PEGAPCSSA87V1 sample questions

Question 1

A financial institution uses Attribute-Based Access Control (ABAC) to restrict access to loan cases. A policy is defined to allow access only if the loan amount is less than the manager's approval limit. A manager with a limit of $500,000 reports being unable to access a loan case for $450,000. The Tracer shows the ABAC policy condition is evaluating to false. Which of the following are potential root causes for this issue? (Select TWO)

Accepted Answer

The properties for loan amount and approval limit are of different types (e.g., Integer vs. Text), causing incorrect comparison.

Accepted Answer

The 'pyWorkPage' is not correctly passed or available in the context where the Access When rule for the policy is executing.

Answer

The manager's approval limit property on their operator record is not exposed as a database column.

Answer

The Access Control Policy Set is not included in the user's application ruleset stack.

Answer

The manager does not have the PegaRULES:SecurityAdministrator role.

Question 2

During a peer review, a senior architect observes a process for generating nightly reports that uses a Job Scheduler to call an activity. This activity iterates through 500,000 case records, performs complex calculations, and writes to a CSV file. The architect flags this design as suboptimal for performance and scalability. What should be recommended as a more robust alternative?

Accepted Answer

Use a Job Scheduler to trigger a Queue Processor, which then queues individual cases for processing by another activity.

Answer

Replace the Job Scheduler with a standard Agent configured with a recurring schedule.

Answer

Optimize the activity by using a Report Definition as a source and reducing property sets.

Answer

Increase the thread pool size for the Job Scheduler in the Admin Studio.

Question 3

True or False: When designing a Pega Mobile application for field technicians who frequently work in areas with no internet connectivity, the primary data synchronization strategy should rely on push notifications to update the device.

Accepted Answer

False

Answer

True

Question 4

An insurance company's claim processing application needs to display a list of approved repair shops. This list is large and varies by the claimant's geographical region. The report definition for this list uses a class join to the Operator data class to show the name of the claims adjuster. A business analyst, who does not have development skills, needs to create a new report that also includes the adjuster's name. What Pega feature should be implemented to facilitate this reuse without requiring a developer to configure a new class join?

Accepted Answer

An association rule.

Answer

A subreport that encapsulates the join logic.

Answer

A parameterized data page.

Answer

A relevant record entry for the Operator class.

Question 5

A Pega application is being embedded into a high-traffic external web portal using Pega Web Mashup. The portal uses its own authentication mechanism. The requirements state that users authenticated with the portal should NOT have to log in again to interact with the Pega application. Which configuration is essential to meet this requirement securely?

Accepted Answer

Configuring an Authentication Service (e.g., SAML 2.0 or OpenID Connect) and establishing a trust relationship with the portal's identity provider.

Answer

Passing the user's credentials as parameters in the mashup code.

Answer

Creating a new unauthenticated access group in Pega for mashup users.

Answer

Adding the portal's domain to the Pega application's Cross-Origin Resource Sharing (CORS) policy.

Question 6

A case type for processing event permits requires two parallel reviews: one by the police department and one by the fire department. Final approval can only be granted after both departments have completed their reviews. The current implementation uses a Split-Join shape. During user acceptance testing, it's discovered that if the police department rejects a permit, the fire department review task remains open and active. What is the most effective way to configure the case to ensure that a rejection from one department automatically resolves the entire parallel process?

Accepted Answer

In the Split-Join shape's join condition, select 'Any' and define a when condition that checks for a rejection status.

Answer

Use a ticket in the police department's flow to jump to a resolution stage.

Answer

Configure a custom activity in the post-processing of the police department's flow action to resolve the fire department's assignment.

Answer

Create a declare trigger that monitors the case status and resolves open assignments when the status changes to 'Rejected'.

Question 7

A system administrator analyzing logs with the Pega Diagnostic Center (PDC) notices a high number of PEGA0005 alerts originating from a single user interaction. This alert indicates that a query to the database exceeded the time threshold. Which tool should a senior system architect use first to get a detailed breakdown of the specific SQL query being executed and its execution plan?

Accepted Answer

Database Trace.

Answer

Performance Analyzer (PAL)

Answer

The Tracer tool with the 'DB Query' event enabled.

Answer

Performance Profiler.

Question 8

A development team is building a new application on a shared Pega platform. To facilitate parallel development, the lead architect has created a development branch named 'FeatureX'. A developer working in this branch needs to update a data transform that exists in the base application ruleset. What is the expected behavior when the developer checks out and modifies this data transform within the 'FeatureX' branch?

Accepted Answer

Pega creates a copy of the rule in the branch ruleset, and this copy overrides the base rule for users in the branch.

Answer

The system prompts the developer to create a new, higher version of the base ruleset before allowing changes.

Answer

The developer is prevented from modifying the rule because the base ruleset is locked.

Answer

The changes are saved directly to the base rule, and a warning is issued about modifying a locked ruleset.

Question 9

An application is being migrated from a legacy system to Pega. The legacy system contains a large table of 'Product Codes' that will be used for data validation in dropdowns throughout the Pega application. The product codes are frequently updated by a separate master data management system. The codes need to be accessed using a single, unique key. Which type of data page is the most appropriate design choice for managing this data?

Accepted Answer

A list-structure data page with keyed page access.

Answer

A page-structure data page with 'Thread' scope.

Answer

An editable data page to allow for real-time updates from Pega.

Answer

A page-structure data page that accepts the product code as a required parameter.

Question 10

A banking application requires different views of a customer's data for a 'Teller', a 'Loan Officer', and a 'Branch Manager'.

**Company Background**: GlobalBank is a large financial institution aiming to unify its customer service applications onto the Pega platform. They want to ensure strict data segregation and security compliance.

**Current Situation**: The current implementation uses three different portals and harnesses to control the user interface for each role. However, they have discovered that a tech-savvy Loan Officer can still access Teller-specific data by manipulating clipboard data in the browser's developer tools, even though the UI elements are not visible.

**Requirements**: The application must prevent any possibility of a user accessing data fields on the server or clipboard for which they are not authorized, regardless of the UI presented. For example, a Loan Officer must never be able to see the 'TellerCashDrawerID' property, even if it is part of the same case data model.

Which Pega security feature should be implemented to meet this strict data-level security requirement?

Accepted Answer

Use an Access Control Policy with a 'PropertyRead' action to define conditions under which specific properties can be read.

Answer

Configure 'Visible When' conditions on all sensitive property fields in the section rules.

Answer

Implement multiple Access of Role to Object (ARO) rules for the case type, with different privilege levels for each role.

Answer

Create a custom activity to remove unauthorized properties from the clipboard before the screen is rendered.

Free PEGAPCSSA87V1 sample questions

True or False: When designing a Pega Mobile application for field technicians who frequently work in areas with no internet connectivity, the primary data synchronization strategy should rely on push notifications to update the device.

10 more free samples are waiting