CTA CTA Security & User Management 2 — Questions and Answers
Question 1: What is the recommended way to integrate TestStand user authentication with an existing corporate Active Directory (AD) environment?
- Re-create all AD accounts in TestStand User Manager manually
- Configure TestStand Login Options to use Windows Authentication, delegating to AD (Correct answer)
- Export AD passwords to a CSV and import into TestStand
- Use a third-party LDAP proxy VI
Correct answer: Configure TestStand Login Options to use Windows Authentication, delegating to AD
Setting TestStand Login Options to use Windows Authentication allows it to delegate credential validation to AD, avoiding duplicate account management.
Question 2: Which TestStand feature allows a supervisor to temporarily grant elevated privileges to an operator for a single test run without changing the operator's permanent role?
- Role elevation via a supervisor PIN override (Correct answer)
- Privilege escalation through the Engine API
- Temporary login as supervisor during the run
- Step-level override flag in the sequence
Correct answer: Role elevation via a supervisor PIN override
A supervisor PIN override prompts for a secondary credential that temporarily elevates privileges for one action without permanently changing the operator's role.
Question 3: In TestStand, what does 'Electronic Signature' support provide in the context of 21 CFR Part 11 compliance?
- A bitmap signature image stored in the report
- A cryptographically linked user identity confirmation attached to a result or report (Correct answer)
- An SMTP-based notification to the QA manager
- A hash of the sequence file only
Correct answer: A cryptographically linked user identity confirmation attached to a result or report
Electronic Signature in TestStand attaches a cryptographically verified user identity confirmation to results or reports, satisfying 21 CFR Part 11 signature requirements.
Question 4: A CTA architect needs to ensure that only approved sequence file versions can run on production stations. Which approach best enforces this?
- Email the approved files to station operators
- Deploy via a controlled deployment package that overwrites local copies at startup (Correct answer)
- Lock the station PC with a BIOS password
- Rely on operator discipline
Correct answer: Deploy via a controlled deployment package that overwrites local copies at startup
A controlled deployment package distributed from a central repository and applied at startup ensures production stations always run approved, version-controlled sequences.
Question 5: Which TestStand user privilege setting prevents an operator from viewing the source code of a step's underlying module?
- Deny 'Open Module' privilege in Operator settings (Correct answer)
- Encrypt the LabVIEW VIs with a password
- Remove the code module from the station PC
- Set step visibility to hidden
Correct answer: Deny 'Open Module' privilege in Operator settings
Denying the 'Open Module' privilege prevents operators from launching the underlying VI or DLL editor from within the TestStand sequence editor.
Question 6: What is the role of 'User Groups' in TestStand User Manager, and how do they simplify administration of a large station fleet?
- Groups define hardware resources shared between users
- Groups bundle privilege sets that can be assigned to many users at once, simplifying mass permission changes (Correct answer)
- Groups set report output directories per department
- Groups control network share access for sequence files
Correct answer: Groups bundle privilege sets that can be assigned to many users at once, simplifying mass permission changes
User Groups let administrators define a privilege set once and assign it to many users, so changing the group's privileges instantly updates all group members.
CTA CTA Security & User Management 2
What is the recommended way to integrate TestStand user authentication with an existing corporate Active Directory (AD) environment?