Security Fundamentals Flashcards

A user's operator ID references two access groups. What determines which application and roles apply when the user logs in?

Answer: The default access group selected on the operator ID

The operator's default access group sets the application, roles, and portal at login, and the user can switch to other listed access groups later.

Which rule type grants an access role permissions such as Read instances or Write instances for a specific class?

Answer: Access of Role to Object (ARO) rule

An Access of Role to Object rule specifies which operations a role can perform on a given class.

An ARO grants Write instances at level 3. In which system production level is the access granted?

Answer: In production levels 1 through 3

A numeric level in an ARO grants access when the system production level is less than or equal to that value.

A role grants Delete instances on a class, but a second role in the same access group has an Access Deny rule for that action. What is the result?

Answer: Delete is denied because Access Deny takes precedence

Access Deny rules override access granted by any other role in the access group.

Managers should be able to approve a case only if they belong to the same department as the case. What should you use?

Answer: An Access When rule referenced in the ARO

An Access When rule evaluates conditions at runtime so access depends on case or user data.

Which tool lets you view and change case type and tool access for each access group from one screen?

Answer: Access Manager

Access Manager gives a single view of access to case types, work, and tools across personas and access groups.

What does the Rule Security Analyzer do?

Answer: Scans custom rules for coding patterns that can lead to security vulnerabilities

The Rule Security Analyzer searches non-autogenerated rules for risky patterns such as possible cross-site scripting or SQL injection.