Question 1
Succeed Insurance had an embarrassing event last month that had potential legal ramifications. One of their Customer Service Representatives (CSR) shared details of a celebrity's personal auto claim on social medi
a. Fortunately for Succeed, the celebrity decided not to pursue legal actions as long as Succeed agreed to resolve the potential for future occurrences within the next 30 days.
Succeed executives immediately reacted to the situation by establishing new guidelines regarding claim security. The Business Analyst (BA) assigned to the project researched ClaimCenter base product capabilities and held several requirements gathering sessions designed to document their strategy. The new requirements indicate that only authorized users should be looking at celebrity claims.
Which two features should be used to meet the new requirements? (Choose two.)
To restrict access to sensitive claims (such as those involving celebrities) so that 'only authorized users' can view them, a Business Analyst must utilize the Claim Security features in Guidewire.
Specify Claim Security Types (Option A): The first step is to define the classification of the claim. The system uses the ClaimSecurityType typelist. The BA would add a new typekey (e.g., 'Celebrity' or 'High Profile') or use an existing one (e.g., 'Sensitive') to flag these specific claims.
Create/Assign Access Profiles (Option E): Access control in Guidewire is managed through Access Profiles (sometimes referred to within Role configurations). An Access Profile maps specific Security Levels (like the 'Celebrity' type defined above) to permissions. To meet the requirement, the BA defines an Access Profile that grants 'View' permission for the 'Celebrity' security type and assigns this profile only to the authorized users (or roles). Users without this specific Access Profile will be unable to search for or view the claim.
Why other options are incorrect:
Authority Profiles (B): In Guidewire terminology, 'Authority' refers strictly to Financial Authority (limits on reserves and payments), not data access visibility.
Hide secure fields (C): This refers to Field Level Security (masking specific data like a Tax ID). The requirement is to restrict access to the entire claim, not just specific fields.
Tracking rules (D): While 'Claim Access Auditing' (tracking history) is often enabled for sensitive claims, it is a detective control, not a preventive one. The requirement specifies that unauthorized users should not be looking at the claim at all, which requires the Access Profiles (preventive control).

