HikeLetter | PMP Training & Certification Online Course | Project Management Learning

1

An interface needs access to a limited set of worker data. This scenario occurs during implementation. Select the most secure and supportable response. What should the team do?

A. Grant access to all worker domains B. Share a human employee's credentials C. Use a tenant administrator account for every run D. Use a dedicated integration identity and grant only the permissions required for the approved purpose.

2

An integration can launch but cannot access a required data domain. This scenario occurs during implementation. Select the most secure and supportable response. What should the team do?

A. Change an unrelated business-process policy B. Grant every group access without review C. Disable tenant security D. Review the relevant domain security policy and group permissions, then apply and activate approved changes as required.

3

An integration is blocked at a particular business-process step. This scenario occurs during implementation. Select the most secure and supportable response. What should the team do?

A. Remove the step's security controls permanently B. Review the step's security configuration and grant only the approved access needed by the integration identity. C. Make the identity a tenant administrator D. Share a manager's credentials

4

An integration must remain functional when an employee leaves the company. This scenario occurs during implementation. Select the most secure and supportable response. What should the team do?

A. Use the developer's personal account indefinitely B. Store the password in output files C. Use a dedicated, governed integration identity with securely managed credentials and documented ownership. D. Use an unowned generic employee account

5

A sensitive access change is requested for a production interface. This scenario occurs during implementation. Select the most secure and supportable response. What should the team do?

A. Follow approval and change-control procedures, with independent review where required. B. Document the change only if an audit asks later C. Require appropriate approval and preserve a record of the change D. Allow the requester to approve and deploy without review

6

An output includes personal data the receiving system does not need. This scenario occurs during implementation. Select the most secure and supportable response. What should the team do?

A. Send it anyway because the connection is encrypted B. Copy the personal data into another file C. Remove unnecessary sensitive fields and verify access and delivery controls before sending. D. Give the receiver all fields for future convenience

7

An auditor asks who changed security settings and why. This scenario occurs during implementation. Select the most secure and supportable response. What should the team do?

A. Share one administrator account among the team B. Maintain approvals, change records, configuration evidence, and relevant audit logs according to retention rules. C. Delete logs after each run D. Rely on verbal recollection

8

An integration token is due to be rotated. This scenario occurs during implementation. Select the most secure and supportable response. What should the team do?

A. Rotate through the approved process, update secured configuration, test connectivity, and revoke the old token when safe. B. Email the secret to all users C. Post the token in a shared chat D. Hard-code the token in source code

9

An employee changes roles but retains access no longer needed. This scenario occurs during implementation. Select the most secure and supportable response. What should the team do?

A. Add more groups just in case B. Keep all access forever to avoid future requests C. Review group membership and remove access not justified by current responsibilities. D. Update access according to current job need and approved policy

10

A test needs representative worker data to validate a mapping. This scenario occurs during implementation. Select the most secure and supportable response. What should the team do?

A. Copy all personal production data to a public test environment B. Give every tester unrestricted production access C. Use approved test data or appropriately minimized and protected data in a controlled nonproduction environment. D. Use approved, minimized test data and suitable environment permissions

WORKDAY PRO SECURITY

Overview

Course Description

Course Questions