The scenario described is a classic implementation of Windows Integrated Authentication (WIA) , a form of Single Sign-On (SSO). As detailed in the Archer Installation and Troubleshooting guides, when Archer is configured for Windows Integrated SSO, it leverages the Kerberos or NTLM protocol. Since Sarah has already authenticated to the Windows Domain at the start of her shift, her browser passes her "security token" directly to the Archer web server (IIS).

The Archer Control Panel (ACP) must be configured to recognize the domain, and the user's Archer account must have their Windows account name (e.g., DOMAIN\Username) populated in the "Domain Account" field. This creates a seamless "handshake" that bypasses the Archer login screen entirely. Unlike a password manager (Option C), which still technically "types" the details, or biometrics (Option B), which requires a new physical scan, Windows Integrated SSO provides a passive experience where the existing OS-level authentication is trusted by the application, drastically improving user workflow and productivity.

As detailed in the Archer Installation and Troubleshooting guide, the Archer Configuration Service is the foundational "heartbeat" of the platform. While the Job Engine (Option D) and Queuing Service (Option B) are essential for processing background tasks, the system cannot initialize or connect to the instance database without the Configuration Service.

The Configuration Service is responsible for retrieving settings from the Archer Control Panel (ACP) and providing them to the web server and other services. If this service is stopped, the Archer web interface will fail to load, and administrators will be unable to make any changes to the instance through the ACP. LDAP Synchronization (Option C) is a scheduled task and does not need to be running constantly for the platform to remain operational. Therefore, from an architectural standpoint, the Configuration Service is the mandatory prerequisite for all other platform functions.

In Archer, not every field created in an application is automatically indexed for searching. Within the Field Properties (General Tab), there is a checkbox titled "Searchable." As taught in Archer Administration II , if this option is unchecked, the field will be invisible to the Advanced Search tool.

This is often done by administrators to improve system performance or to hide technical "helper" fields (like those used in calculations or DDEs) that have no business value for end-user reporting. If a field is missing from the "Available" list in the search builder, the administrator must go back to the Application Builder, edit the field's properties, and ensure the "Searchable" checkbox is enabled. Option B (Key Field) would actually make the field more prominent, and Options C and D do not control the visibility of fields within the Advanced Search interface.

Dynamic Filtering is a sophisticated feature that allows Archer to filter data based on the context of the current record or the current user. In Archer Administration II , this is highlighted as a tool for improving the user experience by reducing "data noise."

Record Lookup (A): Allows you to filter the available records in a lookup based on a value in the current record (e.g., only show "Users" that belong to the "Department" selected on the form).

Calculated Cross Reference (B): Uses dynamic logic to automatically link records based on matching field values.

Report Object (C): When a report is placed on a record as a "Record-Level Report," Dynamic Filtering ensures the report only shows data related to that specific record (e.g., showing only "Findings" related to "Asset A" when viewing Asset A).

Advanced Search (D) does NOT support Dynamic Filtering in the same "contextual" sense; Advanced Searches use static filters or "Current User" filters, but they do not dynamically react to field values in a specific source record during the search build process like the other three objects.

In the Archer Security Parameters configuration (found in the Archer Control Panel or the Administration workspace), administrators define the "Maximum login attempts." According to the Archer Administration II curriculum, when a user exceeds this threshold (e.g., five failed attempts), the system automatically updates their account status to Locked .

It is important to distinguish "Locked" from "Inactive" or "Disabled." An Inactive or Disabled account usually implies an administrative action or a termination of the user's employment. A Locked status is a temporary security measure triggered by the system to prevent "brute force" attacks. Depending on the Security Parameter settings, a locked account may automatically unlock after a specified duration (e.g., 30 minutes), or it may require an administrator to manually click the "Unlock" button within the user's profile. This distinction allows administrators to run reports specifically on "Locked" users to identify potential security threats or users who simply need assistance with their credentials.

Archer is a Windows-based enterprise application that relies on the Microsoft technology stack. As detailed in the Archer Installation and Troubleshooting guide, there are three primary prerequisites for a successful deployment:

IIS (Internet Information Services): This is the web server that hosts the Archer web interface and APIs.

SQL Server: Archer requires a Microsoft SQL Server database to store all application data, metadata, and the instance configurations.

Microsoft .NET Framework: Archer is built on .NET; specific versions (such as 4.7.2 or higher, depending on the Archer version) must be installed for the web and service components to function.

Apache (Option A) is an alternative web server used primarily for Linux-based environments and is not a prerequisite or a supported web server for the Archer platform.

While the standard Archer Application Builder supports a wide array of field types, the Questionnaire module uses a more specialized subset of fields within the Question Library . According to the Questionnaires and Assessment Maintenance curriculum, questions are designed to gather specific response data that can be scored.

Valid question types include Values List (for multiple choice), Date (for timestamped responses), Numeric (for quantitative data), and Text (for qualitative comments). The User/Groups List is also a valid question type, often used to identify stakeholders or owners during an assessment. However, an Attachment is not a standalone question type in the library. In Archer Questionnaires, attachments are typically handled as "supporting evidence" linked to a specific question or the record as a whole, but you cannot define a question as an "Attachment type" in the same way you define a "Values List" question.

In a standard corporate environment where users are already logged into a Windows Domain, Windows Integrated SSO (WIA) is considered the "easiest" and most seamless method. According to the Archer installation guides, WIA utilizes the NTLM or Kerberos protocols already built into the Windows OS and Internet Information Services (IIS).

Because the web server and the user's workstation share a common trust via Active Directory, the user is authenticated automatically without needing to provide credentials or interact with a third-party identity provider (IdP). While Federated SSO (Option C), like SAML, is more robust for cloud or multi-platform environments, it requires significantly more configuration, including certificate exchanges and metadata mapping. Token Based SSO (Option B) often requires custom coding or specialized header injection. For a pure Windows-based internal environment, Windows Integrated SSO provides the most "out-of-the-box" experience for both the administrator and the end-user.

Archer's Advanced Search provides sophisticated control over how data is returned to the user. Within the search configuration tabs, there is a section dedicated to Result Limits . As detailed in the Archer Administration II search module, this feature is essential for optimizing performance and creating specific types of reports (like "Top 10" or "Bottom 5%").

The administrator has the flexibility to limit the results in two ways:

Fixed Number: For example, "Show only the first 50 records."

Percentage: For example, "Show only the top 10% of records."

This is often combined with sorting; if you sort by "Risk Score" descending and limit the results to the top 10 records, you have successfully created a "Top 10 Risks" report. These limits are applied after the filters have narrowed down the dataset but before the data is rendered in the UI or exported. This dual-capability ensures that administrators can build reports that meet precise business requirements, whether they are based on a specific count or a statistical distribution.

The Archer Job Monitor is a dedicated administrative interface found within the "Administration" workspace. It is the primary dashboard for monitoring the health of the Archer Job Engine . According to the curriculum, the Job Monitor provides visibility into both scheduled and ad-hoc background tasks, including Data Feeds, Data Publication, Notifications, and Recalculations.

The report displays a chronological list of jobs, their current status (Queued, In Progress, Completed, or Failed), and their start/end times. This is the first place an administrator looks if a notification wasn't sent or a data feed didn't update. Unlike "User access logs" (which track logins) or "System performance metrics" (which are found in the ACP or IIS), the Job Monitor is focused strictly on the execution history of background system tasks, allowing administrators to identify bottlenecks or specific job failures without needing access to the server's event logs.