ACP (Comprehension Checks)

ACP (Comprehension Checks)

ACP (Comprehension Checks)

Viet Nguyen

Viet Nguyen

Set of flashcards Details

Flashcards 250
Students 32
Language English
Category Computer Science
Level Other
Created / Updated 30.11.2013 / 25.06.2022
Weblink
https://card2brain.ch/box/acp_comprehension_checks
Embed
<iframe src="https://card2brain.ch/box/acp_comprehension_checks/embed" width="780" height="150" scrolling="no" frameborder="0"></iframe>
What is the difference between open and closed security?

With open security, you restrict access where necessary. You use "any" or "unprotected ones and according to access codes". With closed security everything is protected and you grant access where necessary. Here you use "none" or "according to access codes". It takes longer to implement closed security.

Why do we need access codes?

You need access codes to protect objects, workflows and other subjects in the Avaloq Banking System (ABS). And you need access codes as well to grant the user access to these protected subjects.

Is it possible to protect single fields within a form by the Avaloq Security Engine?

No, it is not. Full access to the form is allowed if the meta_typ access code fits.

What is the Parameterisation concept behind order security?

The order security is done by rules.

Which statements about Avaloq Security are correct? Please choose the correct answer: a) A role user can login to the database. b) An end user needs mandatorily manual entered general access rights. c) The general access right “any” has the higher priority than “according to access code”. d) The protection of single fields in a form is handled by the Avaloq Security Engine. e) Always two (2) separate kinds of access codes are needed, one with the flag “user” and another one with the flag “subject”.

Correct answer is: c)

What does the acronym API mean and what is one used for?

It stands for Application Programming Interfaces. They are used for administration purposes.

Why is it better to use an API instead of changing operational tables?

Security interfaces are used on one hand to integrate external systems. On the other hand, they are used where manual insertion, update or deletion in database tables are forbidden to prevent inconsistencies.

Why do we need to secure a Workflow Action also the Meta Type ID?

A single Workflow Action (ID) is only unique together with a meta type.

Which interface do you need to add an access code to a user?

user_admin_intf#.user#add_access

Which interface do you need to add an access code to an object?

sec_admin_intf#.obj#add_access

The right to which securable item does a user at least need to be able to start the GUI? Choose the one (1) correct answer: a) Object “Business Partner” b) WFC-Action c) Meta Type d) Object “Business Application" e) Object “Task Definition

Correct answer is: d)

What is one of the differences between Avaloq Script and PL/SQL?

PL/SQL accesses data through SQL queries in contrast to Avaloq Script. Avaloq Script does not offer direct SQL access.

List three (3) features of Avaloq Script

Block structure | Modularity | Separate compilation

List at least three (3) usage areas of Avaloq Script.

Report Writer | Order Validation | Avaloq Message Interface | Rule Loader | Context Action

List possible objects stored in the object (kernel) layer.

Business Partner, Container, Country, Address, etc.

What happens to data in the order memory layer when the session is closed?

This data is lost. No persistent storage of data is done in the memory layer.

Does a static data order generate events for theBooking Engine?

No, static data orders generate or modify objects. Events are generated by transactional orders.

Which layer is used to store an order permanently?

Order persistence layer.

List four (4) data dictionaries on different layers.

For instance: mem_doc_bp ; doc_bp ; obj_bp ; dtm_doc_stex

Which data dictionary is displayed if you execute a context action on the person object?

Usually the data dictionary at the kernel layer (obj_person) is displayed. However, if you have an open order on the same object, the data dictionary at its memory layer will be displayed (mem_doc_person).

Which are the three (3) main sections Data Dictionaries in the memory layer potentially consist of?

Fields | Methods | Constructors

Which two statements about Avaloq Script are valid : a) All DDIC names begin with ‘mem_doc’, ‘doc’ or ‘obj’ b) Only methods in DDICs require parameters c) A field in a DDIC may be a list of elements d) The path to values in a DDIC needs always to end in information stored in the object layer e) Two orders may modify the same object at the same time f) The constructor ‘new’ is only available in DDICs which describe the memory layer.

Correct answers are: c) & f)

What triggers an order validation?

Order validations are triggered by workflow actions.

Who builds the constraints used within an order validation?

Constraints are built by the bank/client.

What is needed to parameterise Order Validation error codes?

Error codes are parameterised in the code_ui_err table, using sources (code_ui_err.*)

What is needed to parameterise Order Validation override codes?

Override codes are parameterised in the code_override table, using the code_override source

Execution of constraints within an order validation depends on which criteria?

Criteria: Order Types, Workflow Actions and Workflow Status elements.

Which statement is valid: Oder Validations … a) … are used to format date fields. b) … check data in subwindows. c) … are executed by the rule engine. d) … dynamically calculate order fields.

Correct answer: b)

Which statement is valid: a) Order Validation source names include the namespace. b) You may create multiple Order Validation sources per Business Type. c) Error codes are parameterised with the err#- API. d) Override Codes can be translated.

Correct answer: d)

Consider the following Order Validation source: Which line is syntactically wrong?

Code wfc_action . Correct: action

Which workflow command triggered the outgoing message creation process?

--> settle_now

Describe the outgoing message creation process.

Avaloq data is used to fill an outgoing message. The outgoing message contains information related to the order (e.g. a payment order). The Message Builder collects all data related to the initiating order that is required for a message of the specified type and fills this information into the internal message in Avaloq's internal representation. The Message Formatter transforms the message from the internal message into the format expected by the network. The resulting formatted message is stored in the MSG_EXTL_OUT database table from where it is fetched by an active component using the External Message Interface.

Describe the incoming message handling process.

Incoming messages are received by the External Message Interface. The formatted message, sender etc. are stored in the MSG_EXTL_IN database table. The Sequential (BGP-ID: 922) and the Parallel (BGP-ID: 923) Background Processes regularly poll and call the appropriate Message Parser if a new message has been detected. The Message Parser transforms the formatted message into an internal message from which the Message Handler interprets the message and updates the Avaloq data by creating an order and mapping the message data to the order fields.

In which database table do we find the messages that were exported via the Business Bus?

In the MSG_EXTL_OUT database table.

What happens when you insert an object in XML-format into AMI?

The Message Handler opens a static data order to create or modify the object

The Business Bus (BB) makes it possible to: a)Export dynamic data objects to external systems. b)Receive requests for static data orders from data providers. c)Exchange unstructured data between subsystems of Avaloq. d)Create Avaloq static data objects via the Avaloq Message Interface.

Correct answer is: d)

Which source is used to define the network type (Field Format, XML or Internal)?

Network Structure source

In the "Create your own Field Format Network" exercise, why did you need to define a separator for the asset field?

The parser needs to know how to distinguish between the different parts within this compound field.

Where and how do you specify the order creation process for the Message Handler?

In the Incoming Message Definition source, you use the following code:

Which source types are used when an AMI network is implemented?

Network. Network Structure . Message Structure . Outgoing Message Definition .Incoming Message Definition .Avaloq Script Package