Question 12 - Pegasystems PEGACPLSA23V1 Real Exam Questions [Feb 2026 Update]

Q: 12

[Security Design] ABC organization has a case management application where users handle customer complaints. Each complaint case contains various details, including the following attributes: Case title: A brief description of the complaint. Creation date: The date when the complaint was registered. Complaint name: The name of the person who filed the complaint. Complaint details: A more detailed description of the issue. ABC wants to allow certain users (for example, managers and supervisors) to gain insights into complaint cases even if they do not have full read access. What is the primary purpose of the ABAC Discover policy in the case management application?

Options

Correct Answer:

Explanation

The primary purpose of an Attribute-Based Access Control (ABAC) "Discover" policy is to determine whether a user can see the existence of a data instance, such as a case, and view a limited set of its details in lists, searches, and reports. This is specifically designed for scenarios where users, like managers or supervisors, need high-level visibility or "insights" into cases for which they do not have full read permissions. It allows them to be aware of the case and see essential, non-sensitive information (e.g., Case ID, status) without accessing the full case details.

Why Incorrect

A: The "Discover" policy is intended to show limited, non-sensitive information, not to reveal sensitive details, which would typically require a "Read" or "PropertyRead" policy.

B: The purpose is to grant limited visibility to specific users, not to restrict access for all users. It is a permissive policy for a defined group.

C: This policy controls visibility of individual case instances within a report or list, not access to the entire dashboard or user portal itself.

References

1. Pegasystems - Pega Platform Help: Creating an access control policy. This document explicitly defines the "Discover" policy type. It states

"A Discover policy determines whether a user can see the existence of a rule or data instance and view limited details in lists

searches

and reports." This directly supports the function described in the correct answer.

2. Pegasystems - Pega Platform Help: Access control policies. This guide provides an overview of access control policies

including ABAC. It explains that policies are used to define granular access based on attributes

and the "Discover" type is used for visibility in reports and searches when read access is not granted.

3. Pegasystems - Pega Academy Courseware: Lead System Architect (LSA) Pega Architecture 8.8 - Module: Implementing attribute-based access control. This course details the different ABAC policy types. It clarifies that the "Discover" policy allows users to see records in a list view or report but prevents them from opening the record

which aligns with providing "insights" without "full read access."

Premium Access Includes

FLASH OFFER

avail 10% DISCOUNT on YOUR PURCHASE