Security & Authentication Flashcards

Which IICS feature lets administrators enforce that all users must complete multi-factor authentication when logging in from outside the corporate network?

Answer: Conditional MFA policy based on network location

IICS supports conditional MFA policies that trigger additional authentication factors only when access originates outside approved network ranges.

In Informatica Cloud Data Integration, what is the role of the 'Runtime Environment' setting on a connection regarding security?

Answer: It specifies which Secure Agent or agent group processes the connection's tasks, controlling data path

The Runtime Environment setting dictates which Secure Agent handles connection tasks, keeping sensitive data within the designated network zone.

What type of token does IICS issue upon successful REST API authentication, and how long is its default validity?

Answer: A session token lasting 30 minutes by default, extendable to 8 hours

IICS issues a session token upon REST API login that defaults to 30-minute idle timeout but can be configured up to 8 hours.

Which IICS organization-level setting prevents users from exporting connection passwords or Secure Parameter values via the UI?

Answer: Secure Parameter masking in exports

Secure Parameters are masked and excluded from any export operation, preventing accidental disclosure of secrets through exported assets.

An IICS mapping reads data from an S3 bucket using IAM role-based authentication. What credential is actually used at runtime?

Answer: A temporary STS credential obtained by the Secure Agent assuming the configured IAM role

When using IAM role authentication, the Secure Agent calls AWS STS to assume the role and receives temporary, short-lived credentials for the operation.

Which IICS sub-organization concept allows an enterprise to isolate data, users, and jobs between business units while sharing a single Informatica license?

Answer: Federated organizations (sub-orgs)

IICS supports federated sub-organizations that share a parent license but maintain isolated users, assets, and runtime environments.

What is the security implication of enabling 'Allow Subdomain Cookies' in IICS SSO configuration?

Answer: It permits the SSO session cookie to be shared across all subdomains, broadening the authentication scope

Enabling subdomain cookies allows the session to be recognized across all subdomains, which can be convenient but widens the attack surface if a subdomain is compromised.