AIE02 Installing and Configuring a Blue Prism (Version 6.0) Environment (EN) Questions and Answers

It allows you to select which logon account will be used when the server service is started

It allows you to select whether the service account will be started automatically and configure the behavior if the service fails to start

It checks that the service logon account is allowed to start a listener for the configuring binding

It checks that the service logon account is allowed to start a listener for the configured binding and provides the option to manage the permissions

It validates that there is a service associated with the profile, and if not, provides the option to create a new service. It also checks that the service logon account is allowed to start a listener for the configured binding and provides the option to manage the permissions.

Not Applicable – It is recommended that the Blue Prism client is used to apply the database upgrade script and this is automatically entitled to make all changes

dbowner

datareader, datawriter

datareader, datawriter, all roles named with a prefix of bp_dba

All of the above

It will use the profile which is configured with the “Is Default” flag

It will use the first profile when ordered alphabetically

It will use the last profile when ordered alphabetically

It will use the profile named “Default”

No –components cannot co-exist and must be installed on separate devices

It is possible to installed the Runtime Resource and Interactive Client on the same device, but these cannot share a device with the Blue Prism Server

Only the Application Server and Blue Prism database can co-exist on a single device

Yes although this not a recommended configuration

Yes. Before a user signs in they can select which environment they wish to connect to

Yes. Before a user signs in they can select all the environments which they will be able to control simultaneously

No – an Interactive Client can only be configured to connect to a single environment

Provides a Login Agent Runtime Resource which can receive simple instructions prior to being in a logged in state

Allows a Login Agent Runtime Resource to immediately automatically login using saved credentials as part of a device reboot

Removes the requirement for locally stored device credentials

Provides the ability to manually instruct a Login Agent Runtime Resource to login

Provides the ability to schedule when a Login Agent Runtime Resource will be logged in

Allows processes which interact with locally installed applications to be executed without the device being logged in

Use the /SSLCert switch in the Runtime Resource start up parameters

Under System - > Settings, enable the “Require secure resource connections” setting

Within the configuration for the Blue Prism Server select a Connection Mode that does not contain the text “Insecure”

Write an Application Server process which periodically polls all of the connected devise to evaluate the encryption that is being enforced

Yes it is potentially possible but this is not generally recommended. Devices connected directly to the database may be limited in terms of managing or leveraging Credentials.

No, all Runtime and Interactive Clients must be connected to the database via a Blue Prism Application Server

Yes, but Runtime Resources that are connected directly to the database cannot be instructed to start processes by the scheduler

Implement firewall rules to prevent unexpected devices from establishing a connection with the Application Server

Under System - > Settings, enable the “Prevent registration of new Resources” setting

All of the above

When a Blue Prism Server is configured with a SQL Server database connection that uses SQL Native Authentication, the service log on user needs SQL dbowner privileges

When the Blue Prism connection used by the server is configured to use SQL Native Authentication, the service log on user does not need any SQL privileges

When a Blue Prism Server is configured with a SQL Server database connection that uses SQL Windows Authentication, the service log on user needs the minimum permissions on the appropriate Blue Prism SQL Server database as identified in the documentation

When using Single Sign on for the Blue Prism platform, the service log on user needs permission to query Active Directory Security Group membership

When using Single Sign on for the Blue Prism platform, the service log on user needs to be a Domain Administrator

When using Blue Prism native authentication for the Blue Prism platform, the service log on user needs to be a Domain administrator

When configured to use a connection mode that uses Transport encryption, the service log on user needs read-access to the associated certificate’s private key