- Exam Blueprint Overview
- Domain 1: Designing and Creating an Application
- Domain 2: Application User Interface
- Domain 3: Security and Restricting Access
- Domain 4: Application Automation
- Domain 5: Working with External Data
- Domain 6: Managing Applications
- What the Questions Actually Look Like
- Who Relies on These Domains on the Job
- Building a Domain-Based Study Plan
- FAQ
- Four domains - application design, UI, security, and automation - each carry 20% of the exam.
- External data and application management each account for just 10%, but they're not optional to study.
- The exam has 60 questions in 90 minutes, so pacing matters as much as domain knowledge.
- ServiceNow recommends six months of hands-on development experience before attempting the exam.
Exam Blueprint Overview
The Certified Application Developer exam is built around six content areas, and ServiceNow doesn't distribute the weighting evenly. Four domains - Designing and Creating an Application, Application User Interface, Security and Restricting Access, and Application Automation - each account for 20% of the exam. The remaining two domains, Working with External Data and Managing Applications, each make up 10%. That means 80% of your score depends on just four domains, but the other 20% still translates into roughly 12 questions out of 60 - enough to swing a borderline result.
If you're still deciding whether this credential fits your career plans, start with our broader breakdown of what CAD certification actually covers and how it differs from other ServiceNow developer paths. This article assumes you already know you want to sit the exam and need a domain-by-domain plan for getting there.
Domain 1: Designing and Creating an Application (20%)
This domain tests whether you understand the full lifecycle of building a scoped application from scratch - not just clicking through the Studio interface, but making the right architectural decisions before you write a single line of script.
Designing and Creating an Application
Candidates must understand how to plan, scaffold, and structure a scoped application so it's maintainable and upgrade-safe.
- Application scope and how it isolates tables, scripts, and data from the global namespace
- Studio project structure, source control integration, and application file organization
- Tables, fields, relationships, and choosing between extending existing tables versus creating new ones
- Naming conventions and design patterns that avoid scope-related conflicts later
Expect scenario questions that describe a business requirement and ask you to pick the correct table structure or scope configuration - not simple definition recall.
Domain 2: Application User Interface (20%)
The UI domain covers everything a user actually sees and interacts with inside your application. ServiceNow tests both classic UI elements and newer UI Builder/experience concepts, so you need fluency across the platform's UI toolkit.
Application User Interface
Candidates must be able to build forms, lists, and views that match business requirements without breaking platform conventions.
- Form design, UI policies, UI actions, and client scripts
- List views, related lists, and configuring how records display to different user roles
- UI Builder and Now Experience Framework components for building custom pages
- Mobile-responsive considerations for applications accessed outside the desktop UI
Key Takeaway
Don't treat UI as "the easy domain." It carries the same 20% weight as security and automation, and questions often combine UI configuration with scripting logic in a single scenario.
Domain 3: Security and Restricting Access (20%)
Security is where many otherwise well-prepared candidates lose points, because it requires precise knowledge of how ServiceNow layers access control rather than a single big concept to memorize.
Security and Restricting Access
Candidates must understand how ACLs, roles, and data policies interact to control who can see and edit what.
- Access Control List (ACL) evaluation order and how conditions, roles, and scripts combine
- Role design for a custom application, including elevated and application-specific roles
- Data policies versus UI policies versus ACLs - knowing which enforces what
- Securing scoped application APIs and script includes from unauthorized access
If security concepts feel abstract right now, that's normal - this is consistently one of the domains candidates flag as the toughest. Our guide on how hard the CAD exam really is breaks down why security trips people up more than the other domains.
Domain 4: Application Automation (20%)
Automation covers the server-side logic that makes an application actually function without constant manual intervention - the domain most closely tied to scripting skill.
Application Automation
Candidates must know when to use each automation tool and how to avoid common performance and recursion pitfalls.
- Business rules: order of execution, when to use before/after/async, and abort conditions
- Script includes and reusable server-side logic patterns
- Flow Designer versus scripted automation, and when each is the right tool
- Scheduled jobs, events, and notification triggers within a scoped application
This domain rewards hands-on practice far more than passive reading. If you haven't built and debugged your own business rules and flows, close reading alone won't get you through these questions.
Domain 5: Working with External Data (10%)
At 10%, this domain represents fewer questions, but they're often very specific and easy to miss if you've never worked with integrations directly.
Working with External Data
Candidates must understand how data enters and leaves a ServiceNow application through supported integration mechanisms.
- Import sets and transform maps for bringing external data into custom tables
- Web services (REST/SOAP) basics as they apply to a scoped application
- Data sources and scheduled data imports
- Field mapping logic and handling data type mismatches during transformation
Domain 6: Managing Applications (10%)
The final domain covers what happens after an application is built - deployment, updates, and lifecycle management, which candidates who only practice in a sandbox often overlook.
Managing Applications
Candidates must understand how applications move between instances and how updates are tracked and controlled.
- Update sets versus application repository/source control publishing
- Version control and application dependencies between custom and out-of-box components
- Promoting an application from development to test to production instances
- Rollback strategies and managing conflicts during application updates
Because this domain is only 10% of the exam, it's tempting to skip it in favor of the bigger domains. Resist that urge - a handful of easy points here can offset a shaky answer elsewhere. Our one-page CAD cheat sheet is built specifically to keep smaller domains like this one from falling through the cracks during final review.
What the Questions Actually Look Like
All six domains are tested across a single 60-question exam delivered in 90 minutes. ServiceNow doesn't publish domain-by-domain question counts for each sitting, but the percentages above give you a reliable estimate: expect roughly 12 questions each from Application Design, UI, Security, and Automation, and around 6 questions each from External Data and Application Management.
| Domain | Weight | Approx. Questions |
|---|---|---|
| Designing and Creating an Application | 20% | ~12 |
| Application User Interface | 20% | ~12 |
| Security and Restricting Access | 20% | ~12 |
| Application Automation | 20% | ~12 |
| Working with External Data | 10% | ~6 |
| Managing Applications | 10% | ~6 |
Most questions are scenario-based rather than pure definition recall - you'll read a short description of a business requirement or a piece of misbehaving logic and select the configuration or code approach that resolves it. Knowing exactly how many marks you need across these domains matters just as much as knowing the content; see our breakdown of the CAD passing score for how the scoring actually works.
Who Relies on These Domains on the Job
These six domains aren't arbitrary exam categories - they map almost directly onto the daily responsibilities of a ServiceNow application developer. Teams building custom scoped applications, internal tools, or industry-specific solutions on the Now Platform lean on exactly this skill set: designing tables, building forms, locking down access, automating workflows, integrating outside systems, and shipping updates safely.
If you're evaluating whether the credential is worth pursuing before you commit study time, our ROI analysis of the CAD certification and CAD salary guide both look at how employers value this specific domain mix. For a look at where these skills actually get used in postings and role descriptions, check our roundup of CAD jobs.
Building a Domain-Based Study Plan
Rather than studying topics in the order they appear in documentation, allocate your study weeks based on domain weight. Give the four 20% domains roughly double the time you give the two 10% domains, and sequence them so the hardest concepts (Security, Automation) get revisited more than once before exam day.
Application Design + Environment Setup
- Build a scoped application from scratch in a personal developer instance
- Practice table and field design decisions under different scenarios
User Interface
- Build forms, UI policies, and client scripts for the app started in Week 1
- Add a UI Builder page and test role-based visibility
Security and Automation
- Configure ACLs and custom roles for the application
- Write business rules and a Flow Designer flow, then trace execution order
External Data, Management, and Full Review
- Practice an import set/transform map exercise
- Move the application through update sets and simulate a promotion
- Do a full domain-weighted practice run
This plan assumes you already have a baseline of ServiceNow admin knowledge. If you need to confirm you meet the prerequisites before scheduling, review our CAD requirements guide and check current exam dates and scheduling windows. For a more detailed week-by-week methodology, including how to layer in practice questions from our CAD practice test platform, see the full CAD study guide.
Budget for the exam itself as part of your planning too - the CAD certification cost breakdown covers registration fees and retake pricing so there are no surprises when you book your slot. And once you're deep into domain review, running timed sets on cadpracticetest.com is the fastest way to find out which of the six domains still needs work before your real attempt.
FAQ
Start with Designing and Creating an Application. It's foundational - the table structures and scope decisions you make here affect how you'll approach the UI, security, and automation domains later.
No. Together, Working with External Data and Managing Applications still account for about a fifth of the exam's total questions. Skipping them risks losing easy points on straightforward, well-defined material.
Yes, particularly in the Application Automation and Application User Interface domains, where scenarios often involve reading or evaluating client scripts, business rules, or script includes rather than pure conceptual recall.
ServiceNow recommends six months of hands-on application-development experience before attempting the exam. Dedicated study time on top of that experience typically runs several weeks, depending on how much of that experience already touches each domain.
Many candidates report it as the most conceptually dense domain because ACLs, roles, and data policies interact in layered ways. It carries the same 20% weight as three other domains, so it deserves equal, not extra, attention - just more careful practice.