Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Alfresco APSCA Exam - Topic 2 Question 40 Discussion

Posted by Rolande on Mar 24, 2023 at 08:25 AM

For security reasons you do not want to allow any processes to be designed with script tasks as it could be used maliciously, is there a way to prevent this?

Suggested Answer: C

Get Premium APSCA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
36 comments · newest first
NA
Nadine 12 months ago
C seems a bit too technical for most users.
VI
Viva 12 months ago
D is interesting, didn't know LDAP could help with this.
PA
Paris 1 year ago
Wait, can you really disable script tasks? That's surprising!
JE
Jennie 1 year ago
I disagree, I think A is the only way to go.
MI
Mi 1 year ago
Option B sounds right, you can control user capabilities.
AL
Alexis 1 year ago
I vaguely recall something about LDAP configurations, so option D might be a possibility, but I need to double-check my notes on that.
LE
Leonor 1 year ago
I think we covered something about restricting access in App Designer, which makes me lean towards option A, but I’m not completely confident.
RE
Reuben 1 year ago
I'm not entirely sure, but I feel like we talked about the activiti-app.properties file in one of the practice questions. Option C sounds familiar, but I could be mixing it up.
NI
Nieves 1 year ago
I remember discussing the importance of user permissions in our last study group, so I think option B might be the right choice.
TA
Tamekia 1 year ago
I think the LDAP synchronization option could be a way to control script tasks, but I’m not confident about the exact configuration details.
VI
Vincent 1 year ago
I vaguely recall something about the activiti-app.properties file, but I can't remember if setting a validator property to false is the right method.
SH
Shaun 1 year ago
I'm not entirely sure, but I think option B sounds familiar. We did cover capability groups and how to manage permissions.
YU
Yuonne 1 year ago
I remember discussing the importance of user access control in our last study group, so I think restricting access to App Designer is a valid approach.
DE
Dean 1 year ago
I'm pretty sure the answer is A. Both Source and Destination Checks need to be disabled for VM-Series to forward traffic between its interfaces.
LO
Lou 1 year ago
Hmm, I'm a bit confused on this one. I know model B VPRN involves the ASBRs peering with each other, but I'm not sure about the specifics of the VPRN configuration. I'll have to think this through carefully.
AR
Art 1 year ago
I think we might need to assign an AAD login ID for each agent to get them started. That seems crucial.
WI
William 1 year ago
Hmm, I wonder if I can still sneak in a few script tasks without anyone noticing. I mean, what's the worst that could happen? Oh, wait, it's a security risk. Nevermind, I'll stick to the safe options.
MA
Marvel 1 year ago
↳ replying to William
C) A validator property can be set to false to disable script tasks in the activiti-app.properties file.
MI
Mike 1 year ago
↳ replying to William
B) The capability 'script task allowed' can be removed from the capability group for users you want to prevent from using script tasks.
DE
Denise 1 year ago
↳ replying to William
A) No, this is a base task in the App Designer process editor and it cannot be disabled, you will need to restrict who has access to App Designer to create processes.
KA
Kayleigh 1 year ago
Ugh, why do we even have script tasks in the first place? Sounds like a security nightmare waiting to happen. I say we just get rid of the whole process editor and call it a day. Problem solved!
OD
Odette 1 year ago
↳ replying to Kayleigh
C) A validator property can be set to false to disable script tasks in the activiti-app.properties file.
MI
Micaela 1 year ago
↳ replying to Kayleigh
B) I agree, script tasks can be risky. But there are ways to control who can use them.
SH
Shoshana 1 year ago
↳ replying to Kayleigh
A) The capability 'script task allowed' can be removed from the capability group for users you want to prevent from using script tasks.
TE
Terrilyn 2 years ago
D sounds like a good option if you're syncing users from an external source. Modifying the LDAP config to prevent script tasks is a nice touch. Keeps things nice and secure without too much hassle.
MA
Margot 1 year ago
↳ replying to Terrilyn
Modifying the LDAP config to prevent script tasks is a nice touch. Keeps things nice and secure without too much hassle.
CL
Claudio 1 year ago
↳ replying to Terrilyn
D sounds like a good option if you're syncing users from an external source.
NO
Norah 2 years ago
The correct answer is B. Removing the 'script task allowed' capability from user groups is the way to go. Gotta keep that process editor on lockdown, you know?
XU
Xuan 2 years ago
But what if we need script tasks for some processes? Would restricting access to App Designer be too limiting?
LA
Lajuana 2 years ago
Hmm, I'm not sure if I should be concerned about this security risk. I mean, who would even want to use script tasks for malicious purposes? It's not like we're running a top-secret government agency or anything.
VA
Vanna 1 year ago
↳ replying to Lajuana
D) If you synchronize in users from external, you can modify configuration in the activiti-ldap.properties to prevent users from using script tasks 'ldap.synchronization.scripttask=false'.
LA
Latia 1 year ago
↳ replying to Lajuana
C) A validator property can be set to false to disable script tasks in the activiti-app.properties file.
CA
Carey 1 year ago
↳ replying to Lajuana
B) The capability 'script task allowed' can be removed from the capability group for users you want to prevent from using script tasks.
BR
Brent 1 year ago
↳ replying to Lajuana
A) No, this is a base task in the App Designer process editor and it cannot be disabled, you will need to restrict who has access to App Designer to create processes.
NA
Natalie 2 years ago
I agree with Colette, removing the capability for certain users seems like a secure approach.
CO
Colette 2 years ago
I think option B sounds like a good solution to prevent script tasks.
0/2000 characters

Save Cancel