ACA Security & Governance 2

Question 1

In Appian, which environment tier is intended exclusively for final user acceptance testing before production release?

Accepted Answer

UAT Environment

Answer

The UAT environment is used for stakeholder validation and acceptance testing prior to promoting changes to production.

Question 2

What does the principle of least privilege mean in an Appian application context?

Accepted Answer

Users should only be granted the minimum access needed to perform their tasks

Answer

The principle of least privilege reduces security risk by ensuring users can only access what is strictly necessary for their role.

Question 3

Which Appian feature allows an application to enforce different UI views for different user roles?

Accepted Answer

User Filters on Interfaces

Answer

User filters and conditional display expressions on interfaces allow different UI content to be shown based on user group membership.

Question 4

What is the purpose of Appian's Connected System object in relation to security?

Accepted Answer

Centralizes and secures external system credentials used by integrations

Answer

Connected Systems store external API credentials and authentication configurations securely, preventing credential sprawl.

Question 5

How does Appian handle SAML-based Single Sign-On (SSO) authentication?

Accepted Answer

Appian acts as the Service Provider, delegating authentication to the Identity Provider

Answer

In SAML SSO, Appian is the Service Provider and delegates user authentication to the organization's Identity Provider (e.g., Okta, Azure AD).

ACA - Appian Analyst Certification Practice Test