ACA Security & Governance 1 — Questions and Answers
Question 1: Which Appian security model controls access to records, actions, and interfaces based on user roles?
- Role-Based Access Control (RBAC) (Correct answer)
- Attribute-Based Access Control (ABAC)
- Mandatory Access Control (MAC)
- Discretionary Access Control (DAC)
Correct answer: Role-Based Access Control (RBAC)
Appian uses RBAC, where permissions are assigned to groups and roles that are then associated with users.
Question 2: In Appian, which object type is used to define and manage user groups and their associated permissions?
- Process Model
- Group (Correct answer)
- Record Type
- Integration Object
Correct answer: Group
Groups in Appian are the primary mechanism for organizing users and assigning access rights to application components.
Question 3: What Appian feature allows administrators to audit who accessed or modified application objects?
- Audit Logs (Correct answer)
- Event Triggers
- Process Reports
- Health Dashboard
Correct answer: Audit Logs
Appian's Audit Logs provide a record of user and system actions, supporting compliance and governance requirements.
Question 4: Which security mechanism in Appian prevents users from seeing records they do not have permission to view?
- Record-Level Security (Correct answer)
- Field-Level Encryption
- Network Firewall Rules
- SSL Certificates
Correct answer: Record-Level Security
Record-Level Security in Appian restricts visibility of individual records based on user group membership or dynamic conditions.
Question 5: What is the recommended approach in Appian for handling sensitive data fields in process variables?
- Mark fields as encrypted in the data type (Correct answer)
- Store data only in session variables
- Use obfuscation in expression rules
- Disable audit logs for those fields
Correct answer: Mark fields as encrypted in the data type
Marking fields as encrypted in the Appian data type ensures sensitive data is stored securely in the process engine.
Question 6: Which Appian governance practice ensures that changes to application objects are tracked and reversible?
- Version control via Appian Designer compare and deployment packages (Correct answer)
- Manual documentation in spreadsheets
- Scheduled database snapshots
- Process instance archival
Correct answer: Version control via Appian Designer compare and deployment packages
Appian Designer's compare functionality and deployment packages allow teams to track object changes and roll back if needed.
ACA Security & Governance 1
Which Appian security model controls access to records, actions, and interfaces based on user roles?