ATA02 Sample Questions Answers

Runtime Resource

Interactive Client (for Monitoring and Control)

Interactive Client (for development)

Application Server

All of the above

Provide a high performance MPLS connection between sites

Provide virtualized Interactive Clients within the same network as the Blue Prism environment

Provide fully replicated Blue Prism environments in each geographic region where users are based

Nominate a user in the central location who will receive releases from each remote user and apply them to the system

Policies applied by Active Directory such as multi-factor authentication and password complexity are applied to Blue Prism

It makes it possible to add custom security roles in Blue Prism

Users are assigned security roles based on their group membership in Active Directory

Data encryption between Blue Prism devices is provided by default

The key is always stored in the database

The key is always stored within the config file on the Application Server

The key can either be stored in the database, in the config file on the Application Server, or in a separate securable file on the Application Server

The key is hard-coded and stored securely within the Application. It is subjected to obfuscation to ensure it's protection

The key can only be stored in the database or in the config file on the Application Server

Virtualization of the database server should only be considered after fully reviewing the specific vendor recommendations for the Hypervisor and SQL server version

The Database server should never be virtualized

Virtualization is only supported on Vmware Hypervisor technology

Virtualization should be considered only in very small environments

Redundancy - e.g. to provide a level of continuity if one Application Server fails

To increase the overall security of the environment

The number of connected clients and runtime resources

The Application Server doubles up as a Web Server for a separate application

Integration with Active Directory

The location of the credential store keys

Integration with an external LDAP service

The encryption method for the credential store

The encryption method for the operational communications between database server and runtimes

The separation of duties between roles and environments

Remote access to the Blue Prism components

Calling an external program to send SNMP traps.

Logging to event log and collecting via an external tool.

Selecting “send to external monitoring tool” from the Blue Prism process designer.

Generating emails from the process.

An underlying disk subsystem which hosts many virtual devices can be a performance bottleneck.

Often shared hardware is over-allocated resulting in less than expected available capacity (e.g. 2 vCPUs may equate to 0.1 physical cores)

It is important to validate the actual performance of the Runtime Resources when operating on shared hardware

The performance of the Runtime Resource can impact processing throughput

All of the above

By default the connection is native TCP and not encrypted

The runtime resource can be configured to use certificate-based encryption for all inbound communication

The login agent will automatically use a certificate if the runtime resource is configured to use one

The connection will be established via .NET remoting and will be encrypted as long as the “Use Secure Connections” flag is set

A central setting within Blue Prism can be used to prevent all associated Runtime Resources from accepting any instructional communications which are not encrypted.