CPSA CPSA Security and Access Control 2

Question 1

In Pega, which authentication mechanism allows users to log in using credentials from an external identity provider without re-entering passwords?

Accepted Answer

OAuth 2.0 / SAML-based SSO

Answer

Pega supports SAML and OAuth 2.0 for Single Sign-On, allowing users to authenticate via an external identity provider.

Question 2

What is the function of the 'Privilege' rule in Pega's security model?

Accepted Answer

It defines a specific allowed action that can be granted or denied to a role

Answer

Privileges are named permissions (e.g., 'CanApprove', 'CanDelete') that are granted or denied within access roles to control what actions a user may perform.

Question 3

Which Pega feature should be used to automatically lock an operator account after a configurable number of failed login attempts?

Accepted Answer

Security Policy rule

Answer

The Security Policy rule in Pega defines lockout thresholds, password complexity requirements, and session timeout settings for operators.

Question 4

In Pega, 'personas' defined during the application design phase map to which runtime security construct?

Accepted Answer

Access Groups

Answer

Personas identified in the App Studio design phase are implemented as Access Groups, defining what each type of user can access and do.

Question 5

What is the purpose of the 'Restrict screen to' feature available on Pega sections and forms?

Accepted Answer

To display the section only to operators with a specified privilege or access group

Answer

The 'Restrict screen to' setting on a Pega section or harness hides the entire UI component from operators who do not have the specified privilege.

(CPSA) Certified Pega System Architect Practice Test

(CPSA) Certified Pega System Architect Practice Test

CPSA CPSA Security and Access Control 2