QUESTION: 57

Consider the following requirement: An auditing policy explicitly requires that employees cannot see the contents of complaints made against themselves.
Which security solution do you use to satisfy the requirement?

Access of Role to Object
Access Control Policy
Access When
Access Deny

Answer(s): B

Explanation:

To satisfy the requirement that employees cannot see complaints made against themselves, an Access Control Policy (B) is the most suitable security solution. Access Control Policies in Pega allow for the definition of conditions under which access to certain data or cases is granted or denied. By configuring a policy that checks the relationship between the complaint and the employee (such as matching IDs), the system can dynamically restrict access to sensitive information, ensuring compliance with auditing policies.

Reference:

Pega Community documentation on Access Control Policies.

Reveal Solution Next Question

QUESTION: 58

How do you ensure that only a manager can run a specific flow action?

Add a pre-processing activity to the flow action form to determine whether the user is a manager.
Add a privilege to the flow action form, then add the privilege to a role assigned to the access group for managers.
Add an Access When condition to the flow action to determine whether the user is a manager.
Add a validate rule to the flow action form to determine whether the user is a manager.

Answer(s): B

Explanation:

To ensure that only a manager can run a specific flow action, the best approach is to add a privilege to the flow action form (B) and then assign this privilege to a role that is exclusive to managers. This role is then associated with the access group designated for managers. Privileges provide a granular level of security that can be used to control access to specific actions within a Pega application, such as executing a flow action. By leveraging privileges, you can ensure that only users with the manager role, who possess the necessary privilege, can execute the flow action, thereby enforcing the desired level of access control.

Reference:

Pega Community documentation on privileges, roles, and access groups.

Reveal Solution Next Question

QUESTION: 59

A hospital uses a case type to manage the treatment of patients visiting the Emergency Room (ER). Cases are created when the patient checks in at the registration desk, and are resolved when the patient is released from the hospital. Stakeholders identify the following security requirements for the case type.
Patients access cases on a read-only basis.
Patients can only access their own cases.
Doctors and nurses can modify cases throughout the case life cycle.
Only doctors are allowed to write prescriptions.
What two steps, when performed together, allow you to ensure that patients can read, but not edit, cases? (Choose Two)

Configure an Access of Role to Object rule with the open case action set to 5.
Configure an Access Role to Object rule with the open case action set to 1.
Configure an access control policy condition to test whether the user is a patient.
Create an access group unique to patients.

Answer(s): B,D

Explanation:

To ensure that patients can read but not edit cases in the hospital's ER case management system, two steps need to be taken. First, configure an Access Role to Object rule with the open case action set to 1 (B), which grants read-only access. This ensures that patients can view their cases without the ability to make any modifications. Secondly, create an access group unique to patients (D). This access group would include the Access Role to Object rule configured in the previous step. By associating patients with this access group, it ensures that they are granted the appropriate level of access to their cases, fulfilling the security requirements specified by the stakeholders.

Reference:

Pega Community documentation on Access of Role to Object and access groups.

Reveal Solution Next Question

QUESTION: 60

A hospital uses a case type to manage the treatment of patients visiting the Emergency Room (ER). Cases are created when the patient checks in at the registration desk, and are resolved when the patient is released from the hospital. Stakeholders identify the following security requirements for the case type.
Patients access cases on a read-only basis.
Patients can only access their own cases.

Doctors and nurses can modify cases throughout the case life cycle.
Only doctors are allowed to write prescriptions.
Which configuration allows doctors and nurses to modify cases while complying with all identified security requirements?

Create two access roles, one for doctors and one for nurses, and set the modify action for each to 5.
Create two access roles, one for doctors and one for nurses, and set the modify action for each to 1.
Create a single access role for both doctors and nurses, and set the modify action to 5.
Create a single access role for both doctors and nurses, and set the modify action to 1.

Answer(s): C

Explanation:

To allow both doctors and nurses to modify cases while complying with the identified security requirements, the best approach is to create a single access role for both doctors and nurses (C) and set the modify action to 5. This configuration grants both user groups the necessary permissions to modify cases throughout the case life cycle. By using a single access role with a high level of access for modifications, the application simplifies role management while ensuring that both doctors and nurses can perform their duties effectively, without compromising the security and integrity of patient cases.

Reference:

Pega Community documentation on Access Role to Object and case management best practices.

Reveal Solution Next Question

Free PEGACPSSA23V1 Exam Braindumps (page: 15)

QUESTION: 57

Explanation:

Reference:

QUESTION: 58

Explanation:

Reference:

QUESTION: 59

Explanation:

Reference:

QUESTION: 60

Explanation:

Reference: