UiPath-ADPv1 Attended Automation Practice Question
When designing an Attended Automation for a customer service team, you must ensure that user credentials and sensitive PII are handled securely during interaction. Which TWO practices are recommended for maintaining security in attended contexts?
⚠ Common exam trap
Candidates often think standard string variables or standard UI logging are sufficient for handling sensitive PII, overlooking the strict necessity of SecureString and input masking.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use the SecureString type for all variables holding PII
Security in attended automation relies on minimizing the exposure of sensitive data and ensuring that the human user maintains control over their own authentication. By using SecureString and limiting the robot's ability to access sensitive input fields directly, developers prevent data leakage. These practices are critical because the robot operates within the user's session, making it a potential target for malicious actors or accidental exposure during shared screen scenarios.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use the Get Password activity to retrieve sensitive data from local variables
Why it's wrong here
Storing sensitive data in local variables is insecure as they can be easily inspected during debugging or in the logs. Secure strings should be passed directly to secure input fields or handled through Orchestrator credentials rather than being stored in standard string variables within the project.
- ✓
Use the SecureString type for all variables holding PII
Why this is correct
SecureString ensures that sensitive information is encrypted in memory, protecting it from being easily read by unauthorized processes or memory dumps. This is a vital security layer in attended automations where the robot frequently processes user-specific data that must remain confidential during the workflow execution.
- ✗
Store user passwords in a plain text configuration file for quick access
Why it's wrong here
Storing passwords in plain text is a severe security violation that exposes credentials to anyone with read access to the file system. In an attended environment, the user should provide their own credentials dynamically, or they should be retrieved securely from the Orchestrator credential store.
- ✓
Mask sensitive input fields within custom forms
Why this is correct
Masking input fields, such as password boxes, prevents the sensitive data from being visible on the screen during the interaction. This is crucial in attended automation to prevent shoulder surfing or screen recording software from capturing sensitive information while the user enters data during the robot interaction.
- ✗
Disable the Robot log output globally to prevent data leakage
Why it's wrong here
Disabling logs globally makes troubleshooting impossible and violates audit requirements. Instead of disabling logging, developers should use the 'Private' property on specific activities that handle sensitive data to ensure those specific values are not recorded in the execution logs while keeping general logs active for monitoring.
About these practice questions
One of 276 original UiPath-ADPv1 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official UiPath exam blueprint
This UiPath-ADPv1 practice question is part of Courseiva's free UiPath certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the UiPath-ADPv1 exam.