A question list is a series of questions to which users provides their own answers, thus creating a personal Questions and Answers profile. Later, the user has to answer the specified number of questions from the question list to be allowed to perform password self-management tasks, such as resetting password or unlocking account.
You can create question lists in different languages. Then, users can select a preferred language for questions and answers in their personal profile.
Every question list can contain the following types of questions:
QUESTION TYPE DESCRIPTION
Mandatory Questions of this type are an integral part of a user's Q&A profile. Users must provide an answer to each of these questions.
You must specify at least one mandatory question if you want Help Desk operators to be able to unlock user accounts and reset user passwords. Thus, a user must answer a randomly selected mandatory question before help desk operator can reset the user's password or unlock the user's account.
Optional Users can decide for themselves whether they want to use any questions of this type in their Q&A profile.
For users to be able to create their personal Questions and Answers profiles, you must specify at least one question in a question list.
To create and configure a question list
1. Open the Administration site by typing the Administration site URL in the address bar of your Web browser. By default, the URL is http://<ComputerName>/QPM/Admin/.
2. On the Administration site home page, click Managed Domains, and on the Managed Domains page, click the domain for which you want to create a question list, and then click the Questions tab.
3. On the Questions tab, make the list of languages for which you want to create question lists by selecting one language at a time in the Add a language into the list and clicking Add. 4. On the Questions tab under Language, click the language for which you want to create a
question list.
5. On the Configure Question List page, specify the following options as required:
User-defined A question that must be composed by the user. Help Desk authentication Security question used by Help Desk to verify a user's
identity when resetting the user's password or unlocking the user's account. This question is not configurable, and is included in users' Q&A profiles if you select the Operators must verify user identity option on the Help Desk site settings page. For more information about this option, see “Configuring Help Desk Site Settings” on page 20.
User's answers to this type of questions are always stored using reversible encryption. For information about changing cryptographic and hashing algorithms for configuration data storage, see Quick Start Guide.
OPTION DESCRIPTION
Make questions in this language unavailable to
users Select this check box to temporarily prevent users from creating or updating their Q&A profiles using the question list language
Mandatory questions Click the Add button under the Mandatory questions list box, and then type a question and press ENTER.
Optional questions Click the Add button under the Optional questions list box, and then type a question and press ENTER. To add more optional questions, repeat this step.
Under Users must answer this number of optional questions to register, set the number of optional questions that a user must answer to register.
Users must answer this number of optional
questions to register Set the required number of optional questions that a user must answer to create his Questions and Answers profile.
6. Click Save.
7. Repeat steps 4—6 for each language in the language list.
Configuring Questions and Answers Policy
This policy allows you to define settings and requirements for user’s questions and answers. For example, you can prevent users from using the same answer for multiple questions. Questions and answers that do not comply with the policy will not be accepted.
To configure Questions and Answers policy
1. Connect to the Administration site by typing the Administration site URL in the address bar of your Web browser. By default, the URL is http://<ComputerName>/QPM/Admin/.
2. Click Manage Domains.
3. On the Managed Domains page, click a domain, and then click the Q&A Policy tab. 4. On the Q&A Policy tab, specify the following options:
Users must configure this number of
user-defined questions Set the required number of user-defined questions that a user must specify to create their Questions and Answers profile.
Number of questions that users must answer to
register Set the required number of optional questions that a user must answer to create their Questions and Answers profile.
Number of questions from user’s Q&A profile that a user must answer to reset his password or unlock his account
Set the number of questions that are presented to users when they reset their password or unlock their account, by doing one of the following: Click All questions from user’s Q&A profile to have users answer all the questions from their profiles.
Click Specified number of randomly selected questions, and then set the number of questions required to reset password and to unlock account.
Modifying a question list does not affect existing personal Questions or Answers profiles unless the users have to update their profiles as a result of the settings that require users to update Q&A profiles when the question list is modified.
OPTION DESCRIPTION
Minimum length of answer Set the least number of characters that users' answers can contain.
Minimum length of user-defined questions Set the least number of characters that users' questions can contain.
Reject the same answers for different questions Select to prevent users from specifying same answers for different questions.
Reject answers that are parts of the
corresponding questions Select to prevent users from specifying answers that are parts of the corresponding questions. Store answers using reversible encryption Select to store users' answers using reversible
encryption.
5. Click Save.