Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

RCA Exam > workspace administration (high) > Flashcards

workspace administration (high) Flashcards

Security and Permissions

1
Q

how can you use the instance setting Relativity.Authentication WindowsAuthIpRange to define an IP address for users to log in?

A

this setting is used to define the valid range for the Relativity instance; the default defines all IP addresses as valid

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

how do trusted IP ranges work to define IP addresses for users to log in?

A

specifies a valid IP address or addresses for each user, which could be an individual address, a range of addresses, or combination of either

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

what are 2 ways that an IP address range could be set for Relativity users?

A

WindowsAuthIpRange and Trusted IP range

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

can WindowsAuthIpRange and Trusted IP range be used to stop users from logging in if they access Relativity from the same server where it is installed?

A

No, you must disable non-admin user remote access to the server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

what instance settings can you use to define integrated authentication behavior? (2)

A

UseWindowsAuthentication and WindowsAuthIpRange instance settings

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

If UseWindowsAuthentication is False, then:

A

integrated authentication can’t be used. Relativity ignores the WindowsAuthIpRange value.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

if UseWindowsAuthentication is True and WindowsAuthIpRange isn’t set:

A

then integrated authentication will always be used regardless of IP address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

If UseWindowsAuthentication is True and WindowsAuthIpRange is an IP address or address range:

A

then Integrated Authentication is used when the computer’s IP address falls within the WindowsAuthIpRange value.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

what kind of server do you need to send email authentification?

A

SMTP server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

what instance settings are needed to define the emails addresses and body text for authentification? (3)

A
  • AuthenticationEmailFrom - sets the email address that appears in the From field of email messages that contain authentication information for users.
  • EmailFrom - sets the email address populated in the “From” field when sending email notifications.
  • ForgotPasswordRequestEmailFrom - sets the value in the From field for the forgotten password request email message.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

what is relativity not certified to work with any version of?

A

RSA Authentication Agent for Web for Internet Information Services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

how many agents must you add for each web server in your relativity environment?

A

one

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

what must you do before you configure RSA authentication in Relativity?

A

you must copy the RSA configuration files to your Relativity web server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

a user can have multiple login methods, but only one from what categories?

A

only one from among password, RSA, and active directory

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

the invitation workflow works applies to which methods? (3)

A

password only,
password 2-factor, and
password outside trusted IP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

how long is the invitation email for the password only option valid for?

A

one week

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

what instance setting can be used to increase the default invitation link expiration period?

A

InvitationLinkLifetimeInMin

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

how does the password 2-factor option work?

A

requires a passcode in addition to a password; The system emails a passcode to the user during logon, and it’s different each time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

how long is the link in the email for the password 2-factor option valid for?

A

5 minutes, and only the most recently-sent email can be used. The link expiration time is not configurable.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

how does the password outside trusted IP option work?

A

requires a passcode only if the user logs in outside of a specified IP range. If the log on is inside the trusted range, then only a password is required.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

how are passwords reset in Relativity?

A

by sending the user an email with a reset link

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

how long is the link within the email for password reset valid for?

A

15 min, and only the most recently sent email can be used

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

what instance setting can you use to increase the default reset link expiration period?

A

PasswordResetEmailExpirationInMinutes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

can system admins set or see passwords?

A

no, by default

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

in order to manually set a password, what instance setting must be configured?

A

AdminsCanSetPasswords instance setting, set to true

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

how does the active directory method work?

A

uses Windows Active Directory to authenticate the user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

how does integrated authentication work?

A

uses Windows supported authentication protocols, such as Kerberos, to automatically log in users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

what 2 instance settings must be configured in order to use integrated authentification?

A
  • UseWindowsAuthentication - must be set to True to use Integrated Authentication
  • WindowsAuthIpRange - set this to the IP address or addresses for a trusted range of computers
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

how does client certificate authentication work?

A

uses a smart card assigned to a user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

how does RSA authentication work?

A

requires a user to have an RSA SecurID token that is registered with your RSA Authentication provider

31
Q

why does implementing client domains require an additional license from Relativity?

A

Each client domain license is unique, and client domains can have different terms encoded on their license keys. The license for a client domain is unrelated to any other license for Relativity (e.g., number of seats).

32
Q

what cannot be activated for Client objects that have existing workspaces associated with them?

A

Client domains functionality

33
Q

what is the purpose of the client domain feature?

A

an easier way to securely isolate users, workspaces, groups, resource pools, and matters by client

34
Q

what is the root object of a client domain?

A

the client object in the administrative workspace

35
Q

if you enable client domains a client, you can no longer do the following:

A
  • cannot disable it on that client later,
  • cannot edit the name of the client
  • cannot delete the client
36
Q

what can a user group that is not part of the system admin group (named: client domain admins) do?

A

perform common administrative tasks within their own client domain with limited visability into the Relativity environment as a whole

37
Q

what does enabling client domains on a client involve?

A

generating a client domain request and then applying an activation key

38
Q

by enabling a client domain, you ensure that:

A

any content or other Relativity components associated with this client are visible only to a select group of users

39
Q

what must you do before client domains can be enabled on a client?

A

you must create all the objects you want to include within the client domain child objects of the client

40
Q

what instance setting must you configure to view and edit client domain settings?

A

ClientDomainFeatureAvailable to true

41
Q

what group should not be assigned as the workspace administrator group for a given workspace that is part of a Client Domain?

A

the everyone - (client’s name) group that is created after client domains are enabled

42
Q

what is created automatically after client domains are enabled?

A
  • a new Everyone - [Client’s Name] group
  • a unique copy of all resource pools associated with any workspaces under the client domain
  • a client domain admin group that permits its members to perform admin operations within the client domain
  • The Billing statistics - case rollup and Billing statistics - users reports include columns called Client Domain Name and Client Domain Artifact ID
43
Q

what overrides client domain isolation after enabling of client domain?

A

permissions assigned to groups

44
Q

enabling client domains does NOT change:

A

previously configured item level security settings applied to any objects within the client domain.

45
Q

what happens if you try to use an activation key for client domains on a different client?

A

error message; you must select the client that you originally used to generate the request key

46
Q

what are client domain admins?

A

essentially workspace admins for workspaces within the client domain; any limitations are based on the permissions you set for the user group in Relativity that the client domain admin belongs to

47
Q

can client domain admins perform tasks that are exclusive to Relativity System Administrators?

A

No

48
Q

what will happen if you use the Relativity User Import Application to import a Client Domain Admin?

A

the application adds that new user to the Everyone group by default, which will then break the Client Domain security in your Relativity instance

49
Q

if you grant workspace admins within the client domain permission to edit security settings for groups within the client domain, then:

A

they can’t edit permissions on groups outside of the client domain

50
Q

how do you make a client domain admin?

A

a system admin must add them to the client domain admin group

51
Q

what happens If you assign admin permissions to a user group by copying permissions from system admins?

A

you must unset and reset the View Workspace permission to allow the user group to edit the workspace

52
Q

what 5 categories are relativity workspace permissions divided into?

A 
object security
tab visibility
browsers
mass operations
admin operations
53
Q

what does the object security tab list?

A

all workspace objects with their related item-level permissions

54
Q

some object permissions require what other permissions?

A

corresponding tab visibility or browser permission

55
Q

what overrides object-level security permissions?

A

item-level security

56
Q

what permission only appears if Audit is installed and configured?

A

export (mass operations)

57
Q

If a user has view access or greater to the History tab, but doesn’t have permission to View All Audits, then:

A

the user can’t view the history tab

58
Q

where can you edit workspace permissions?

A

using the Workspace Security dialog accessible from the Workspace Details tab

59
Q

what must you have in order to add and remove groups?

A

you must have the Edit Security permission set for the Workspace object and the Add and Delete permissions set for the Groups object (instance level security)

60
Q

if you are in a workspace admin group, what do you need in order to add a group to a workspace?

A

you must have the instance-level Edit permission to the Group object

61
Q

what can you do with instance security?

A

you can apply permissions to system admin groups to limit or grant access to particular system admin objects

62
Q

what do you need to be if you want to edit client and matter for a workspace?

A

a system admin

63
Q

If you grant tab visibility on a tab to a group that doesn’t have view permissions on that object, then:

A

users within that group are unable to view the tab

64
Q

Users will have access to the Workspaces tab even without the:

A

View Admin Repository permission

65
Q

where can you find the group permissions report?

A

in the instance details tab, clicking group permissions report

66
Q

what are the un-editable admin permission settings for the everyone group? (8)

A
  • View User - visibility of user.
  • View View - visibility of views.
  • View Choice - visibility of choice.
  • View Group - visibility of groups.
  • View, Edit,and Add Error - visibility, edit rights, and add rights to errors.
  • View Relativity Script - visibility of Relativity script.
  • View Server - visibility of servers.
  • View Tab Type - visibility of tab type
67
Q

system admins are the only users who can access: (6)

A
  • library applications views
  • library application detail
  • relativity scrippt library view
  • new script page
  • edit script page
  • run script page
68
Q

who is the only user able to grant other users membership into the system admins group?

A

a system admin

69
Q

should you use tab visibility as a sole method of preventing security permissions?

A

no

70
Q

what does the preview security feature allow a system admin to do?

A

interact with Relativity as if they are logged in as a specific user or a member of a specific group, allowing them to easily verify that the correct permissions are applied without logging in to Relativity under a different account

71
Q

If you perform a job while previewing a user’s security settings, then:

A

the audited action is credited to your username and not to the user whose security you were previewing when you started the job

72
Q

does the preview security feature allow the system admin to monitor the actions of a user in real time?

A

No, it only stimulates what the user would see

73
Q

what happens if you wanted to preview security on a member of the system admins group?

A

the preview security button is unavailable, and the favorites menu is disabled during preview security sessions

74
Q

when might you involve a wait time when altering security permissions from overwrite inherited security to inherit security and vice versa?

A

if it is affecting 50,000 records or more

RCA Exam (10 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions