Which two requirements are supported by Attribute-based access control (ABAC)? (Choose Two)
Answer(s): A,D
Attribute-based access control (ABAC) supports various granular and dynamic access control requirements, such as allowing managers to reschedule but not delete appointments (A) and enabling bakers with a rating of 4 or better to add recipes to the database (D). ABAC uses attributes (such as user roles, data characteristics, and environmental conditions) to define access control policies, providing a flexible and context-aware mechanism to enforce security policies tailored to specific business requirements.
Pega Community documentation on ABAC and its use cases.
Consider the following requirement: An auditing policy explicitly requires that employees cannot see the contents of complaints made against themselves.Which security solution do you use to satisfy the requirement?
Answer(s): B
To satisfy the requirement that employees cannot see complaints made against themselves, an Access Control Policy (B) is the most suitable security solution. Access Control Policies in Pega allow for the definition of conditions under which access to certain data or cases is granted or denied. By configuring a policy that checks the relationship between the complaint and the employee (such as matching IDs), the system can dynamically restrict access to sensitive information, ensuring compliance with auditing policies.
Pega Community documentation on Access Control Policies.
How do you ensure that only a manager can run a specific flow action?
To ensure that only a manager can run a specific flow action, the best approach is to add a privilege to the flow action form (B) and then assign this privilege to a role that is exclusive to managers. This role is then associated with the access group designated for managers. Privileges provide a granular level of security that can be used to control access to specific actions within a Pega application, such as executing a flow action. By leveraging privileges, you can ensure that only users with the manager role, who possess the necessary privilege, can execute the flow action, thereby enforcing the desired level of access control.
Pega Community documentation on privileges, roles, and access groups.
A hospital uses a case type to manage the treatment of patients visiting the Emergency Room (ER). Cases are created when the patient checks in at the registration desk, and are resolved when the patient is released from the hospital. Stakeholders identify the following security requirements for the case type.Patients access cases on a read-only basis.Patients can only access their own cases.Doctors and nurses can modify cases throughout the case life cycle.Only doctors are allowed to write prescriptions.What two steps, when performed together, allow you to ensure that patients can read, but not edit, cases? (Choose Two)
Answer(s): B,D
To ensure that patients can read but not edit cases in the hospital's ER case management system, two steps need to be taken. First, configure an Access Role to Object rule with the open case action set to 1 (B), which grants read-only access. This ensures that patients can view their cases without the ability to make any modifications. Secondly, create an access group unique to patients (D). This access group would include the Access Role to Object rule configured in the previous step. By associating patients with this access group, it ensures that they are granted the appropriate level of access to their cases, fulfilling the security requirements specified by the stakeholders.
Pega Community documentation on Access of Role to Object and access groups.
A hospital uses a case type to manage the treatment of patients visiting the Emergency Room (ER). Cases are created when the patient checks in at the registration desk, and are resolved when the patient is released from the hospital. Stakeholders identify the following security requirements for the case type.Patients access cases on a read-only basis.Patients can only access their own cases.Doctors and nurses can modify cases throughout the case life cycle.Only doctors are allowed to write prescriptions.Which configuration allows doctors and nurses to modify cases while complying with all identified security requirements?
Answer(s): C
To allow both doctors and nurses to modify cases while complying with the identified security requirements, the best approach is to create a single access role for both doctors and nurses (C) and set the modify action to 5. This configuration grants both user groups the necessary permissions to modify cases throughout the case life cycle. By using a single access role with a high level of access for modifications, the application simplifies role management while ensuring that both doctors and nurses can perform their duties effectively, without compromising the security and integrity of patient cases.
Pega Community documentation on Access Role to Object and case management best practices.
Post your Comments and Discuss Pegasystems PEGACPSSA23V1 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the PEGACPSSA23V1 content, but please register or login to continue.