Pegasystems PEGACPSA88V1 Exam - Topic 5 Question 2 Discussion

Actual exam question for Pegasystems's PEGACPSA88V1 exam

Question #: 2
Topic #: 5

An internal application currently grants employees access to one of four personas Admin. Author. User, and Manager A new system administrator who joins the company requires all the access of the Admin persona but only some of the reporting features are available to the Author persona

How do you satisfy this security requirement?

Available Choices (select all choices that are correct)

AAdd the system administrator to both the Author persona and Admin persona.

BUpdate the Admin persona to include the required access.

CCreate a new SysAdmin persona with the required access.

DAdd the analyst to the Author persona.

Show Suggested Answer

Suggested Answer: C

To satisfy this security requirement, you can create a new SysAdmin persona with the required access. A persona is a rule that defines the access rights and privileges for a group of users who perform similar tasks in an application. You can create a new persona by copying an existing one and modifying it to suit your needs. In this case, you can copy the Admin persona and add some of the reporting features from the Author persona to create the SysAdmin persona. Reference: https://community.pega.com/knowledgebase/articles/security/86/personas

by Lynelle at Jul 08, 2023, 12:26 PM

Limited Time Offer

25%

Off

Get Premium PEGACPSA88V1 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Aja

3 months ago

Updating the Admin persona could work too, but I prefer a new one.

upvoted 0 times

...

Quentin

3 months ago

Wait, can you really just mix personas like that? Sounds risky.

upvoted 0 times

...

Ben

4 months ago

Adding to both Author and Admin? Seems like overkill.

upvoted 0 times

...

Jaclyn

4 months ago

Totally agree, the Admin persona is too much for just reporting!

upvoted 0 times

...

Gerald

4 months ago

I think creating a new SysAdmin persona makes the most sense.

upvoted 0 times

...

Carli

4 months ago

I feel like adding the analyst to the Author persona doesn’t really address the Admin access requirement, so I’m leaning away from option D.

upvoted 0 times

...

Cora

4 months ago

Creating a new SysAdmin persona sounds like it could work, but I wonder if that might complicate things more than necessary.

upvoted 0 times

...

Denise

5 months ago

I think updating the Admin persona could be a good solution, but I’m not entirely clear on what specific access needs to be added.

upvoted 0 times

...

Detra

5 months ago

I remember discussing how adding a user to multiple personas could create conflicts, so I’m not sure about option A.

upvoted 0 times

...

Filiberto

5 months ago

Okay, let's see. Financial loss and identity theft seem to be the two main consequences mentioned. I think those would align with the economic and social/psychological harm dimensions.

upvoted 0 times

...

Heike

5 months ago

Applying egress filtering - that's a good one! Controlling outbound traffic is an important part of securing a system. I'm leaning towards that as the best answer.

upvoted 0 times

...

Lynelle

5 months ago

It's tough, but I think both standards could be at play here. Burton's packet could mislead Crossley and misrepresent the firm's capabilities, which might trigger both violations.

upvoted 0 times

...

Jacinta

5 months ago

I'm a bit confused - do we really want to just turn off the appliance using the power button? That doesn't seem like the best approach.

upvoted 0 times

...