I85PREP
⌘ K
Blue Prism Technical Architect study materials
Blue Prism Technical Architect study resources

Blue Prism Technical Architect practice questions

One question at a time. Build your Blue Prism Technical Architect understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Blue Prism Architecture and Infrastructure

In a Blue Prism environment, what is the primary role of the interactive client?

  1. It schedules and queues work items for unattended execution.
  2. It provides the runtime and design environment a developer or robot uses. Correct answer.
  3. It brokers database connections between runtime resources.
  4. It stores process and object definitions centrally for all users.

Explanation

The interactive client is the desktop application where developers build processes and objects and where runtime resources execute them. It connects to the central database for definitions and configuration but does not itself host the shared repository.

Question 2Blue Prism Architecture and Infrastructure

Which Blue Prism component is responsible for managing work queues and scheduling so that clients do not connect directly to the database?

  1. The interactive client
  2. The application server Correct answer.
  3. The credential manager
  4. The runtime resource

Explanation

The application server sits between clients and the database, handling connections, work queue operations, and scheduling. This design improves scalability and lets clients operate without direct database access.

Question 3Blue Prism Architecture and Infrastructure

What is the purpose of a runtime resource in a Blue Prism digital workforce?

  1. To provide a web interface for business users.
  2. To execute processes and objects on behalf of the control room. Correct answer.
  3. To compile process diagrams into executable code.
  4. To host the central database of process definitions.

Explanation

Runtime resources are the machines and sessions that actually run automation under the direction of the control room. They connect to the application server or database and pick up work assigned to them.

Question 4Blue Prism Architecture and Infrastructure

Which statement best describes the function of the Blue Prism control room?

  1. It is where credentials are encrypted and stored.
  2. It is where the database schema is defined and migrated.
  3. It is where administrators monitor sessions, manage queues, and schedule processes. Correct answer.
  4. It is where developers create and debug business objects.

Explanation

The control room is the operational console for monitoring and controlling the digital workforce. Administrators use it to view sessions, manage work queues, and configure schedules.

Question 5Blue Prism Architecture and Infrastructure

A developer needs to run a process on a machine that has no interactive login session. Which Blue Prism capability supports this?

  1. Running the process using the credential manager console.
  2. Running the process through the control room's queue viewer.
  3. Running the process as an unattended runtime resource. Correct answer.
  4. Running the process in debug mode from the studio.

Explanation

Unattended runtime resources execute processes without a logged-in human user, typically on dedicated automation machines. Debug mode and the other tools require an interactive client session.

Question 6Blue Prism Architecture and Infrastructure

Why does Blue Prism recommend separating the database tier from the client tier in a production architecture?

  1. To eliminate the need for runtime resources.
  2. To reduce the number of licenses required.
  3. To allow processes to be written in multiple programming languages.
  4. To improve scalability, security, and resilience of the platform. Correct answer.

Explanation

A dedicated database tier centralizes data, supports concurrent clients, and allows security and backup controls to be applied in one place. This separation improves scalability and resilience compared with co-locating everything on one machine.

Question 7Blue Prism Architecture and Infrastructure

What does a Blue Prism license typically control in an enterprise deployment?

  1. The number of work items a queue can hold.
  2. The maximum size of the database.
  3. The number of concurrent runtime sessions and design seats. Correct answer.
  4. The network bandwidth available to clients.

Explanation

Blue Prism licensing governs how many runtime sessions and interactive design users can operate concurrently. Database size, queue capacity, and bandwidth are governed by infrastructure, not licensing.

Question 8Blue Prism Architecture and Infrastructure

Which component should be used to store and retrieve passwords used by automation instead of embedding them in process logic?

  1. The credential manager Correct answer.
  2. The environment variable store
  3. The audit log
  4. The work queue

Explanation

A credential manager securely stores secrets and returns them to processes at runtime on request. Embedding passwords in process logic exposes them to anyone who can view the process.

Question 9Blue Prism Architecture and Infrastructure

An organization wants high availability for its Blue Prism database. Which approach best addresses this requirement?

  1. Deploying additional runtime resources on the same host.
  2. Increasing the number of work queues.
  3. Configuring database mirroring or an availability group with failover. Correct answer.
  4. Running the interactive client on the database server.

Explanation

High availability of the data tier is achieved through database technologies such as mirroring or Always On availability groups with automatic failover. Adding runtime resources or queues does not protect against database failure.

Question 10Blue Prism Architecture and Infrastructure

A Blue Prism environment must support multiple teams building processes against one shared repository. Which deployment characteristic enables this?

  1. All clients connect to a single shared Blue Prism database. Correct answer.
  2. Each developer keeps process definitions only on a local drive.
  3. Each team runs its own standalone database.
  4. Processes are exported and emailed between developers.

Explanation

A single shared database provides a common repository so multiple developers can work with consistent definitions. Separate databases or local-only storage cause divergence and integration problems.

Question 11Blue Prism Architecture and Infrastructure

What is the recommended purpose of a development, test, and production environment split in Blue Prism?

  1. To allow developers to test changes without affecting live automation. Correct answer.
  2. To avoid using a credential manager.
  3. To eliminate the need for an application server.
  4. To reduce the number of runtime resources needed.

Explanation

Separate environments let changes be built and validated before promotion to production, protecting live operations. This is a standard release-management practice and does not remove the need for other components.

Question 12Blue Prism Architecture and Infrastructure

A process must run on a schedule every weekday at 06:00 without human intervention. Which Blue Prism feature should be configured?

  1. A retry limit on the process.
  2. A schedule in the control room. Correct answer.
  3. A startup parameter in the object.
  4. A work queue with a high priority.

Explanation

Schedules in the control room trigger processes at defined times on assigned resources. Work queue priority, startup parameters, and retry limits affect execution behavior but do not trigger time-based execution.

Question 13Blue Prism Architecture and Infrastructure

How should Blue Prism runtime resources be sized for a process that performs heavy UI automation?

  1. Based on CPU, memory, and screen session requirements of the target applications. Correct answer.
  2. Based only on the number of developers.
  3. Based solely on the number of work queues.
  4. Based on database transaction throughput only.

Explanation

UI automation consumes CPU and memory and requires an interactive desktop session, so resource sizing must reflect those demands. Database throughput and developer counts do not determine runtime capacity for UI work.

Question 14Blue Prism Architecture and Infrastructure

Which practice best protects the confidentiality of data used by Blue Prism processes?

  1. Sharing a single administrator account across the team.
  2. Storing credentials in process notes for easy reference.
  3. Encrypting sensitive data at rest and in transit and limiting access by role. Correct answer.
  4. Disabling audit logging to reduce database load.

Explanation

Confidentiality is maintained by encrypting sensitive data and enforcing role-based access controls. Storing secrets in notes, sharing accounts, and disabling audit logs all increase exposure.

Question 15Blue Prism Architecture and Infrastructure

A work queue is configured with a maximum retry count. What happens when an item exceeds that count?

  1. The process is terminated and restarted.
  2. The item is moved to a new queue automatically.
  3. The item is marked as an exception and no longer retried. Correct answer.
  4. The item is deleted from the queue automatically.

Explanation

When an item fails more times than the configured retry limit, it is flagged as an exception so it can be reviewed rather than retried indefinitely. It remains in the queue in an exception state for investigation.

Question 16Blue Prism Architecture and Infrastructure

Which Blue Prism component records actions performed during process execution for compliance purposes?

  1. The credential manager
  2. The audit log Correct answer.
  3. The schedule
  4. The work queue

Explanation

The audit log records security-relevant and operational events, supporting compliance and forensic review. Work queues, credential managers, and schedules serve different purposes.

Question 17Blue Prism Architecture and Infrastructure

An architect is designing a Blue Prism deployment for a large enterprise with many runtime resources. Why is an application server preferred over direct database connections from each client?

  1. It eliminates the need for scheduling.
  2. It removes the need for a database entirely.
  3. It allows processes to run without runtime resources.
  4. It centralizes connection management and improves scalability and security. Correct answer.

Explanation

Routing client connections through an application server centralizes connection pooling and access control, improving scalability and security. It does not remove the database, runtime resources, or scheduling.

Question 18Blue Prism Architecture and Infrastructure

A process intermittently fails when the target application is slow to respond. Which architectural approach best improves resilience?

  1. Increasing the number of work queues.
  2. Removing all timeouts so the process waits indefinitely.
  3. Running the process only in debug mode.
  4. Adding configurable timeouts and retry logic around application interactions. Correct answer.

Explanation

Configurable timeouts and retries let the automation handle transient slowness without hanging or failing permanently. Removing timeouts risks indefinite waits, and the other options do not address responsiveness.

Question 19Blue Prism Architecture and Infrastructure

Which factor most influences whether a process should run attended rather than unattended?

  1. The number of schedules configured.
  2. Whether a human must interact with the automation during execution. Correct answer.
  3. The size of the database.
  4. The number of objects used in the process.

Explanation

Attended automation is chosen when a human collaborates with or triggers the process during their work, whereas unattended runs without human involvement. Object count, database size, and schedule count do not determine the mode.

Question 20Blue Prism Architecture and Infrastructure

What is the recommended approach for backing up a Blue Prism production database?

  1. Use standard database backup procedures with tested restore processes. Correct answer.
  2. Rely on runtime resources to hold copies of process definitions.
  3. Export processes manually whenever a change is made.
  4. Disable backups to improve runtime performance.

Explanation

The Blue Prism database should be protected using the database platform's backup and restore capabilities, with restores tested regularly. Runtime resources and manual exports are not reliable backups.

Question 21Blue Prism Architecture and Infrastructure

An architect must ensure that only approved processes run in production. Which control best achieves this?

  1. Disabling the audit log in production.
  2. Enforcing a release process with role-based permissions and environment promotion. Correct answer.
  3. Sharing administrator credentials with all developers.
  4. Allowing developers to publish directly from their own clients.

Explanation

A controlled release process with role-based permissions ensures only reviewed and approved content reaches production. Direct publishing and shared credentials undermine that control.

Question 22Blue Prism Architecture and Infrastructure

A Blue Prism deployment experiences contention on the database during peak load. Which combination of measures best addresses the issue?

  1. Introducing an application server, tuning indexes, and archiving completed queue data. Correct answer.
  2. Reducing the number of runtime resources.
  3. Adding more interactive clients on the database server.
  4. Increasing the retry count on all queues.

Explanation

Database contention is best addressed by reducing direct connections through an application server, optimizing queries with indexes, and archiving historical queue data. These measures reduce load rather than relocate it.

Question 23Blue Prism Architecture and Infrastructure

Which design decision best supports disaster recovery for a Blue Prism environment with a strict recovery time objective?

  1. Running all runtime resources on a single physical host.
  2. Maintaining a replicated standby database and documented failover procedures. Correct answer.
  3. Storing process definitions only on developer laptops.
  4. Relying on manual rebuild of the database after an outage.

Explanation

A replicated standby with tested failover procedures minimizes recovery time after an outage. Manual rebuilds, local-only copies, and single-host concentration all increase recovery time and risk.

Question 24Blue Prism Architecture and Infrastructure

An architect is evaluating whether to virtualize Blue Prism runtime resources. Which consideration is most important for UI automation workloads?

  1. Ensuring the database runs on the same virtual host.
  2. Ensuring the audit log is disabled to save space.
  3. Ensuring each runtime session has a usable interactive desktop and adequate graphics and CPU resources. Correct answer.
  4. Ensuring all runtime resources share one user profile.

Explanation

UI automation requires an interactive desktop session and sufficient compute resources per session, which must be validated in virtualized environments. Co-locating the database, sharing profiles, and disabling auditing introduce risks rather than benefits.

Question 25Blue Prism Architecture and Infrastructure

A security review requires that automation accounts have only the permissions necessary to perform their tasks. Which principle does this reflect?

  1. Defense in depth
  2. Separation of duties
  3. Fail-safe defaults
  4. Least privilege Correct answer.

Explanation

Least privilege means granting only the access required for a role to perform its function. Applying it to automation accounts limits the impact of a compromised or misconfigured process.

Question 26Blue Prism Architecture and Infrastructure

In a Blue Prism architecture, which component is responsible for executing the published processes on a machine where no interactive user is working?

  1. The application server that brokers client connections
  2. The database server that stores process definitions
  3. The runtime resource running under a service account Correct answer.
  4. The interactive client used by process authors

Explanation

Runtime resources are the execution engines that run published processes and business objects, and they can operate unattended under a dedicated service account without a logged-in interactive user. Interactive clients are for design and control work by people, while the application server and database support connectivity and persistence rather than execution.

Question 27Blue Prism Architecture and Infrastructure

What is the primary role of the Blue Prism application server in a multi-client deployment?

  1. It stores the audit trail in flat files on the local disk
  2. It schedules process timetables independently of the database
  3. It brokers connections between clients and the database and supports load distribution Correct answer.
  4. It compiles business objects into executable binaries

Explanation

The application server sits between clients and the database, managing connections and helping distribute load so that many clients and runtime resources can work concurrently. It does not compile binaries or hold authoritative scheduling and audit data, which live in the database.

Question 28Blue Prism Architecture and Infrastructure

Which statement correctly describes how a Blue Prism environment's connection configuration is typically supplied to clients and runtime resources?

  1. Configuration is embedded in each published process and travels with it
  2. The license server distributes connection strings to all runtime resources
  3. Each machine stores a local connection configuration that points to the application server or database Correct answer.
  4. The database pushes configuration to clients at startup over a broadcast channel

Explanation

Blue Prism machines are configured locally with connection details identifying the application server or database they should use, and this configuration is managed per machine. Processes themselves do not carry infrastructure connection settings, and neither the database nor the license server pushes configuration to clients.

Question 29Blue Prism Architecture and Infrastructure

An architect is planning credentials for runtime resources that must log in to a target application. Which approach best aligns with Blue Prism security guidance?

  1. Store the target application password inside the process so every resource uses identical logic
  2. Use a dedicated credential per resource held in the credential store and referenced at runtime Correct answer.
  3. Configure the resource to prompt an operator for the password at each run
  4. Grant each runtime resource a shared interactive login and rotate it annually

Explanation

Credentials should be held in the Blue Prism credential store and referenced by the process at runtime, with distinct credentials per resource where possible so that access can be traced and revoked individually. Embedding passwords in process logic or sharing a single login undermines accountability and rotation.

Question 30Blue Prism Architecture and Infrastructure

A team reports that runtime resources intermittently lose their connection to the Blue Prism environment during long-running sessions. Which architectural factor should be investigated first?

  1. The number of stages contained in the busiest business object
  2. Network stability and timeout settings between the resource and the application server Correct answer.
  3. The color scheme configured for the interactive client
  4. The version of the spreadsheet application being automated

Explanation

Connection loss during long sessions usually points to network reliability or timeout and keep-alive settings on the path between the runtime resource and the application server. Process complexity, client appearance and the target application version do not govern the infrastructure session itself.

Question 31Blue Prism Architecture and Infrastructure

Which measure best limits the impact of a single compromised runtime resource on the wider Blue Prism environment?

  1. Disabling audit logging on runtime resources to reduce database load
  2. Giving every runtime resource full administrator rights to simplify support
  3. Sharing one service account across all runtime resources in the environment
  4. Assigning the resource a role with only the permissions needed for its assigned processes Correct answer.

Explanation

Least-privilege role assignment confines what a compromised resource can reach, because Blue Prism permissions are enforced through roles tied to users and resources. Broad administrative rights or a shared account would widen the blast radius, and reducing audit logging removes the evidence needed to investigate.

Question 32Blue Prism Architecture and Infrastructure

An organization wants to run Blue Prism processes on machines that are powered off outside business hours to save cost. Which architectural consideration matters most?

  1. Runtime resources must be available whenever a scheduled session is due to start Correct answer.
  2. The database must be restarted whenever a resource is powered on
  3. The interactive client must remain open on each machine at all times
  4. Business objects must be recompiled after each power cycle

Explanation

Scheduling depends on runtime resources being online and connected at the moment a session is due, so power management must be aligned with the timetable or sessions will fail to start. Interactive clients need not stay open, the database is independent of resource power state, and objects are not recompiled on power cycles.

Question 33Blue Prism Architecture and Infrastructure

Which practice best supports traceability when several runtime resources execute work from the same queue?

  1. Recording the resource identity on each queue item as it is locked and completed Correct answer.
  2. Running all resources under one shared login so queue items look consistent
  3. Assigning queue items manually to named operators before each run
  4. Disabling queue logging to reduce contention on the database

Explanation

Queue items carry the identity of the resource that locked and completed them, which provides traceability when many resources draw from the same queue. A shared login destroys that attribution, and reducing logging or manual assignment does not improve traceability.

Question 34Blue Prism Architecture and Infrastructure

An architect must decide where to place the Blue Prism database relative to the application servers. Which placement best supports performance and resilience?

  1. On a shared file server mounted by all clients
  2. On a workstation used by the lead developer for quick access
  3. On the same host as the busiest runtime resource to reduce network hops
  4. On a dedicated database tier with resilient storage and network proximity to the application servers Correct answer.

Explanation

A dedicated database tier with resilient storage and low-latency connectivity to the application servers gives predictable performance and protects the system of record. Co-locating with a runtime resource, using a file share, or hosting on a workstation all compromise availability and throughput.

Question 35Blue Prism Architecture and Infrastructure

A Blue Prism environment must support a growing number of runtime resources without overloading a single application server. Which design choice addresses this most directly?

  1. Reducing the number of published processes in the environment
  2. Moving the credential store onto the runtime resources
  3. Increasing the memory of each interactive client workstation
  4. Deploying multiple application servers behind a load-balancing arrangement Correct answer.

Explanation

Multiple application servers with load balancing spread client and resource connections so that no single server becomes the bottleneck as the estate grows. Client memory, process counts and credential placement do not add connection capacity at the server tier.

Question 36Blue Prism Architecture and Infrastructure

An architect is defining monitoring for a Blue Prism production environment. Which set of signals best indicates infrastructure health before users notice problems?

  1. Number of stages in the longest process and average object size
  2. Frequency of process exports and number of interactive client licenses
  3. Count of business objects in each release and number of process authors
  4. Database response times, application server availability and runtime resource connection state Correct answer.

Explanation

Database responsiveness, application server availability and the connection state of runtime resources are the leading indicators of infrastructure health and degrade before users see failures. Object counts, stage counts and export frequency describe the solution's content rather than the health of the platform.

Question 37Robotic Operating Model (ROM) and Governance

In the Blue Prism Robotic Operating Model, which role is accountable for approving the automation design standards and the overall automation roadmap across the enterprise?

  1. The centralized automation governance board or center of excellence leadership Correct answer.
  2. The business unit's operational team leader
  3. The individual process analyst assigned to a single process
  4. The infrastructure engineer who maintains runtime resources

Explanation

The ROM places enterprise-level accountability for standards, roadmap, and pipeline decisions with a central governance body, typically the automation CoE or its steering group. Individual delivery roles operate within those standards rather than setting them. Operational and infrastructure roles support execution but do not own enterprise design authority.

Question 38Robotic Operating Model (ROM) and Governance

Which statement best describes the purpose of the ROM's process pipeline (Pipeline of Processes)?

  1. It lists the credentials used by each digital worker at runtime
  2. It ranks candidate processes by automation value and feasibility so effort is sequenced deliberately Correct answer.
  3. It records the daily work queue items awaiting human review
  4. It stores the compiled release packages that are deployed to runtime resources

Explanation

The pipeline is a governance artifact that captures candidate processes, their assessed benefit and complexity, and their position in the delivery sequence. It gives stakeholders a shared view of demand and capacity so delivery effort is prioritized. It is not a technical store of packages, queue items, or credentials.

Question 39Robotic Operating Model (ROM) and Governance

A program wants every automation change to be traceable to an approved requirement and a named approver before it reaches production. Which ROM control area primarily delivers this?

  1. Benefit realization tracking
  2. Change and release management Correct answer.
  3. Resource capacity planning
  4. Operational support desk

Explanation

Change and release management defines how modifications are requested, assessed, approved, tested, and deployed. It creates the audit trail linking changes to requirements and approvers. Capacity planning, support, and benefit tracking are separate capabilities with different objectives.

Question 40Robotic Operating Model (ROM) and Governance

What is the primary reason the ROM separates the role of the process analyst from the role of the solution designer?

  1. To ensure both roles are performed by the same person for continuity
  2. To reduce the total headcount required on an automation delivery team
  3. To keep business process knowledge and technical design decisions under distinct ownership and review Correct answer.
  4. To satisfy a licensing requirement imposed by the vendor

Explanation

Separating business-facing process definition from technical solution design creates independent ownership and a natural review point. It reduces the risk that a single person's assumptions go unchallenged. The split is a control and quality measure, not a licensing or headcount rule, and combining the roles undermines that control.

Question 41Robotic Operating Model (ROM) and Governance

Which artifact in the ROM governance set records the agreed scope, exceptions, and business rules that a digital worker must follow for one process?

  1. The process definition document Correct answer.
  2. The capacity forecast
  3. The incident log
  4. The operational runbook

Explanation

The process definition document captures scope, step-level business rules, exceptions, and expected outcomes, and it is the reference for design and testing. The runbook describes how to operate the live solution, while forecasts and incident logs are operational records.

Question 42Robotic Operating Model (ROM) and Governance

In the ROM, what distinguishes a centralized delivery model from a federated one?

  1. Federated places all design authority in a single enterprise architecture group
  2. Centralized requires each business unit to build and run its own automation team independently
  3. Federated eliminates the need for any shared standards across business units
  4. Centralized concentrates specialist automation capability in one team that serves the whole organization Correct answer.

Explanation

A centralized model pools scarce specialist skills in a single team that delivers across the enterprise, which suits early maturity. A federated model distributes delivery capability to business units while retaining shared standards and governance. Neither model removes the need for common standards.

Question 43Robotic Operating Model (ROM) and Governance

What is the main governance purpose of a digital worker's role-based access definition?

  1. It sets the maximum number of queue items processed per hour
  2. It determines the salary band of the human staff who supervise the digital worker
  3. It specifies the screen resolution used during unattended execution
  4. It constrains each digital worker to only the systems and actions its process requires Correct answer.

Explanation

Least-privilege access definitions limit a digital worker to the applications and actions its process needs, reducing blast radius if a process misbehaves. They are a security control and are reviewed alongside process change. They do not govern HR matters, display settings, or throughput limits.

Question 44Robotic Operating Model (ROM) and Governance

Which group should own the decision to retire a live automated process from service?

  1. The digital worker itself, based on runtime error frequency
  2. The automation governance forum, using defined retirement criteria and impact assessment Correct answer.
  3. The infrastructure team, based on server utilization thresholds
  4. The vendor support desk, based on license renewal dates

Explanation

Retirement is a governance decision that weighs business need, benefit, risk, and dependency, so it belongs with the accountable forum using agreed criteria. Runtime errors, server load, and license dates are inputs that may trigger review but do not authorize retirement.

Question 45Robotic Operating Model (ROM) and Governance

A newly formed automation team has strong technical skills but no agreed intake process, so business units submit requests informally to individual developers. Which ROM capability gap is most directly indicated?

  1. The release packaging standards are too strict
  2. The credential management process is immature
  3. The runtime resource capacity is undersized
  4. The pipeline of processes and demand management are not yet operating Correct answer.

Explanation

Informal requests routed to individuals show there is no governed intake and prioritization mechanism, which is exactly what the pipeline and demand management provide. Credential handling, capacity sizing, and packaging standards address different problems and would not explain informal demand capture.

Question 46Robotic Operating Model (ROM) and Governance

During a design authority review, a developer proposes hard-coding a system password in a process so it can run unattended overnight. What is the correct governance response?

  1. Approve it if the process runs only on a dedicated virtual machine
  2. Approve it temporarily provided the password is changed every quarter
  3. Reject the design and require the credential to be retrieved from the approved credential store at runtime Correct answer.
  4. Approve it if the password is obfuscated within the process logic

Explanation

Credentials must be held in the approved secure store and retrieved at runtime so they are not exposed in process logic or release packages. Rotation frequency, machine dedication, or obfuscation does not remove the exposure created by embedding a secret. Design authority should reject the pattern outright.

Question 47Robotic Operating Model (ROM) and Governance

An operations manager asks why a digital worker cannot simply be given the same broad access as the human team it supports. Which reasoning best reflects ROM guidance?

  1. Digital workers must always have broader access than humans to handle unexpected screens
  2. Digital workers should follow least privilege because their actions are scripted and can repeat errors at scale Correct answer.
  3. Access should mirror the most senior human so escalations can be automated
  4. Access scope has no governance implications for digital workers

Explanation

Scripted execution means a misconfigured step can repeat a harmful action many times, so access is deliberately narrowed to what the process requires. Broader access increases risk without adding process value. Access scope for digital workers is a governed design decision with clear security implications.

Question 48Robotic Operating Model (ROM) and Governance

A process has been live for six months and the business has changed a downstream system's screen layout, requiring process updates. Which governance path should be followed?

  1. Allow the support analyst to edit the production process directly to restore service quickly
  2. Raise a change request, assess impact, update and test in a controlled environment, then deploy through release management Correct answer.
  3. Ask the business unit to perform the manual work permanently without recording the change
  4. Suspend the process indefinitely and remove it from the pipeline

Explanation

Environmental changes follow the standard change and release path so that impact is assessed, testing is evidenced, and deployment is traceable. Direct production edits bypass testing and audit controls. Permanent reversion to manual work is a retirement or redesign decision that must be recorded, not an informal workaround.

Question 49Robotic Operating Model (ROM) and Governance

Which set of measures best evidences that a ROM governance model is functioning, rather than merely documented?

  1. Count of processes identified and number of slides in steering decks
  2. Total licenses purchased and number of developers trained
  3. Number of pages in the governance manual and count of meetings held
  4. Pipeline throughput, change success rate, incident recurrence, and realized benefit against forecast Correct answer.

Explanation

Effective governance is shown by outcomes: demand flowing through a prioritized pipeline, changes deploying successfully, incidents not recurring, and benefits being realized. Documentation volume, meeting counts, license purchases, and candidate lists are activity or input measures that can rise without any governance effect.

Question 50Robotic Operating Model (ROM) and Governance

A business unit wants to automate a process that is high value but has unstable, frequently changing rules. What is the most appropriate governance decision?

  1. Reject the process permanently and remove it from consideration
  2. Assign the process to the least experienced developer to save cost
  3. Defer or stage the automation until rule stability improves, and record the rationale in the pipeline Correct answer.
  4. Approve immediate delivery with no additional design controls

Explanation

High rule volatility raises maintenance cost and change risk, so governance typically defers or phases the work until stability improves, documenting the reasoning for later review. Permanent rejection ignores potential future value, and approving without added controls or assigning weak skills increases delivery risk.