ICC Cloud Security & Compliance 2 — Questions and Answers
Question 1: In Informatica Intelligent Cloud Services (IICS), which feature allows administrators to restrict user access based on the IP address of the connecting machine?
- Field-level encryption
- IP allowlisting (Correct answer)
- OAuth token scoping
- Column masking
Correct answer: IP allowlisting
IICS supports IP allowlisting so administrators can whitelist specific IP ranges and block connections from unauthorized sources.
Question 2: Which Informatica Cloud security mechanism protects sensitive data by substituting real values with fictitious but realistic-looking values during non-production testing?
- Tokenization
- Hashing
- Data masking (Correct answer)
- Column encryption
Correct answer: Data masking
Data masking replaces sensitive production values with realistic synthetic data, allowing safe use in development and test environments.
Question 3: What does the Informatica Cloud Secure Agent use to communicate with the IICS platform without exposing internal network ports?
- Inbound HTTPS listener on port 443
- Outbound HTTPS polling over port 443 (Correct answer)
- VPN tunnel on port 1194
- SFTP channel on port 22
Correct answer: Outbound HTTPS polling over port 443
The Secure Agent initiates outbound HTTPS connections to IICS, so no inbound firewall ports need to be opened on the corporate network.
Question 4: Under GDPR, which Informatica Cloud capability helps organizations fulfill a 'right to erasure' request by locating all personal data for a specific individual across multiple datasets?
- Data lineage tracking
- Enterprise Data Catalog subject-level search (Correct answer)
- Axon Policy Center
- Cloud MDM golden record merge
Correct answer: Enterprise Data Catalog subject-level search
Enterprise Data Catalog can scan and index personal data attributes so organizations can identify all occurrences of an individual's data for deletion requests.
Question 5: Which encryption standard does Informatica Cloud use by default to encrypt data in transit between the Secure Agent and cloud connectors?
- SSL 3.0
- TLS 1.2 or higher (Correct answer)
- DES
- AES-128 CBC without TLS
Correct answer: TLS 1.2 or higher
Informatica Cloud enforces TLS 1.2 or higher for all data-in-transit encryption, deprecating older SSL and weaker TLS versions.
Question 6: In IICS role-based access control (RBAC), which built-in role grants the ability to view connection details but not create or modify them?
- Designer
- Operator
- Monitor (Correct answer)
- Service Consumer
Correct answer: Monitor
The Monitor role provides read-only visibility into connections and job activity without allowing configuration changes.
Question 7: A compliance requirement mandates that all ETL job execution logs be retained for seven years. Which Informatica Cloud feature best supports this requirement?
- Secure Agent local log rotation
- IICS Activity Log export to external storage (Correct answer)
- Connection Manager audit trail
- Data Integration Service logging
Correct answer: IICS Activity Log export to external storage
IICS Activity Logs can be exported to external storage systems where long-term retention policies and archival rules can be applied.
ICC Cloud Security & Compliance 2
In Informatica Intelligent Cloud Services (IICS), which feature allows administrators to restrict user access based on the IP address of the connecting machine?