CPSA CPSA Security and Access Control

Question 1

In Pega, which rule type defines the set of privileges available to an operator within an application?

Accepted Answer

Access Group

Answer

Role

Answer

Privilege

Answer

Access Control Policy

Question 2

What is the purpose of an Access Control Policy (ACP) in Pega?

Accepted Answer

To restrict or filter data visible to users based on conditions

Answer

To define the UI theme for a user role

Answer

To set the default work queue for operators

Answer

To configure SSO authentication methods

Question 3

Which Pega security feature allows you to hide, read-only, or disable specific fields based on the logged-in user's role?

Accepted Answer

Field-Level Security (Property-Level Access Control)

Answer

Data Transform

Answer

Declare Expression

Answer

Flow Action Guard

Question 4

In Pega, what does the 'Deny' rule type in an access role definition do when a privilege conflict occurs?

Accepted Answer

It overrides any granted privilege from other roles

Answer

It logs the conflict for audit

Answer

It prompts the user to request elevated access

Answer

It falls back to the parent access group

Question 5

Which operator record setting controls which Pega application and portal an operator sees upon login?

Accepted Answer

Access Group

Answer

Operator Ruleset

Answer

Security Policy

Answer

Work Queue

Question 6

What is the recommended Pega security practice for ensuring sensitive case data is not exposed through reporting?

Accepted Answer

Apply Access Control Policies to filter report results

Answer

Disable all reports for non-admin users

Answer

Store sensitive data in external databases only

Answer

Use encrypted flow actions