Practice Test Geeks(CAD) Certified Application Developer Practice Test
← All CAD Flashcard Decks

Quality Assurance & Compliance Flashcards

7 cards from real CAD practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Quality Assurance & Compliance flashcards as text

  1. Which ServiceNow feature allows developers to capture a set of configuration changes and migrate them between instances while maintaining traceability?

    Answer: Update Sets

    Update Sets record configuration changes made on one instance and allow those changes to be exported and imported into another instance.

  2. What does the term 'shift-left testing' mean in a software quality context?

    Answer: Moving testing activities earlier in the development lifecycle

    Shift-left testing advocates catching defects earlier by integrating testing activities into design and development phases rather than waiting until the end.

  3. In compliance-driven development, what is the purpose of an audit trail?

    Answer: To provide a chronological record of system activities for accountability and investigation

    Audit trails log who did what and when, enabling traceability, compliance verification, and forensic investigation.

  4. A developer notices that their ServiceNow script includes a hard-coded administrator password. Which compliance concern does this violate?

    Answer: Credential management and secure coding standards

    Hard-coding credentials violates secure coding standards and credential management policies, exposing sensitive data in version-controlled code.

  5. Which testing type validates that separately developed modules work correctly when combined?

    Answer: Integration testing

    Integration testing verifies that multiple modules or services interact correctly when combined, catching interface mismatches and data-flow errors.

  6. What does OWASP primarily provide to help developers build more secure applications?

    Answer: A list of the most critical web application security risks and mitigation guidance

    OWASP (Open Web Application Security Project) publishes the OWASP Top 10 and other resources that guide developers in identifying and mitigating common security vulnerabilities.

  7. In a CI/CD pipeline, quality gates are used to:

    Answer: Automatically block promotion of code that fails defined quality criteria

    Quality gates enforce thresholds (e.g., test coverage, zero critical bugs) that must be met before code advances to the next pipeline stage.