CPSA CPSA Security and Access Control 1 — Questions and Answers
Question 1: In Pega, which rule type defines the set of privileges available to an operator within an application?
- Access Group (Correct answer)
- Role
- Privilege
- Access Control Policy
Correct answer: Access Group
Access Groups in Pega bundle roles and application access together, determining what privileges an operator has within an application.
Question 2: What is the purpose of an Access Control Policy (ACP) in Pega?
- To define the UI theme for a user role
- To restrict or filter data visible to users based on conditions (Correct answer)
- To set the default work queue for operators
- To configure SSO authentication methods
Correct answer: To restrict or filter data visible to users based on conditions
Access Control Policies enforce row-level and field-level security by filtering data based on conditions evaluated at runtime.
Question 3: Which Pega security feature allows you to hide, read-only, or disable specific fields based on the logged-in user's role?
- Data Transform
- Field-Level Security (Property-Level Access Control) (Correct answer)
- Declare Expression
- Flow Action Guard
Correct answer: Field-Level Security (Property-Level Access Control)
Property-level access control in Pega allows architects to restrict visibility and editability of individual properties based on the user's access group or role.
Question 4: In Pega, what does the 'Deny' rule type in an access role definition do when a privilege conflict occurs?
- It logs the conflict for audit
- It overrides any granted privilege from other roles (Correct answer)
- It prompts the user to request elevated access
- It falls back to the parent access group
Correct answer: It overrides any granted privilege from other roles
A Deny entry in an access role always overrides a Grant entry, ensuring explicit denials take precedence in Pega's security model.
Question 5: Which operator record setting controls which Pega application and portal an operator sees upon login?
- Access Group (Correct answer)
- Operator Ruleset
- Security Policy
- Work Queue
Correct answer: Access Group
The Access Group assigned to an operator determines the application, portal, and available rulesets the operator can access upon login.
Question 6: What is the recommended Pega security practice for ensuring sensitive case data is not exposed through reporting?
- Disable all reports for non-admin users
- Apply Access Control Policies to filter report results (Correct answer)
- Store sensitive data in external databases only
- Use encrypted flow actions
Correct answer: Apply Access Control Policies to filter report results
Access Control Policies can be applied to reports so that sensitive rows are automatically excluded based on the requesting user's context.
CPSA CPSA Security and Access Control 1
In Pega, which rule type defines the set of privileges available to an operator within an application?