QUESTION: 65

In a hiring case type, only HR Managers should have read access to a candidate's reference letter attachment.
Which two tasks are used to fulfill this requirement? (Choose Two)

Configure read access for a user according to a privilege
Restrict read access according to a When condition
Configure attribute-based access control on the Attachment Category
Define a separate Attachment Category for HR Managers

Answer(s): B,C

Explanation:

To ensure that only HR Managers have read access to a candidate's reference letter attachment, the tasks involved include restricting read access according to a When condition (B) and configuring attribute-based access control on the Attachment Category (C). The When condition can specify criteria that must be met for the attachment to be accessible, such as the user's role being an HR Manager. Attribute-based access control allows for the definition of access rules based on attributes of the data or user, providing a flexible and granular approach to securing sensitive attachments like reference letters.

Reference:

Pega Community documentation on attachment security and attribute-based access control.

Reveal Solution Next Question

QUESTION: 66

A requirement states that the Manager role cannot open a purchase request during the Audit stage. How do you configure the case stage to satisfy this requirement?

Apply an Access Deny record.
Apply an Access When record.
Apply a When record.
Apply a Privilege record.

Answer(s): B

Explanation:

To ensure that the Manager role cannot open a purchase request during the Audit stage, applying an Access When record (B) is the most suitable approach. An Access When record allows for the definition of conditional logic that determines whether a specific action, such as opening a case, is permitted based on the user's role and the current context of the case, such as its stage. By configuring this rule to evaluate to false for users with the Manager role during the Audit stage, you can effectively restrict their access to purchase requests in this stage, aligning with the requirement.

Reference:

Pega Community documentation on Access When rules and stage-based access control.

Reveal Solution Next Question

QUESTION: 67

DRAG DROP (Drag and Drop is not supported)
Drag each security solution on the left to its appropriate use case.

See Explanation section for answer.

Answer(s): A

Explanation:

To match the security solutions to their appropriate use cases:
"Access of Role to Object" is typically used to specify what actions a particular role can perform on instances of a class. It would be appropriate for a use case where "Dealers can modify evaluations" since this is an action that a specific role (dealers) would be allowed to perform. "Access Control Policy" allows defining rules that enforce property and case access restrictions based on the user role and other conditions. It would be appropriate for a use case where "Customers can only view their own credit report" since this would be a restriction based on user-specific data. "Access Deny" is used to explicitly deny access to a rule or data instance. It fits the use case where "Dealers cannot run reports" because it is a restriction that prevents a specific action (running reports) for a specific role (dealers).
"Access when" is a rule that defines conditions for whether certain access is allowed. It would be used in the scenario where "Dealers cannot modify orders in the Fulfillment stage" since this is a conditional restriction based on the stage of the process.

Based on these explanations, here is the matched list:
Access when -> Dealers cannot modify orders in the Fulfillment stage. Access Control Policy -> Customers can only view their own credit report.
Access Deny -> Dealers cannot run reports.
Access of Role to Object -> Dealers can modify evaluations.

Reveal Solution Next Question

QUESTION: 68

What two actions must you perform to create a class join in a report definition? (Choose Two)

Select the type of match for key values.
Add an association rule to match key values.
Create a prefix for the joined class.
Add a parameter for each property in the class you want to join.

Answer(s): A,C

Explanation:

To create a class join in a report definition, you must select the type of match for key values (A) and create a prefix for the joined class (C). Selecting the type of match, such as Inner Join or Left Outer Join, determines how records from the primary class and the joined class are combined based on matching key values. Creating a prefix for the joined class helps in distinguishing properties from the joined class from those of the primary class, preventing naming conflicts and clarifying the report definition. These actions are fundamental steps in setting up class joins in report definitions to retrieve and display data from multiple related classes.

Reference:

Pega Community documentation on report definition and class joins.

Reveal Solution Next Question

Free PEGACPSSA23V1 Exam Braindumps (page: 17)

QUESTION: 65

Explanation:

Reference:

QUESTION: 66

Explanation:

Reference:

QUESTION: 67

Explanation:

QUESTION: 68

Explanation:

Reference: