Pegasystems Exam PEGACPLSA88V1 Topic 2 Question 15 Discussion

Actual exam question for Pegasystems's PEGACPLSA88V1 exam

Question #: 15
Topic #: 2

In a Human Resources application, the Social Security Number (SSN) and date of birth details for employees are confidential, and business requirements state that only the HR Manager can see these details.

What is the best approach to mask the information for other users everywhere in the application?

AUse the PropertyRead access control policy for the SSN and date of birth.

BAdd the privilege rule for the UI controls that display the SSN and date of birth.

CAdd an Access When rule for access role objects of the HR Manager role.

DUse the Property Encrypt access control policy for the SSN and date of birth.

Show Suggested Answer

Suggested Answer: A

Using the PropertyRead access control policy for the SSN and date of birth ensures that only users with the appropriate access (e.g., HR Manager) can view these details. This approach masks the information for other users.

Reference:

Pega best practices for data security and access control recommend using PropertyRead policies to restrict access to sensitive information.

Therefore, the correct answer is:

A . Use the PropertyRead access control policy for the SSN and date of birth.

by Ronny at Jun 28, 2024, 07:36 PM

Limited Time Offer

25%

Off

Get Premium PEGACPLSA88V1 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Leota

11 months ago

Wait, we're supposed to be protecting confidential data, not playing hide-and-seek with it. Encrypt that stuff, I say!

upvoted 0 times

...

Shaniqua

11 months ago

I think the Access When rule is the best option here. It's more flexible than just hiding the fields, and you can still give the HR Manager access when they need it.

upvoted 0 times

Nickolas

9 months ago

But with PropertyRead, you can easily manage access to the SSN and date of birth without complicating things.

upvoted 0 times

...

Michel

9 months ago

I think Property Encrypt would be more secure, though. It adds an extra layer of protection to the data.

upvoted 0 times

...

Shawna

10 months ago

I agree, using an Access When rule allows for more control over who can see the information.

upvoted 0 times

...

Loreen

10 months ago

C) Add an Access When rule for access role objects of the HR Manager role.

upvoted 0 times

...

Bev

10 months ago

B) Add the privilege rule for the UI controls that display the SSN and date of birth.

upvoted 0 times

...

Keneth

10 months ago

A) Use the PropertyRead access control policy for the SSN and date of birth.

upvoted 0 times

...

Willard

11 months ago

I prefer option D because encrypting the data adds an extra layer of security.

upvoted 0 times

...

Daryl

11 months ago

I'm not sure, I think option C could also work if we limit access based on roles.

upvoted 0 times

...

Geraldo

12 months ago

Hmm, I don't know. Isn't there a way to just, I don't know, magic it away or something? Like, make it disappear with a wave of the wand?

upvoted 0 times

Merissa

11 months ago

B) Add the privilege rule for the UI controls that display the SSN and date of birth.

upvoted 0 times

...

Lynelle

11 months ago

A) Use the PropertyRead access control policy for the SSN and date of birth.

upvoted 0 times

...

Mollie

12 months ago

I'm not so sure about that. Encrypting the data could make it harder to work with, and the PropertyRead policy might be a simpler solution.

upvoted 0 times

...

Nana

12 months ago

I agree with Vanda, option A seems like the most secure way to protect sensitive information.

upvoted 0 times

...

Lazaro

12 months ago

Option D is definitely the way to go. Encrypting the data is the most secure way to protect confidential information like SSN and date of birth.

upvoted 0 times

Dorethea

11 months ago

I agree, using Property Encrypt access control policy for the SSN and date of birth is the best approach to ensure only the HR Manager can see the details.

upvoted 0 times

...

Isadora

11 months ago

Option D is definitely the way to go. Encrypting the data is the most secure way to protect confidential information like SSN and date of birth.

upvoted 0 times

...

Vanda

12 months ago

I think option A is the best approach because it restricts access to the actual data.

upvoted 0 times

...