Security & Authentication Flashcards

In IICS, which mechanism is used to grant a Secure Agent permission to decrypt connection passwords stored in the cloud?

Answer: The agent authenticates with its registration token and the cloud decrypts credentials server-side

The Secure Agent authenticates to the cloud with its registration token, and the cloud service decrypts and delivers credentials securely at runtime.

Which IICS feature would you use to prevent a specific user group from accessing tasks that process PII data in a shared organization?

Answer: Asset-level permission grants restricting access to only authorized groups

Asset-level permissions in IICS allow administrators to grant or deny specific user groups access to individual tasks, mappings, or connections.

What is the recommended way to securely pass database credentials to an IICS mapping at runtime without hardcoding them in the connection?

Answer: Use Secure Parameters referenced in the connection definition

Secure Parameters allow connection credentials to be stored encrypted in the IICS vault and referenced by name without ever exposing plain text values.

When configuring IICS to use an external Identity Provider via SAML, which attribute in the SAML assertion is used to map the authenticated user to an IICS account?

Answer: NameID or a configured email attribute

IICS uses the SAML NameID or a designated email attribute in the assertion to identify and match the user to an existing IICS account.

Which IICS capability allows data stewards to define and enforce data access policies at the catalog level, preventing unauthorized users from querying sensitive datasets?

Answer: Cloud Data Access Management (CDAM) policies in Informatica IDMC

IDMC's Cloud Data Access Management lets data stewards define fine-grained policies that control which users or groups can query sensitive data assets across connected systems.

An IICS connection to Salesforce uses the OAuth 2.0 JWT Bearer Flow. What must be pre-configured in Salesforce for this flow to work?

Answer: A connected app with a trusted certificate and pre-authorized user profile

The JWT Bearer Flow requires a Salesforce Connected App configured with the server's public certificate and the target user's profile pre-authorized, so no interactive login is needed.

What does the IICS 'View Logs' permission control when applied to a user role?

Answer: Whether the user can access session and activity logs in the Monitor tab

The View Logs permission governs access to the Monitor tab's job session logs and activity history within the IICS organization.