ServiceNow Developer / Administrator Interview Questions

A client script meant to auto-populate the 'Affected CI' field fires on a Change Request form, but users report it runs twice and clears the field on the second pass. Walk through how you would diagnose and fix this double-execution issue without breaking the population logic.

Your APAC operations team complains that a GlideAjax call in a catalog item takes 8-12 seconds to return CI data during peak hours. The same call takes under 400ms in a dev instance. Describe how you would isolate the bottleneck and re-architect the solution for production scale.

A Flow Designer flow that creates a child Incident from a parent is silently failing in production — no error in the execution log, but the child record never appears. You have confirmed the trigger fires. Describe your step-by-step debugging approach.

A global retail client with 15,000 daily catalog orders wants to migrate 40 legacy Workflow Engine workflows to Flow Designer in a single quarterly release. The IT director wants zero regression and a rollback plan. How do you structure the migration program?

The service desk at a 5,000-seat insurance company reports that Incident auto-assignment is routing 30% of P1 tickets to an out-of-office team, causing SLA breaches. You are asked to redesign the assignment logic. What is your approach?

A global bank's ServiceNow ITSM instance is processing 50,000 Incidents per month. The CIO asks you to reduce mean time to resolve by 20% in one quarter using only platform-native capabilities. What is your evidence-based plan?

A before-insert business rule on the Incident table that enforces a mandatory 'Business Service' field is causing 400 integration-created Incidents per day to fail silently. The integrations do not send that field. How do you fix this without removing the enforcement for human-created tickets?

During a load test mimicking Black Friday traffic, a business rule scanning all open Changes to check for CI conflicts causes a 12-second page load on the Change form. You own the fix before go-live in 48 hours. Describe the exact code and architecture changes you would make.

Business analysts report that the 'Workaround' field on the Incident form sometimes shows as mandatory and sometimes does not, seemingly at random. You suspect conflicting UI Policies. How do you audit and resolve this?

A heavily customized Problem Management form has 14 UI Policies and 9 client scripts. Users report noticeable form lag on older laptops. You need to reduce client-side execution time by at least 50% without changing visible behavior. What is your optimization strategy?

A Jira-to-ServiceNow incident sync via IntegrationHub REST step is creating duplicate Incidents. The integration runs on a schedule every 5 minutes, and duplicates appear when Jira response time exceeds 4 minutes. Explain the race condition and how you fix it.

A Fortune 500 telecom wants to integrate ServiceNow with SAP S/4HANA to sync hardware asset orders bidirectionally in real time. The SAP team insists on SOAP; the ServiceNow team wants IntegrationHub. You are the integration architect. Describe your design.

Users submitting a 'New Laptop' catalog item report that the delivery estimate shown on the confirmation page is always 3 business days regardless of their location, but the actual SLA varies by region. How do you fix this dynamically?

A university's IT department wants to build a unified Service Catalog serving three audiences — students, faculty, and IT staff — each with different item visibility, pricing, and approval chains, all from a single ServiceNow instance. Design the catalog architecture.

During a quarterly security audit, you discover that a custom table holding PII (employee salary data) has a wildcard 'read' ACL granting access to all authenticated users. You need to lock it down urgently without breaking the three HR workflows that consume the table. How do you proceed?

A mid-size healthcare provider is deploying ServiceNow ITSM and HR Service Delivery on a single instance. Legal insists that IT helpdesk agents must never see HR case data, and HR agents must never see IT infrastructure Incident details beyond ticket number and status. Design the security model.

Your organization's CMDB shows 40% duplicate CI records after a bulk import from a new discovery tool. The duplicates are causing incorrect impact analysis on P1 Incidents. How do you identify and remediate duplicates without corrupting existing relationships?

A global logistics company runs 12,000 CIs across on-prem and three cloud providers. Their CMDB accuracy is below 60% by ServiceNow's own health score. The CISO needs it above 80% in 6 months to pass an ISO 27001 audit. Describe the recovery program.

You are building a scoped app for a pharmaceutical client. A global business rule you depend on is not accessible from your app scope. How do you access its functionality without violating scope isolation?

Your scoped app deployed to 200 enterprise customers starts causing node CPU spikes to 95% every day at 09:00 UTC. The spike correlates with a scheduled script in your app. The same script ran fine in testing. Describe the performance investigation and the architectural changes you make.

An update set promotion from dev to UAT fails with 'Collision detected on sys_ui_script: ux_global_nav_script'. The record exists in both instances with different content. How do you resolve this without losing either version's changes?

Your organization is migrating from manual update sets to a CI/CD pipeline using ServiceNow's Source Control integration (Git). Three teams work in parallel on the same instance. Describe how you structure branches, handle merge conflicts in ServiceNow XML, and manage production releases.

An IT manager asks why the 'Open Incidents by Priority' report shows different numbers depending on whether she runs it herself or when the system emails it on a schedule. How do you diagnose and fix the discrepancy?

The VP of Operations wants a real-time executive dashboard showing MTTR, SLA breach rate, and top 5 incident categories across all global regions, refreshing every 60 seconds. Current Performance Analytics data is 24-hour lag. How do you deliver this without PA premium?

A legacy Change Management approval workflow has been stuck in 'Waiting for Approval' for 72 hours on a critical patching window. The approver's manager is unavailable too. You need to unblock it without skipping the approval policy. What can you do?

A global manufacturing client has 500 active concurrent workflow instances running on their ServiceNow node during end-of-month processing. Workflow engine threads are saturating and new workflows take 10+ minutes to start. Design a remediation and a long-term architecture.

Users in the EMEA region report that ServiceNow is returning session timeout errors every 20 minutes, while the global session timeout is set to 60 minutes. You have not changed any configuration recently. How do you investigate?

Your company's ServiceNow instance is approaching the licensed user seat limit (10,000 seats). You need to audit active users, identify inactive accounts, and implement a governance process to stay within license before the contract renewal in 60 days.

A fintech company's ServiceNow instance logs a JavaScript heap out-of-memory error on a specific Catalog Item's client script every week. The script builds a dropdown of 2,000 currency pairs fetched via GlideAjax. How do you fix this sustainably?

You need to build a Flow that sends a Slack notification when an Incident is escalated to P1, but only during business hours in the assignee's timezone. The standard business hours calendar is global UTC. How do you implement timezone-aware routing?

An SLA for 'P2 Incident Response' is showing as 'Breached' in the portal but the actual first response work note was added within the SLA window. The timestamps in the record confirm timely response. What is causing this and how do you correct it?

A post-update business rule on the Change Request table is recursively triggering itself 15 times and causing a stack overflow error in production. The rule updates a custom field, which triggers the rule again. How do you stop the recursion safely?

A retail bank's ServiceNow instance must consume real-time fraud alerts from an on-prem Kafka topic and create High-Priority Incidents within 30 seconds of the alert. The Kafka broker is behind a DMZ. Design the end-to-end integration architecture.

A professional services firm's Service Catalog contains 300+ items built over 8 years with inconsistent naming, outdated items, and no ownership records. Users report they 'can never find what they need.' Design and execute a catalog rationalization program.

A developer reports they cannot access a custom table they created in their own scoped app when logged in with their dev role. They can access it as an admin. Describe the likely cause and the fix.

A cloud-first startup running entirely on AWS wants to populate their ServiceNow CMDB from AWS Config in near-real-time as infrastructure is provisioned by Terraform. They have no existing discovery infrastructure. Design the ingestion pipeline.

You have built a scoped app for vendor management that is performing well in isolation, but after it is installed on a customer's instance with 80 other scoped apps, Incident list loads become 30% slower. How do you identify your app's contribution and reduce it?

An update set containing a critical security patch needs to be applied to a production instance immediately, but the standard change management process requires a 48-hour review window. The CISO has approved an emergency change. How do you execute this safely?

The head of service management at an energy company wants to implement a Balanced Scorecard in ServiceNow tracking 20 KPIs across ITSM, ITOM, and HR Service Delivery. The data spans four tables. Describe your implementation architecture.

A legacy onboarding workflow at a 20,000-employee tech company takes 5 business days to complete due to sequential approvals. HR wants it reduced to 1 business day using parallel approvals without losing any compliance checkpoints. Design the new flow.

Your production ServiceNow instance is scheduled for a major platform upgrade from Utah to Vancouver. You are the upgrade coordinator. There are 200 customizations, 50 scoped apps, and the instance serves 8,000 users. Describe the 12-week program.

A scoped app Script Include fails to execute when called by a Scheduled Job, throwing a 'Script Include not found' error, but works perfectly when called from a Flow Designer action. What is different about the execution context and how do you fix it?

A UI Action button labeled 'Escalate to Major Incident' appears on the Incident form for all users, including read-only contractors who should never be able to trigger it. How do you restrict visibility and execution without modifying the contractors' role assignments?

A REST integration sending Change Requests from ServiceNow to an external CMDB tool keeps timing out after exactly 30 seconds. The external tool's API team says their server responds in under 5 seconds. Where is the 30-second timeout originating and how do you resolve it?

Users completing a 10-question catalog item form for VPN access report that submitting the form takes 15 seconds. The item has no integrations and no complex scripts. You trace the delay to a Business Rule firing on RITM insert. Diagnose and fix.

A team manager asks why a Change Management report she exports to Excel has 200 rows but the same report in ServiceNow shows 300 rows. You need to explain the discrepancy and fix it.

A Change Request workflow has a 'CAB Approval' activity that was accidentally closed by an administrator while the CAB had not yet met. The Change is now in 'Approved' state. How do you revert the workflow to the CAB Approval step without restarting the entire workflow?

Your ServiceNow instance is generating 500MB of sys_log entries per day, slowing down list views and making log searches nearly unusable. How do you diagnose what is generating the volume and implement a sustainable log management strategy?

A business rule written to prevent Incident closure without a resolution code is accidentally blocking an automated monitoring tool from closing Incidents via REST API. The monitoring team cannot add a resolution code. How do you accommodate both requirements?

A cloud consulting firm is implementing Problem Management for the first time after 5 years of Incident-only ITSM. They have 18 months of Incident data but no problem records. How do you bootstrap the Problem Management practice using existing data and ServiceNow capabilities?

You need to pass a large configuration object (50 fields) from a server-side Script Include to a client script without making multiple GlideAjax calls. What is the most efficient pattern in ServiceNow?

During a pen test, a third-party firm finds that a ServiceNow Scripted REST API endpoint at /api/x_myapp/data returns sensitive customer data to any authenticated user, even those without the required business role. The endpoint has a role check in the code, but the pen test bypassed it. Explain why and how you harden it.

An IT operations team reports that ServiceNow Discovery is correctly finding all Windows servers on the network, but the 'OS Version' field is populated for only 60% of them. The other 40% show NULL. What are the likely causes and how do you fix them?

A legal ops team needs a contract review workflow in ServiceNow where three reviewers must sequentially approve, but if any reviewer rejects, the contract returns to the submitter for revision, then restarts the approval chain from reviewer 1. The chain can loop up to 3 times before auto-escalating to the General Counsel. Build the flow design.

Your team has accumulated 6 months of update sets in dev with no clear record of dependencies between them. You need to promote a specific feature to production without pulling in unrelated half-finished work. How do you untangle this and deploy safely?

A CTO asks you to propose a multi-instance strategy for their company: they need isolated environments for three subsidiaries with different ITSM processes but shared platform administration. Describe the architecture options and your recommendation.

A client script that populates a field on an Incident form is firing on every record in a list view, causing noticeable browser lag for agents working list layouts. The script was written with type 'onChange'. How do you diagnose and fix this without breaking the form behavior?

Your platform team reports recursive Business Rule execution causing a stack overflow on the Problem table. The rule updates a field that triggers another rule which updates the first field. Neither rule has 'Set field values' conditions that obviously loop. Walk through how you find and break the cycle without disabling either rule entirely.

You need to build an automated onboarding flow that creates a Catalog Task, waits for its completion, then sends a Slack message, and finally updates the parent Request Item to Closed Complete. A colleague suggests using a Workflow instead because Flow Designer 'can't wait for subtask completion'. Is the colleague correct? How do you build this properly?

A global bank running ServiceNow ITSM reports that their Major Incident process takes an average of 47 minutes from detection to declaration, far exceeding the 15-minute SLA. They have the correct ITSM workflows configured. What platform-level changes and process re-engineering would you investigate?

After a quarterly security audit, your firm's InfoSec team flags that ServiceNow users in the 'ITIL' role can read the sys_user table columns including password_hash and u_social_security_number. No custom ACL was ever written to restrict these fields. Explain how this happened and your remediation plan.

Your team is consuming a third-party vulnerability scanner's REST API using a REST Message in ServiceNow. The API returns paginated JSON with a 'next_page_token' in each response. Your current implementation only retrieves the first page. How do you implement full pagination inside ServiceNow without an external middleware layer?

Users complain that your 'New Laptop Request' catalog item shows all variable sets regardless of the hardware tier selected in the first question. Business requires that the GPU configuration variable set only appears when 'Engineering Workstation' tier is chosen. Implement this with the least maintenance overhead.

A large telecom client's CMDB has 2.1 million CI records but their CMDB Health dashboard shows a data staleness score of 38 out of 100. Discovery is running daily. Automated pipelines import from three external CMDBs via IRE. Identify the likely root causes and prescribe a remediation approach.

You committed a Business Rule change to an Update Set in dev, promoted it to UAT, and UAT stakeholders approved. Now you are promoting to production and the Update Set preview shows a collision with an existing record that was manually edited in production last week. How do you resolve this safely?

The IT director asks why the 'Open Incidents by Priority' report she views on her dashboard shows different numbers than the report a team lead pulls from the same table using the same filters. Both users claim they're looking at the same report. How do you diagnose this discrepancy?

You are migrating a legacy Change Management workflow with 34 activities—including multiple parallel approvals, SLA timers, and conditional branches—to Flow Designer. The workflow has been in production for 4 years and has 12,000 active workflow contexts. Describe your migration strategy.

Your custom scoped application processes CI relationship data to generate executive risk scores. After a platform upgrade to Washington DC, the nightly batch job that generates 50,000 risk score records now times out at the 30-second transaction limit. The logic in the Scheduled Script Execution has not changed. What caused the regression and how do you fix it?

A UI Policy on the Change Request form is making the 'Risk Assessment' field mandatory when Change Type is 'Normal'. Testers report that when they switch Change Type from Normal to Emergency, the Risk Assessment field stays mandatory even though a second UI Policy should have cleared it. How do you debug this?

A Scripted REST API endpoint you wrote for an external ERP system returns a 403 for one specific ERP service account but works for all others. The service account has the correct REST API role. The endpoint uses GlideRecord to query a custom table. What is the likely cause and how do you confirm it?

Your organization's IT change freeze is implemented by a Flow Designer flow that blocks non-emergency change approvals from December 15 to January 5 each year. A senior developer suggests storing the freeze dates in a system property and using a Flow Designer Decision element to check them. A junior suggests hardcoding the dates in a Script step. Evaluate both approaches and propose the best implementation.

A healthcare client wants to enforce that all P1 Incidents have a root-cause populated before the record can be moved to 'Resolved' state. Currently, agents can resolve P1 incidents with an empty root-cause field. Implement this constraint at the platform level, not via training or process documentation.

A new DevOps team at a manufacturing company wants to populate their Kubernetes cluster topology into the ServiceNow CMDB using a custom CI class hierarchy. They ask you whether to extend the base Configuration Item class or create an entirely separate table. What factors guide your decision?

Your scoped application's Scripted REST API endpoint is being called 1,200 times per minute by a third-party integration. Response times are acceptable but the platform team flags that your app is consuming 18% of total platform transaction threads. How do you reduce thread consumption without breaking the integration?

Your team is adopting ServiceNow's Source Control integration with GitHub. A developer pushed a branch but the CI pipeline fails saying the Update Set XML conflicts with a configuration change already in the main branch. The developer insists they branched from main this morning. How does this conflict arise and how is it resolved?

A ServiceNow background script you are writing needs to query all active Change Requests opened in the last 30 days and for each one, update a custom urgency score field based on a calculation involving three related tables. The script times out after processing about 800 records. How do you restructure it to complete reliably?

A large retail chain wants to sync product inventory data from an on-premise ERP system behind their corporate firewall into ServiceNow every 15 minutes, with no inbound firewall ports open on the ERP side. The CISO forbids outbound REST calls from ServiceNow to the corporate network. Design the integration architecture.

Your company's Service Portal-based service catalog has 400+ catalog items across 12 subcategories. Users report finding what they need takes an average of 4 minutes on the portal. The search bar is available. You cannot reduce the number of catalog items. How do you improve discoverability without a redesign project?

You need to write a Business Rule that fires after a Catalog Task is created and automatically creates three sub-tasks in a custom table, each linked to the parent task and assigned to different groups based on the task category. What is the correct Business Rule timing and what GlideRecord pattern do you use?

A manager reports that when they try to view a colleague's user profile from the People Finder module, they see only the name and department—all contact fields are blank. The same fields display fine when an admin views the record. The manager is not in admin role. What is happening and how do you fix it?

A VP of Infrastructure at a financial services firm wants a real-time executive dashboard showing MTTR, MTBF, and SLA breach rate across 5 infrastructure domains, auto-refreshing every 5 minutes without requiring a manual page reload. The current reporting setup uses static scheduled reports emailed daily. Describe the full implementation.

A global logistics company deploys your scoped application across 4 sub-production instances and 1 production instance. A Business Rule in your app that worked perfectly in sub-prod is causing a 600ms latency spike in production on the Shipment table, which receives 3,000 inserts per hour. The rule logic has not changed. What differs between sub-prod and production and how do you diagnose?

A Workflow on the HR Case table is stuck in 'Waiting' state for 200 records. The Workflow version was updated yesterday by another developer. Approvers say they never received the approval email. What are the likely causes and how do you recover the stuck cases?

You need to call an external ITSM system's REST API that requires OAuth 2.0 Client Credentials grant type for authentication. The access token expires every 3600 seconds. How do you implement this in ServiceNow so that token expiry is handled automatically without developers having to manage token refresh manually?

A financial firm's procurement team wants catalog item orders to trigger different approval chains based on the total order value—orders under ₹50,000 need only manager approval, ₹50,000-₹500,000 need department head, over ₹500,000 need CFO plus legal review. The values are computed from variables. Design the approval workflow architecture.

You're debugging a GlideAjax call from a client script that intermittently returns null on production but always works in dev. The server-side Scripted Include and the client script are identical in both environments. What environmental differences might cause this and how do you isolate the issue?

After a major data import using Import Sets, an admin notices that the target table's sys_updated_on timestamps are all set to the import date rather than the original record timestamps from the source system. The source data included an 'original_updated' field. How should the import have been handled to preserve original timestamps?

Your ServiceNow instance has grown from 500 to 5,000 users over 18 months. The instance now has 94,000 active scheduled jobs, many of which appear to be Workflow Timer activities for records created by a workflow that was decommissioned 8 months ago. How do you safely clean this up without impacting live workflows?

A compliance team needs certain sensitive fields on the Risk Assessment form to be read-only once the record moves to 'Approved' state, but the record owner should be able to request an edit unlock that triggers a dedicated approval workflow. Implement this without giving the record owner admin-level access.

You discover that a nightly Scheduled Script creating 20,000 records in a custom operational table is leaving 'ghost' entries: records where the Business Rule on 'after insert' fired and created a related record, but the parent insert was actually rolled back due to a constraint violation. The related records persist with no valid parent. How do you prevent this?

A media company using ServiceNow ITSM asks you to help them implement true bi-directional sync with Jira for developer incidents, so that status updates in Jira reflect in ServiceNow and vice versa, without causing infinite update loops. Design the integration.

Service Mapping is failing to create application service maps for 40% of your organization's business services. The discovery agents can reach the servers. The application owners have populated the entry point CIs. But the maps remain partial. What are the common root causes and your investigation methodology?

A developer accidentally activated a Scoped Application update that overwrote a customized Business Rule in production, reverting it to the vendor's out-of-box version. The customization is gone and no Update Set captured it. How do you recover the lost customization?

A Flow Designer flow you built to auto-assign Incidents to on-call engineers based on a schedule is assigning correctly during business hours but falling back to the default group after 6 PM. The on-call schedule in the On-Call Scheduling plugin is correctly configured for 24/7 coverage. What do you check?

Your company acquires another company and needs to onboard 800 new users into ServiceNow with access limited strictly to their own company's data in a multi-tenant ITSM setup. Both companies use the same ServiceNow instance. You cannot use a separate instance. Design the data isolation architecture.

A service desk manager wants a report that shows the average resolution time for Incidents grouped by Assignment Group, but only for groups that resolved more than 50 incidents in the selected period. The built-in Report Builder 'Having' clause does not appear to be available. How do you implement this?

You are tasked with building a utility Scripted Include that acts as an in-memory rate limiter for outbound REST calls from ServiceNow to a partner API that allows only 100 requests per minute per IP. Multiple Flow Designer flows and Business Rules call this API concurrently. Design the rate limiter so it works under concurrent load.

Your ServiceNow instance's memory utilization is consistently above 85% and the platform team notices frequent JVM garbage collections pausing request threads. The instance handles 2,000 active users and has not had a Node configuration change in 2 years. What are the likely causes and remediation steps?

You are implementing a 'Software License Request' catalog item where the available software list must be dynamically populated from an external Software Asset Management system via REST, refreshed hourly. The variable must show as a dropdown to users. How do you implement this in ServiceNow?

A Change Management workflow sends approval emails to 8 approvers across 3 groups sequentially. The business now wants approvals to be parallel within each group, with the overall workflow not advancing until all three groups have approved. How do you restructure this in the existing workflow without rebuilding it from scratch?

A manufacturing firm's IoT platform sends 50,000 sensor alerts per hour as individual POST requests to ServiceNow's Inbound REST API. This is overloading the import set transform queue. Design a scalable ingestion architecture that handles the volume without additional ServiceNow nodes.

You need to write a GlideRecord query that finds all Incidents opened by VIP users (marked in a custom field on sys_user) in the last 7 days that are not yet resolved, and updates their priority to 1 if it is currently 3 or lower. Write the logic and explain any performance concerns.

You are publishing a Scoped Application to the ServiceNow Store for use by multiple customer instances. During certification review, the reviewer flags that your app uses gs.getProperty() without a scope prefix, which could conflict with other apps. How do you fix this and what other global-scope issues should you audit?

A business analyst manually changed a Notification template in production to fix a typo in an email. A week later your team promotes an Update Set that includes the same Notification template with a more significant content change. The promotion overrides the BA's typo fix. How do you prevent this class of problem systematically?

A client-side catalog variable onChange script needs to call a server-side Script Include to check if a requested software license is available. The check must happen before the user can proceed to the next variable section. How do you implement this with proper UX feedback?

Your company's HR offboarding flow needs to run 18 distinct sub-processes in parallel—revoke AD access, disable VPN, remove SaaS app access, notify finance—and then wait for ALL of them to complete before sending the manager a confirmation email. Some sub-processes call external APIs that take up to 10 minutes. Design the flow architecture.

An e-commerce company's SLA breach rate for P2 Incidents spikes to 65% every Monday morning between 9-11 AM. Their SLAs are configured with a 24x7 schedule. The actual incident volume on Monday morning is not significantly higher than other periods. What do you investigate?

You need a UI Action button labeled 'Escalate to P1' on the Incident form that is only visible to users in the 'Incident Manager' role, disabled if the current incident is already P1, and requires a confirmation dialog before executing. Implement the full UI Action.

Your organization's network team uses a third-party IPAM system as the authoritative source for IP address allocations. Currently Discovery assigns IPs to CI records but sometimes conflicts with IPAM. How do you configure the CMDB's IRE to treat IPAM as authoritative for IP address fields while keeping Discovery authoritative for hardware attributes?

Users report that after submitting a Catalog Request, they receive a success confirmation but never receive the order confirmation email. The email notification is configured and works for other catalog items. How do you systematically diagnose why this specific catalog item's confirmation email is not sending?

Your team is building a custom approval routing engine as a Scripted Include that determines approvers dynamically based on a complex approval matrix stored in a custom table. The engine is called from multiple Business Rules and Flow Designer actions across 6 different tables. Describe the design principles you would apply to make this engine robust, maintainable, and testable in ServiceNow.

A large insurance company's Incident table has 12 million records. A new requirement asks you to add a Business Rule that counts the number of open incidents per assignment group and stores the count in a custom field on the Group record for dashboard display. The count must be accurate within 1 minute. How do you implement this without impacting Incident form save performance?

A logistics company's incident form takes 12 seconds to load because a client script is fetching 4,000 configuration item records synchronously on page load. The help desk is complaining. How do you diagnose and fix this without breaking the dependent field population logic?

Your team built a Flow Designer flow to auto-provision Azure AD accounts when a new employee HR case is opened. In production, the flow runs successfully but the Azure AD account creation step silently fails for contractors with a specific company code. How do you debug this?

A global bank is seeing a 35% SLA breach rate on P2 incidents. The process owner claims SLA timers are pausing correctly during business hours. Your investigation shows SLA pause conditions are working, but breaches are still high. What systemic issues do you look for and how do you fix them?

A financial services firm reports that a nightly batch job updating 80,000 change request records is causing database lock timeouts and degrading the instance for 4 hours. The batch runs a server-side script with a GlideRecord loop. How do you redesign this?

A service desk manager reports that mandatory field indicators are not appearing on the incident form for agents in the 'Global Support' group, but they work fine for other groups. The UI Policy is active and has no conditions. What do you check?

A healthcare organization is integrating ServiceNow with a legacy HL7 FHIR endpoint that only accepts mutual TLS (mTLS). The standard REST Message configuration fails certificate handshake. Walk through how you configure mTLS in ServiceNow and validate it end to end.

Employees are reporting that a 'New Laptop Request' catalog item shows hardware models that are out of stock or discontinued. Procurement says the reference table is updated nightly, but the catalog item still shows stale options. Why does this happen and how do you fix it?

A telecom company's CMDB health score is 41%. Discovery is running on 3,000 devices and finding CIs, but the CMDB shows 12,000 stale CI records from a previous import. Service Mapping relationships are broken. How do you approach a CMDB remediation project of this scale?

Your scoped application causes a 22-second page load on a service portal widget during peak hours. The widget queries three tables with complex GlideRecord filters. Performance Analytics shows database query time is 18 of those 22 seconds. How do you optimize?

You are promoting an update set from UAT to production that contains a new Business Rule. The preview of the update set in production shows a collision warning for the same Business Rule, which was hot-fixed directly in production last week. How do you handle this?

A VP of IT asks why the 'Mean Time to Resolve' metric on the executive dashboard shows 4.2 hours, but the incident team's own list report shows 6.8 hours for the same period. Both are on the same table. What causes this discrepancy and how do you resolve it?

A university's student onboarding workflow has been running in production for 3 years and now has 200 parallel execution branches causing it to stall when more than 50 students onboard simultaneously. The workflow engine logs show context deadlocks. How do you redesign?

After a platform upgrade from Tokyo to Utah, users report that notification emails are being delivered 45-60 minutes late. The email outbound queue shows 2,000 pending messages. The SMTP relay is functional. What do you investigate?

A retail company's order management integration relies on a Script Include that makes synchronous HTTP calls inside a Business Rule. During Black Friday, the instance becomes unresponsive for 30 seconds at a time. No obvious errors appear in the log. What is happening and how do you fix it?

You need to build a compliance workflow where a regulatory change record must be approved by exactly 3 of 5 designated approvers within 48 hours, with escalation to a VP if quorum is not reached. Flow Designer is the mandated tool. How do you design this?

A software company wants to implement Problem Management but their incident team keeps closing incidents without linking them to problems, making root cause analysis impossible. Process is in place but adoption is zero. How do you enforce this technically without creating user friction?

A Business Rule that runs on every insert to the incident table is executing 8 seconds after record creation instead of immediately. The rule is set to 'Before' and 'Insert'. Users see a delay before the record appears fully formed. What is the most likely cause?

A legal department wants a form field 'Settlement Amount' to be visible only to users with the 'legal_counsel' role, but also only when the case type is 'Litigation'. Security says using only a UI Policy is insufficient because the field can still be read via REST. How do you implement this correctly?

You built a REST outbound integration to a vendor's API using IntegrationHub. It works in development but consistently returns 401 Unauthorized in production. Credentials are confirmed correct. What do you systematically check?

A manufacturing company wants to implement a Service Catalog with 300+ catalog items across 12 departments, each with department-specific approval chains and dynamic pricing based on employee grade. How do you architect this without creating 300 separate approval workflows?

A newly hired junior administrator accidentally granted the 'admin' role to a service account used by an external HR system integration. The account has been active for 6 hours. What is your immediate response and what do you audit?

Your organization's Change Management process requires that a CI must exist in the CMDB before a change request can be created for it. Engineers are bypassing this by typing the CI name as free text in the description. How do you technically enforce CI-first change creation?

You are the lead developer on a scoped application that must be installed in 50 customer instances via the ServiceNow Store. In UAT, the app installs cleanly, but in 3 customer instances it fails during post-install scripts with a 'Table not found' error on a table that exists in your app scope. What causes this and how do you fix?

Your team uses a multi-instance pipeline: dev → test → UAT → production. A change that took 3 update sets to build in dev is ready for test, but the test instance is 2 weeks behind dev due to unrelated work. Promoting the 3 update sets in the wrong order breaks test. How do you manage this safely?

A retail bank's IT leadership wants a real-time dashboard showing open P1/P2 incidents across all 8 business units, with drill-down to individual incidents and a 15-minute auto-refresh. Performance Analytics is not licensed. How do you build this with native ServiceNow reporting?

A change advisory board (CAB) workflow is stuck in a 'Wait for Approval' activity for a record that shows all approvals completed in the approvals table. The workflow context state is 'Executing' but has not progressed in 18 hours. How do you unstick it?

You take over administration of a production instance that has not had an admin for 8 months. The upgrade from San Diego to Vancouver is overdue. What is your pre-upgrade checklist and what are the highest-risk areas to assess first?

An agent reports that after selecting a CI on an incident form, the related fields (department, location, support group) auto-populate correctly the first time but fail to update when the CI is changed again in the same session. What is wrong with the client script?

A Flow Designer flow that sends weekly summary emails to managers is running successfully but managers report receiving duplicate emails — sometimes 2 or 3 copies. The flow has no duplicates in execution history. Where do you look?

A media company is implementing a tiered support model where L1, L2, and L3 handle incidents differently, with SLA timers that should pause during inter-tier handoffs and resume when a tier picks it up. Their current SLA setup doesn't account for handoff pauses correctly. How do you redesign the SLA configuration?

An energy company's After Business Rule that updates parent CI relationships when a child CI is modified is causing infinite recursion — the Business Rule triggers itself through the relationship update. The instance logs show 'max call stack exceeded' errors. How do you break the recursion?

A UI Action button 'Escalate to Manager' appears on the incident form but should only be visible to the incident's assigned agent when the incident is in 'In Progress' state and the SLA has breached. How do you implement this with a UI Action?

You are building a bidirectional integration between ServiceNow and Salesforce where a closed Salesforce case should update the related ServiceNow incident to Resolved, and a resolved ServiceNow incident should push a status update back to Salesforce. How do you prevent an update loop?

A catalog item for 'VPN Access Request' always routes for approval to the same group regardless of the requester's department. The catalog item workflow has a dynamic approval that should resolve to the requester's department head. What do you investigate?

A large insurance company wants to implement row-level security on a claims table so that claims adjusters can only see claims assigned to their region, but regional managers can see all claims in their region and the claims manager can see everything. How do you implement this without creating separate tables?

A cloud-first company runs 800 AWS EC2 instances that Discovery cannot reach because they are in private subnets. Service Mapping shows 0 application services mapped. How do you extend Discovery and Service Mapping to cover these instances?

You have built a scoped app with a custom table that stores 50,000 audit log records. Users report the table view takes 40 seconds to load. The table has no indexes. Describe your optimization approach.

A developer committed a Business Rule to an update set but forgot to include the associated Script Include it calls. The update set was promoted to test and the Business Rule is now throwing 'Class not found' errors. What is the fastest safe remediation?

The head of operations wants a daily email report showing every incident that breached SLA yesterday, grouped by assignment group and including the responsible agent's name. The native report email sends CSV but the head wants a formatted HTML table. How do you deliver this?

Your organization has 15 similar onboarding workflows that were each manually built for different departments, resulting in 15 separate workflow definitions with nearly identical logic but small variations. A new compliance requirement affects all 15. How do you consolidate and handle the variation?

Users across three geographic locations report that ServiceNow is 3-5 seconds slower than usual starting Monday morning. No changes were deployed over the weekend. Instance health shows CPU and memory at normal levels. What do you investigate?

A bank's compliance team needs all access to a sensitive financial table logged — who accessed it, what query they ran, and what data was returned. Standard ServiceNow audit logs changes but does not log reads. How do you implement read-access logging without degrading performance?

A telecom company wants to use Flow Designer to orchestrate a 5-step network provisioning process where each step calls a different vendor API. If any step fails, the entire sequence must roll back previous steps in reverse order. How do you implement rollback in Flow Designer?

A government agency using ServiceNow ITSM has a requirement that every change request must be approved by exactly 2 out of 3 specific approvers, with a full audit trail. One approver is on an extended leave and their backup must automatically substitute. How do you configure this?

You need to write a GlideRecord query to find all incidents opened in the last 7 days that have no associated change request, and for each, send a notification to the assigned agent. Write the approach and highlight the performance considerations.

A legal tech company requires that when an attorney marks a matter record as 'Privileged', seven specific fields are immediately hidden and locked from all non-attorney roles, even if a supervisor is viewing the record. The change should also prevent field visibility via the REST API. What is your complete implementation?

An inbound REST webhook from a monitoring tool is creating duplicate incidents in ServiceNow when the monitoring tool retries failed HTTP requests. The same alert fires 2-3 incidents instead of 1. How do you implement idempotency?

A financial company wants to implement a Service Catalog variable that dynamically shows available meeting room slots based on the selected date and building, fetching availability from an external Exchange calendar API in real time. How do you implement this without blocking the form?

After implementing a new ACL for a custom table, you notice that sys_admin users are bypassing it and can still see all records. This is expected for admins but a specific service account with sys_admin is used by an integration that should NOT see all records. How do you restrict a sys_admin service account?

A software company's Discovery is finding application servers correctly but the 'Runs on' relationship to the underlying virtual machines is not being created. Service Mapping shows no relationship between app services and VMs. What is the most likely gap and how do you fix it?

You are building a scoped application that generates PDF reports from ServiceNow data. In dev, PDF generation takes 2 seconds. In a customer production instance with the same data volume, it takes 45 seconds, causing HTTP timeouts. How do you diagnose and redesign?

Your organization is moving from manual update set management to ServiceNow's Source Control Integration with GitHub. You have 2 years of update set history and 5 active developers. How do you plan and execute the migration without losing current work in flight?

An e-commerce company wants to measure the business impact of IT incidents by correlating ServiceNow P1 incidents with revenue loss data from a Salesforce revenue table. Both systems are live. How do you build this cross-system metric in ServiceNow?

An approval workflow for purchase orders over $50,000 is sending approval requests to a distribution group email instead of specific approvers' ServiceNow accounts, so approvers cannot approve directly in ServiceNow. Approvals are being done via email reply. How do you fix this?

Your ServiceNow instance is approaching its licensed user count limit. The HR system shows 2,400 employees but only 1,800 should have ServiceNow access. The license audit shows 2,350 active user records. How do you audit, clean up, and prevent recurrence?

A client script is supposed to pre-fill the 'estimated hours' field based on the selected category when creating a new service request. It works on new records but does nothing when a record is loaded in edit mode for an existing record. What is the likely cause?

A Flow Designer subflow is shared across 12 parent flows but needs to behave slightly differently for 2 of those parent flows (skip a notification step). How do you handle this without duplicating the subflow or adding brittle hardcoded parent-flow detection?

A healthcare client's nightly batch job runs a GlideRecord query over 400,000 Incident records but hits a query timeout at 4 AM. The script uses a while loop and calls record.update() inside. Walk through your refactoring strategy to eliminate the timeout without breaking audit trail requirements.

You are building a catalog item for a telecom company. A client script must auto-populate the 'Manager' field when an employee selects their department, but the script works in a browser test yet fails in the Service Portal. What is the most likely cause and how do you fix it?

An insurance company's Flow Designer flow triggers on Incident creation and calls three external REST steps in sequence. During a peak claims period, flows queue up and some complete out of order, causing duplicate emails to claimants. Describe your architectural redesign to eliminate race conditions while keeping the SLA under 2 minutes.

You need to build a Flow Designer flow that auto-provisions an AWS IAM user when an approved Service Catalog request closes. The IntegrationHub AWS spoke is not licensed. How do you accomplish this using only what is available on a standard ServiceNow instance?

A global retail bank runs 50,000 incidents per month. Their mean time to resolve (MTTR) has climbed from 4 hours to 9 hours over six months despite headcount staying flat. You have been asked to investigate using ServiceNow data alone. What is your systematic diagnostic approach?

A major incident (P1) bridge call is ongoing for a network outage affecting 3,000 users. The Major Incident Manager asks you, as the ServiceNow admin on the call, to relate all open incidents to the parent P1 and push a bulk update setting their state to 'Awaiting Problem'. How do you do this safely in under 5 minutes?

An e-commerce platform's async After Business Rule runs on Incident update and calculates SLA breach risk scores, but during a flash sale event it causes a 40-second UI lag when agents save incidents. How do you diagnose the performance bottleneck and restructure the logic?

You need to write a Business Rule that prevents Incident closure if there are open child tasks. Your first version works in testing but fires recursively and hits the maximum call stack error in production. What went wrong and how do you fix it?

A financial services firm wants a form field 'Regulatory Impact' to become mandatory and visible only when an Incident's category is set to 'Compliance'. This works perfectly on the classic form but is completely ignored on the mobile app. Why, and how do you ensure consistent behavior across all form surfaces?

You inherit a ServiceNow instance at a manufacturing company with 47 UI Policies on the Incident table, many conflicting. Agents report erratic form behavior — fields randomly become read-only or disappear. Describe your systematic approach to audit, rationalize, and stabilize the policy set.

A logistics company's ServiceNow instance integrates with a warehouse management system (WMS) via REST. During peak shipping season, 10,000 inbound webhook events per hour arrive and the import set processor falls behind by 2–3 hours. Describe how you redesign the integration pipeline to handle peak load.

You are building a Scripted REST API in ServiceNow that third-party HR software will call to create employee onboarding requests. The HR team says their system only supports Basic authentication. Your security team requires OAuth 2.0. How do you satisfy both requirements?

A pharmaceutical company migrated 120 catalog items from a legacy ITSM tool to ServiceNow over a weekend. Monday morning, 30 items are broken — catalog tasks are not being created, variables are missing, and some items land on wrong assignment groups. Describe your triage and remediation process.

A catalog item for laptop provisioning has a variable that asks 'Which budget code should be charged?' This field must be pre-populated with the requester's default cost center from HR data in ServiceNow, but the requester can override it. How do you implement this cleanly?

A healthcare SaaS company discovers that a group of contractors can view patient-related Incident fields they should not see, despite ACLs being configured correctly on the table. A security audit flags this as a P1. Walk through your investigation methodology to find and close the access gap.

You need to create a role that allows a tier-2 support team to read and write all Incident fields except 'Internal Notes' which must be read-only for them. How do you implement this using ACLs without breaking existing admin and tier-3 access?

A cloud-native fintech company's CMDB has 800,000 CI records, but CMDB Health score is 22%. Staleness is the top contributor — 60% of CIs have not been updated in over 90 days. The auto-discovery tool is running but CIs are not reconciling. Describe your end-to-end remediation plan.

A change manager at an energy company complains that the CI lookup on Change Requests always shows thousands of results, making it unusable. They want only CIs tagged as 'Production' and owned by the requester's business unit. How do you scope the CI reference field without modifying core tables?

Your company's ServiceNow instance starts degrading — page loads take 8–12 seconds and the system log shows 'slow query' warnings. A new scoped application was deployed to production 48 hours ago. How do you isolate whether the scoped app is the cause and mitigate it without rolling back?

You are developing a scoped application for a university's IT department. A colleague warns you that using gs.getProperty() in a loop inside a Script Include will cause performance problems. They suggest caching. How do you implement caching correctly in a scoped app context?

A critical patch must be deployed to production in 2 hours, but the standard change process requires a 5-day CAB approval. The update set contains 3 Business Rules, 1 UI Policy, and a Script Include. What is your process to deploy safely under an emergency change while minimizing risk?

You are trying to commit an update set in production but 14 of the 22 records show 'Skip' status in the preview because they already exist with a different sys_update_version. Three of these are critical Business Rules. How do you handle this safely?

A service desk manager at a retail company wants a real-time dashboard showing open P1 and P2 incidents by assignment group, automatically refreshing every 60 seconds on a wall-mounted TV. They also want a red/yellow/green color indicator per group based on SLA breach risk. How do you build this?

A CIO wants a monthly executive report showing IT service delivery trends — incident volume, MTTR, change success rate, and problem reduction — but the data in ServiceNow's reports does not match the data in the ITSM team's Excel sheets. Stakeholders have lost trust in the ServiceNow numbers. How do you restore data credibility?

A government agency uses a legacy Workflow (not Flow Designer) with 34 activities for a complex procurement approval process. The workflow randomly stalls at the 'Director Approval' activity — sometimes for hours, sometimes forever. Users cannot tell if their request is stuck. Describe your debugging approach.

You are asked to build a workflow for an onboarding process that runs in parallel for three teams — IT, HR, and Facilities. All three must complete before the 'Welcome Email' activity fires. Two of the three teams use catalog tasks, but Facilities uses a manual approval. How do you model this?

Your production ServiceNow instance is on a shared infrastructure and has been experiencing scheduled maintenance windows of 4 hours per quarter imposed by ServiceNow. A large bank client says their SLA requires 99.95% uptime, which this maintenance schedule violates. How do you address this contractually and technically?

A new HR director has asked for 15 of her team members to have access to view all HR-related Incidents but not modify them. They should not see any IT or Facilities incidents. What is the most maintainable way to configure this in ServiceNow without creating 15 individual user records with custom settings?

A media company's Script Include has grown to 3,200 lines over four years and is now causing memory issues — the Node.js heap shows the Script Include class being loaded and held in memory across transactions. What refactoring approach do you take, and how do you avoid breaking the 40+ callers?

A fintech company runs a nightly Flow Designer flow that reconciles 5,000 transaction records against an external payment gateway API. The flow completes successfully but takes 6 hours. The business wants it under 90 minutes. How do you architect the performance improvement?

Two IT teams at a manufacturing company are in a dispute: the Network team says their SLAs are being breached because incidents get assigned to them incorrectly and they spend time rerouting rather than resolving. What ServiceNow configuration changes would you recommend to fix the root cause?