2M, and one extended table.
2. Write a before-insert business rule that defaults a field from a related record.
3. Author a client-callable Script Include that returns a list of records using GlideRecordSecure, plus a client script that invokes it via GlideAjax.
4. Build a UI Policy + a Data Policy for the same field and observe which one fires on a web service insert.
5. Create a flow: record trigger -> REST step -> conditional branch -> subflow.
6. Stand up a Scripted REST API endpoint with OAuth 2.0 inbound authentication and call it from Postman.
7. Build a Service Portal widget (HTML + CSS + client + server) that lists records from your app.
8. Build a UI Builder page with at least two components and a data resource.
9. Write field-level and row-level ACLs with script conditions; test them by impersonating different users.
10. Author an ATF test suite that covers a form, a server-side BR, and your Scripted REST endpoint with impersonation.

Publish the app to the Application Repository and install it on a second PDI. That single workflow covers half the Deployment domain.

Test-Day Strategy

Before you sit:

• Confirm your ServiceNow University profile name matches your government ID exactly.
• If OnVUE, run the Pearson VUE system test 24 hours ahead.
• Clear your desk; the proctor will require a 360 room scan.
• Keep a water bottle and photo ID ready.

During the exam:

• 60 items in 90 minutes = ~90 seconds per item. Pace accordingly.
• Read each question twice. Multi-answer items explicitly say "Choose 2" or "Choose 3."
• Eliminate obviously wrong options first - CAD items frequently include one distractor referencing a deprecated approach (legacy workflow, classic UI, global scope patterns).
• Prefer the modern answer on style questions: Flow Designer over legacy workflow; scoped app over global; GlideRecordSecure over GlideRecord in client-callable scripts; IntegrationHub over raw REST scripts.
• Flag and move on at 10+ seconds of uncertainty. You can revisit flagged items.

After the exam:

• Pearson VUE delivers an immediate pass/fail indication at the screen.
• Your ServiceNow University transcript usually updates within 48 hours with the certificate and digital badge (Credly).

Common Pitfalls That Sink First-Time Scores

1. Confusing scoped vs global behavior. A GlideRecord in scope A cannot read scope B's tables without Application Access. This is a near-guaranteed question.
2. Using GlideRecord where GlideRecordSecure is required. Any client-callable Script Include returning records to an end user should use GlideRecordSecure to honor the user's ACLs.
3. Picking Business Rule when a Client Script is correct (or vice versa). Server vs client context is the single most tested skill. If the question describes a user interacting with a form, it is almost always client. If it describes data integrity regardless of interface, it is server.
4. UI Policy vs Data Policy. UI Policy = forms only. Data Policy = enforced across all interfaces including import sets and REST.
5. Thinking update sets move scoped apps. They do not (cleanly). Use the Application Repository.
6. Skipping Application Access on cross-scope scenarios. If the question mentions two scopes, Application Access is almost always the right lever.
7. Over-using legacy workflow. CAD 2026 rewards Flow Designer. Do not pick workflow unless the question specifically describes a legacy workflow scenario.
8. Forgetting ATF impersonation. Tests that must honor ACLs require an impersonation step.
9. Ignoring Delta Exams after passing. Your CAD expires if you miss the 90-day Delta window or skip the $200 CMP fee.
10. No PDI time. Candidates who only watch videos fail at a much higher rate than candidates who have shipped a scoped app end-to-end.

Career Value and Salary (ServiceNow Developer, 2026)

ServiceNow developer roles remain one of the most reliably well-compensated platform niches in enterprise IT. Every ServiceNow customer that builds custom scoped apps, IntegrationHub spokes, or custom workspaces hires developers who hold CAD.

For broader context, the US Bureau of Labor Statistics reports a median annual wage of $133,080 for software developers (SOC 15-1252, May 2024 data) - well above the all-occupations median. ServiceNow developers, as a specialized platform niche, typically cluster at or above that national median.

ServiceNow Developer Career Ladder

CAD + CSA is the minimum duo expected of every ServiceNow developer candidate; CIS specialties are where partner billable rates go up materially.

---

Keep Training with FREE CAD Practice

Practice ServiceNow CAD scenario questionsPractice questions with detailed explanations

---

Frequently Missed 2026 Details (Competitor Guides Get These Wrong)

• CAD is release-tied. Each release cycle you must pass the Delta Exam and pay the $200 CMP fee; miss the 90-day window and the credential expires.
• Scoped apps ship via the Application Repository, not update sets.
• GlideRecordSecure exists for a reason - use it in client-callable contexts.
• Flow Designer is the 2026 default, not legacy workflow.
• UI Builder + Now Experience Framework is pushed harder with every release; Service Portal is still in scope but not the modern path for workspaces.
• Data Policy enforces across all interfaces; UI Policy is forms-only.
• CSA is not a formal prerequisite for CAD, but is practically required.
• Exam delivery moved to Pearson VUE in late 2025; Kryterion/Webassessor is retired and exam vouchers no longer exist.
• Retake fees are $150 with escalating wait periods (3 days, 30 days, 6 months).

Official Sources Used

• ServiceNow University CAD exam blueprint and Credentialing Program Agreement (learning.servicenow.com)
• ServiceNow developer portal (developer.servicenow.com) for PDI and API docs
• ServiceNow product docs (docs.servicenow.com)
• ServiceNow Community (community.servicenow.com) for current release notes and Delta exam windows
• Pearson VUE ServiceNow exam scheduling (via ServiceNow University SSO)
• US Bureau of Labor Statistics (bls.gov) - Software Developers SOC 15-1252, median $133,080/year (May 2024 data)
• Glassdoor / ZipRecruiter / Salary.com / Indeed / Robert Half Tech Salary Guide 2026 - salary references
• LinkedIn / Dice Talent Insights - ServiceNow developer demand signals

Certification details, fees, cut scores, and Delta cadence may be revised by ServiceNow. Always confirm current requirements directly on ServiceNow University before scheduling.