Question bank
Blue Prism Certified Technical Architect
42 Blue Prism Certified Technical Architect questions with the correct answer and a written explanation, organised across 5 exam domains.
- 42 questions
- 5 domains
- Foundation level
certilumQuestion index
Jump straight to any question. Answers and explanations are inline.
Advanced Implementation and Support
7 questions in this domain
- Question 1Single Choice
Which spying mode should be used to interact with a Java Swing application in Blue Prism?
- AUI Automation
- BWin32 (MSAA)Correct answer
- CHTML
- DAccessibility
Why this is the answer
Java Swing uses AWT/Swing controls accessible via Win32 with MSAA. UI Automation requires .NET/UWP applications.
- Question 2Multiple Select
Which of the following are valid considerations when embedding custom C# code in a Blue Prism Business Object? (Select all that apply.)
- ACode must handle exceptions with try-catch blocks.Correct answer
- BCode can freely use System.Reflection without restrictions.
- CCode should be thread-safe if called from multiple sessions.Correct answer
- DCode can reference any .NET assembly regardless of bitness.
Why this is the answer
Custom code must include error handling, be thread-safe, and avoid dangerous namespaces. Blue Prism runs as 32-bit, so 64-bit DLLs cannot be referenced.
- Question 3Interactive
Refer to the code block. What is the purpose of this custom C# code snippet?
- AIt sends an HTTP GET request using HttpClient.
- BIt decrypts a string using AES algorithm.Correct answer
- CIt reads a file from the file system.
- DIt creates a new Business Object.
Why this is the answer
The code uses System.Security.Cryptography to perform AES decryption, a common reason to embed custom C# when native actions are insufficient.
- Question 4Single Choice
Which Blue Prism component is used to receive incoming REST API calls from external systems?
- AHTTP Utility VBO
- BWeb API ServicesCorrect answer
- CCustom Connector Framework
- DProcess Studio
Why this is the answer
Web API Services (introduced in v6+) expose REST endpoints for external systems to initiate Blue Prism processes. HTTP Utility VBO is for outbound calls.
- Question 5Multiple Select
Which of the following are valid methods for Blue Prism to integrate with external systems? (Select all that apply.)
- AHTTP Utility VBO for REST/SOAPCorrect answer
- BWeb API Services for inbound callsCorrect answer
- CDirect database connection via ODBCCorrect answer
- DCustom C# code in Business ObjectsCorrect answer
Why this is the answer
Blue Prism supports all listed methods: HTTP Utility VBO, Web API Services, database queries via ODBC, and custom C# code for unique integrations.
- Question 6Interactive
Refer to the code block. What type of authentication is being implemented for an API call?
- ABasic Authentication
- BOAuth 2.0 Client CredentialsCorrect answer
- CAPI Key in header
- DNTLM Authentication
Why this is the answer
The code shows token endpoint request with client_id and client_secret, returning an access token. This is the OAuth 2.0 client credentials grant.
- Question 7Single Choice
What is the recommended maximum number of concurrent sessions per Runtime Resource CPU core?
- AEqual to number of cores
- BCores minus oneCorrect answer
- CDouble the cores
- DNo limit
Why this is the answer
Best practice is to limit sessions to the number of logical processors minus one to avoid excessive context switching overhead.
Infrastructure and Security
8 questions in this domain
- Question 8Single Choice
What is the primary requirement for environment isolation in Blue Prism?
- AShare the same SQL Server instance
- BUse separate databases for each environmentCorrect answer
- CUse a single credential store for all environments
- DAllow Runtime Resources to float between environments
Why this is the answer
Each environment must have physically or logically separate databases to ensure isolation and security.
- Question 9Multiple Select
Which of the following are encryption methods used in Blue Prism?
- AAES-256 for data at restCorrect answer
- BTLS 1.2 for data in transitCorrect answer
- CBase64 encoding for credentials
- DMD5 hashing for audit logs
Why this is the answer
Blue Prism uses AES-256 for encryption at rest and supports TLS 1.2 for secure communication.
- Question 10Interactive
Based on the code, which action is recommended for high fragmentation?
- ARun index rebuildCorrect answer
- BUpdate statistics only
- CShrink the database
- DIncrease log file size
Why this is the answer
When fragmentation >30%, index rebuild is needed; the code checks fragmentation level.
- Question 11Single Choice
What is the first step in a Blue Prism upgrade process?
- AUpgrade Runtime Resources
- BPerform a full backupCorrect answer
- CInstall new license keys
- DReconfigure network settings
Why this is the answer
A full infrastructure backup, including database and configurations, is critical before any upgrade.
- Question 12Multiple Select
Which of the following are operational governance policies in Blue Prism?
- ASeparation of DutiesCorrect answer
- BChange and Release ManagementCorrect answer
- CAutomatic database shrinking
- DAudit and LoggingCorrect answer
Why this is the answer
SoD, change management, and audit logging are core governance policies. Database shrinking is not a governance policy.
- Question 13Interactive
Given the release command, which environment should receive the package next?
- ATest environmentCorrect answer
- BProduction environment
- CDevelopment environment
- DPre-production environment
Why this is the answer
After development, release packages are imported into Test for integration and user acceptance testing.
- Question 14Single Choice
Where are credentials securely stored in Blue Prism?
- AProcess variables
- BEnvironmental variables
- CCredential ManagerCorrect answer
- DConfiguration files
Why this is the answer
Blue Prism's Credential Manager stores encrypted credentials and is the recommended secure vault.
- Question 15Multiple Select
Which tasks are part of Blue Prism database maintenance?
- ARebuilding indexesCorrect answer
- BArchiving old session dataCorrect answer
- CChanging database collation weekly
- DManaging transaction log backupsCorrect answer
Why this is the answer
Index rebuilds, data archiving, and log backups are standard maintenance. Collation changes are not routine.
Release Management and DevOps
5 questions in this domain
- Question 16Single Choice
Which Blue Prism tool packages artefacts from one environment and deploys them to another only if the target environment has the same Blue Prism version and existing object dependencies?
- ARelease ManagerCorrect answer
- BALM API
- CEnvironment Manager
- DWork Queue Manager
Why this is the answer
Release Manager (RM) uses a centralized database and creates .bprelease files containing pointers to artefacts. It requires the target environment to have the same Blue Prism version and existing dependencies. External CI/CD tools via ALM API are used for more flexible rollbacks and multi-environment support.
- Question 17Multiple Select
Which of the following are limitations of Blue Prism's native versioning compared to external version control systems? (Select two.)
- AIt does not support branching or merging.Correct answer
- BIt cannot track changes to work queue definitions.
- CIt is stored in the Blue Prism database and cannot be exported to an external system.
- DIt does not provide a comparison tool for reviewing changes.Correct answer
Why this is the answer
Blue Prism's native versioning is sequential and flat; it lacks branching, merging, and a built-in diff viewer (though an external compare tool is available). It does track object versions and can be exported via Release Manager, but it does not natively support parallel development.
- Question 18Interactive
Review the JSON snippet from an Environment Manager baseline export. Which setting would be considered environment-specific and should be parameterised before deployment?
- ADatabaseConnectionStringCorrect answer
- BProcessPriority
- CQueueName
- DLogLevel
Why this is the answer
Database connection strings differ per environment and contain sensitive information. They should be replaced with a placeholder and resolved at deployment time using a secrets manager. ProcessPriority, QueueName, and LogLevel are typically consistent across environments or non-sensitive.
- Question 19Single Choice
What is the main advantage of using an external CI/CD tool (e.g., Azure DevOps) over Blue Prism Release Manager for enforcing approval workflows?
- ARelease Manager can only track a single approval status without multiple approvers.Correct answer
- BRelease Manager does not support any approval workflows at all.
- CExternal tools require less configuration for basic approvals.
- DRelease Manager relies on Windows authentication for approvals, which cannot be delegated.
Why this is the answer
Release Manager provides a simple linear status workflow (New, Tested, Approved, Deployed) but cannot enforce multiple distinct approvers or dynamic approval stages. External CI/CD tools allow pipeline stages with manual gates, group-based approvals, and integration with change management systems.
- Question 20Multiple Select
Which two statements are true about credential management during automated deployments of Blue Prism releases?
- ACredentials can be exported as part of a release package and imported into the target environment.Correct answer
- BCredentials are always stored in plain text in the .bprelease file.
- CThe ALM API allows setting credential values during import.Correct answer
- DCredentials should be stored in the version control system to ensure reproducibility.
Why this is the answer
Release packages can include credentials (they are encrypted in the database, but the exported package contains the encrypted representation). The ALM API's import endpoint supports options to create or update credentials. Storing credentials in VCS is insecure. Credentials are not stored in plain text in the package.
Solution Architecture
12 questions in this domain
- Question 21Single Choice
Which tier architecture is recommended for a production Blue Prism environment to isolate the database from runtime clients?
- A2-tier architecture with combined App Server and Database
- B3-tier architecture with separate Application Server, Interactive Client, and DatabaseCorrect answer
- C1-tier architecture with all components on a single server
- D2-tier architecture with Interactive Client connecting directly to database
Why this is the answer
A 3-tier architecture separates the database, application server, and interactive client, ensuring that runtime components do not have direct database access, which aligns with security best practices for production environments.
- Question 22Multiple Select
Which of the following are valid authentication methods supported by Blue Prism v7? (Select all that apply)
- AActive Directory (AD) authenticationCorrect answer
- BNative Blue Prism authenticationCorrect answer
- COAuth 2.0 with external provider
- DEnterprise Single Sign-On (SSO) using integrated Windows authenticationCorrect answer
Why this is the answer
Blue Prism v7 supports Active Directory authentication, native (internal) authentication, and Enterprise SSO via integrated Windows authentication. OAuth 2.0 is not natively supported.
- Question 23Interactive
Review the following connection string configuration for a Blue Prism Runtime Resource. What is the most likely issue with this setup?
- AThe port 8199 is not the default for runtime connections
- BThe server name points to localhost, which would only work if the Application Server is on the same machineCorrect answer
- CThe encryption setting 'SSL' is invalid
- DThe connection string should use HTTPS instead of TCP
Why this is the answer
Using 'localhost' means the Runtime Resource will only connect to an Application Server running on the same machine. In a typical distributed architecture, the Application Server is remote, so the server name should be the FQDN or IP of the Application Server.
- Question 24Single Choice
What is the purpose of the Blue Prism Authentication Gateway (BPAG)?
- AIt manages license allocation across runtime resources
- BIt provides single sign-on integration with enterprise directories like Active DirectoryCorrect answer
- CIt encrypts all communication between Blue Prism components
- DIt performs automated backup of the Blue Prism configuration database
Why this is the answer
BPAG is a lightweight identity provider that integrates with Active Directory or LDAP to enable single sign-on (SSO) for Blue Prism clients, simplifying user management and supporting multi-factor authentication.
- Question 25Multiple Select
Which of the following are key considerations when designing high availability for a Blue Prism Application Server? (Select all that apply)
- ADeploying multiple Application Servers behind a load balancerCorrect answer
- BConfiguring session affinity (sticky sessions) on the load balancer
- CEnsuring all Application Servers connect to the same databaseCorrect answer
- DUsing a shared file system for application configuration files
Why this is the answer
For high availability, multiple stateless Application Servers are deployed behind a load balancer that does not require session affinity because session state is held in the database. All servers must connect to the same database to ensure consistency.
- Question 26Interactive
Look at the following RBAC excerpt. A user is a member of both 'RPA Developer' and 'RPA Controller' groups. What is the effective permission for 'Manage Credentials' if the Developer role denies it and the Controller role allows it?
- AAllowed, because permissions are cumulative
- BDenied, because a deny permission overrides any allowCorrect answer
- CAllowed, because the Controller role is more senior
- DDenied only if the user is in the Developer group explicitly
Why this is the answer
In Blue Prism's RBAC, deny permissions always override allow permissions. Therefore, if any role denies 'Manage Credentials', the effective permission is denied regardless of other roles.
- Question 27Single Choice
What is the primary purpose of Resource Pools in Blue Prism?
- ATo group runtime resources logically for assignment to processes and environmentsCorrect answer
- BTo store encrypted credentials for automation processes
- CTo manage load balancing between Application Servers
- DTo isolate different versions of the Blue Prism application server
Why this is the answer
Resource Pools logically group runtime resources (bots) so they can be assigned to specific processes, schedules, or environments, enabling controlled allocation and scaling of automation capacity.
- Question 28Multiple Select
Which of the following are best practices for securing Blue Prism inter-component communication? (Select all that apply)
- AUsing TLS 1.2+ for all HTTPS connectionsCorrect answer
- BConfiguring SSL certificates on Application Servers for runtime connectionsCorrect answer
- CAllowing all ports between components to simplify deployment
- DUsing network segmentation to place components in different security zonesCorrect answer
Why this is the answer
Best practices include encrypting communication with TLS 1.2+, deploying certificates for runtime connections (port 8199), and using network segmentation to isolate components. Opening all ports is not secure.
- Question 29Interactive
Examine the following SQL Server Always On configuration for a Blue Prism database. What potential issue does this design have for disaster recovery?
- ASynchronous commit between primary and DR site introduces high latency
- BAsynchronous commit to the DR site may result in data loss if the primary failsCorrect answer
- CThe number of replicas exceeds Blue Prism supported limit
- DThe seeding mode is set to automatic, which is not supported
Why this is the answer
Asynchronous commit to a remote DR site can cause data loss if the primary site fails before replication completes. For zero data loss, synchronous commit is needed, but that may impact performance over long distances.
- Question 30Single Choice
In Blue Prism, what is the key difference between authentication and authorization?
- AAuthentication controls what a user can do; authorization confirms their identity
- BAuthentication verifies identity; authorization determines permitted actionsCorrect answer
- CAuthentication is handled by Active Directory; authorization is always native
- DBoth are the same and managed by the same role
Why this is the answer
Authentication validates who the user is (identity), while authorization determines what actions the user is allowed to perform based on roles and permissions.
- Question 31Multiple Select
Which components are part of a standard Blue Prism solution architecture? (Select all that apply)
- AApplication ServerCorrect answer
- BRuntime ResourceCorrect answer
- CInteractive ClientCorrect answer
- DBlue Prism Hub (optional)Correct answer
Why this is the answer
Core components include the Application Server, Runtime Resources, Interactive Clients, and optionally Blue Prism Hub for web-based access. The database server is also a component but not listed as an option here; Blue Prism Hub is an optional component.
- Question 32Interactive
Review the following permission assignment. RPA Controller role has 'Execute' permission on the 'Invoice Processing' process in the Production environment. Which action is the user allowed to perform?
- AEdit the process code in Studio
- BPublish a new version of the process
- CRun the process from the Control RoomCorrect answer
- DDelete the process from the environment
Why this is the answer
The 'Execute' permission on a process allows the user to run that process from the Control Room, but not to modify, publish new versions, or delete the process.
Solution Design
10 questions in this domain
- Question 33Single Choice
Which of the following best describes the purpose of a Business Object (BO) in Blue Prism?
- AOrchestrate business logic and decision-making.
- BInteract with a single application and expose reusable actions.Correct answer
- CManage work queues and exception handling.
- DStore configuration items and credentials.
Why this is the answer
A Business Object encapsulates a single application or system, providing reusable, atomic actions. Orchestration belongs to the process layer.
- Question 34Multiple Select
Which two statements are correct regarding exception handling in Blue Prism?
- AA single 'Catch All' exception block is recommended for all errors.
- BException blocks should be as narrow as possible.Correct answer
- CThe 'Preserve' stage stops exception propagation.
- DCustom exceptions can be thrown to signal business rule violations.Correct answer
Why this is the answer
Best practice uses specific, narrow exception blocks; Preserve captures details but does not stop propagation. Custom exceptions are valid for business rules.
- Question 35Interactive
Given the following Blue Prism stage sequence inside an exception block: Recover → Preserve → Resume Next. What is the purpose of the 'Resume Next' stage?
- ATo restart the process from the beginning.
- BTo continue execution from the next stage after the exception block.Correct answer
- CTo log the exception and abort the process.
- DTo re-throw the exception to the parent process.
Why this is the answer
Resume Next moves execution to the stage immediately after the exception block, allowing the process to continue with the next step.
- Question 36Single Choice
In Blue Prism, what is the primary function of a work queue in a multi-robot environment?
- AStoring temporary data within a single process.
- BProviding persistent storage for transaction records.
- CEnabling load balancing by distributing items across robots.Correct answer
- DReplacing the need for exception handling.
Why this is the answer
Work queues allow multiple robots to pick and process items concurrently, balancing the load and preventing duplicate work.
- Question 37Multiple Select
Which two practices are recommended when designing reusable Business Objects?
- AEmbed business logic inside BO actions for efficiency.
- BExpose implementation details like spy modes for flexibility.
- CKeep actions atomic and focused on a single operation.Correct answer
- DUse input parameters to abstract environment-specific values.Correct answer
Why this is the answer
Atomic actions and parameterization promote reusability. Business logic belongs in the process layer, not the BO. Spy modes should not be exposed.
- Question 38Interactive
Examine the Blue Prism stage: 'Mark Item as Exception' with 'Retry Attempts' set to 3. What is the effect of this property?
- AThe item will be automatically retried after 3 seconds.
- BThe item will be moved to a dead-letter queue after 3 attempts.
- CThe item will be retried up to 3 times, returning to Pending state after each failure.Correct answer
- DThe item will be permanently removed from the queue after 3 attempts.
Why this is the answer
The 'Retry Attempts' property defines the maximum number of times the queue will automatically retry the item before it remains in Exception state.
- Question 39Single Choice
What is the recommended location for storing credentials in a Blue Prism solution?
- AEnvironment Variables
- BConfiguration Items
- CCredential ManagerCorrect answer
- DHardcoded in data items
Why this is the answer
Credential Manager provides encrypted storage for usernames and passwords. Environment variables and hardcoding are insecure.
- Question 40Multiple Select
Which two statements are true about collections in Blue Prism?
- ACollections persist in the database after the process ends.
- BCollections can be filtered using the 'Filter' stage.Correct answer
- CCollections are case-sensitive when filtering text.Correct answer
- DCollections support multi-robot access.
Why this is the answer
Collections are in-memory, not persistent, and are local to a single process. Filter stage works but is case-sensitive.
- Question 41Interactive
Analyze this exception handling pattern: a local Exception stage inside a sub-page. What is the advantage of handling exceptions at the lowest possible level?
- AIt reduces the need for process-level logging.
- BIt allows for targeted recovery actions without affecting other parts.Correct answer
- CIt ensures that all errors are caught by a global handler.
- DIt improves performance by skipping exception propagation.
Why this is the answer
Low-level exception handling enables precise recovery and avoids disturbing other parts of the process, following best practice of narrow exception blocks.
- Question 42Single Choice
In Blue Prism, what does the 'Preserve' stage do when used inside an exception block?
- AIt stops the exception from propagating further.
- BIt captures the exception details and allows custom handling before re-throwing.Correct answer
- CIt automatically recovers the process from the error.
- DIt deletes the exception from the log.
Why this is the answer
Preserve captures the exception's details (message, stack) and continues the flow, typically followed by logging or re-throwing. It does not stop propagation.
Frequently asked questions
Everything about the Blue Prism Certified Technical Architect question bank and how to use it.