Question 1 (choose 3)
Which three of the following options come under security administration events while auditing your Pega application? (Choose Three)
- AOption A:
Changes to security authentication policies.
- BOption B:
Changes to dynamic system settings.
- COption C:
Changes to attribute-based access control policies and policy conditions.
- DOption D:
Changes to operator records.
- EOption E:
Changes to report definition filters.
Show answer and explanation
Correct answer: A, C, D
Comprehensive and Detailed Explanation From Exact Extract :
Pega’s security auditing, as taught in Pega Academy’s Security Mission and the Pega Certified Lead System Architect Study Guide , tracks administrative
events that impact application security, such as changes to policies, access controls, and user records, to ensure compliance and traceability.
Option A (Correct) : Changes to security authentication policies (e.g., SSO or LDAP configurations) are critical security administration events, as they affect user access. These are audited, per the Security Auditing module.
Option B (Incorrect) : Changes to Dynamic System Settings (DSS) typically affect system behavior, not security directly, and are not standard security administration events, as noted in the System Configuration guidelines.
Option C (Correct) : Changes to Attribute-Based Access Control (ABAC) policies and conditions modify data access rules, making them significant security events that are audited, per the ABAC Configuration section of Pega Community.
Option D (Correct) : Changes to operator records (e.g., updating roles or access groups) impact user permissions and are audited as security administration events, as documented in the Operator Management module.
Option E (Incorrect) : Changes to report definition filters affect reporting logic, not security, and are not typically audited as security events, per the Reporting Design module.
[:, Pega Academy:Security Mission(covers security auditing)., Pega Community:Security Auditing(details on audited events)., Pega Certified Lead System Architect Study Guide (v23): Section onSecurity Design(emphasizes auditing security changes)., ]