CPSA CPSA Security and Access Control

Question 1

In Pega, which rule type defines the set of privileges available to an operator within an application?

Accepted Answer

Access Group

Answer

Access Groups in Pega bundle roles and application access together, determining what privileges an operator has within an application.

Question 2

What is the purpose of an Access Control Policy (ACP) in Pega?

Accepted Answer

To restrict or filter data visible to users based on conditions

Answer

Access Control Policies enforce row-level and field-level security by filtering data based on conditions evaluated at runtime.

Question 3

Which Pega security feature allows you to hide, read-only, or disable specific fields based on the logged-in user's role?

Accepted Answer

Field-Level Security (Property-Level Access Control)

Answer

Property-level access control in Pega allows architects to restrict visibility and editability of individual properties based on the user's access group or role.

Question 4

In Pega, what does the 'Deny' rule type in an access role definition do when a privilege conflict occurs?

Accepted Answer

It overrides any granted privilege from other roles

Answer

A Deny entry in an access role always overrides a Grant entry, ensuring explicit denials take precedence in Pega's security model.

Question 5

Which operator record setting controls which Pega application and portal an operator sees upon login?

Accepted Answer

Access Group

Answer

The Access Group assigned to an operator determines the application, portal, and available rulesets the operator can access upon login.

(CPSA) Certified Pega System Architect Practice Test

(CPSA) Certified Pega System Architect Practice Test

CPSA CPSA Security and Access Control