ICC Cloud Security & Compliance 3 — Questions and Answers
Question 1: Which Informatica Cloud feature enables data stewards to define and enforce data privacy policies such as restricting who can view columns containing PII?
- Cloud Data Integration task flows
- Informatica Axon Data Governance (Correct answer)
- Secure Agent proxy configuration
- Cloud Application Integration triggers
Correct answer: Informatica Axon Data Governance
Informatica Axon Data Governance provides a policy framework where stewards can classify data and define access policies for sensitive fields.
Question 2: When configuring an Informatica Cloud connection to an on-premises Oracle database, which component acts as the security boundary between the cloud and the internal network?
- IICS cloud server
- Informatica Secure Agent (Correct answer)
- Oracle GoldenGate
- Cloud API Gateway
Correct answer: Informatica Secure Agent
The Secure Agent installed on-premises acts as the bridge, executing tasks locally so sensitive data never needs to pass directly through the cloud platform.
Question 3: A healthcare organization using Informatica Cloud must comply with HIPAA. Which built-in capability helps enforce minimum necessary access to Protected Health Information (PHI)?
- Sub-organization user segmentation (Correct answer)
- Dynamic data masking at query time
- Secure Agent task scheduling
- Flat-file encryption keys
Correct answer: Sub-organization user segmentation
IICS sub-organizations allow administrators to isolate PHI data and connections so only authorized users in specific sub-orgs can access them.
Question 4: Which authentication protocol does Informatica Cloud support for integrating with corporate identity providers to enable single sign-on (SSO)?
- LDAP v2 bind authentication
- SAML 2.0 (Correct answer)
- Kerberos ticket granting
- Basic HTTP authentication
Correct answer: SAML 2.0
IICS supports SAML 2.0 federation, allowing corporate identity providers such as Okta or ADFS to authenticate users via SSO.
Question 5: In Informatica Cloud, what is the primary purpose of using a 'runtime environment' with named Secure Agents grouped into a Secure Agent group?
- To enforce TLS certificate pinning per agent
- To provide high availability and load balancing for task execution (Correct answer)
- To enable per-agent license counting
- To isolate encryption keys per physical machine
Correct answer: To provide high availability and load balancing for task execution
A Secure Agent group acts as a runtime environment where multiple agents share workload, providing failover and horizontal scaling for task execution.
Question 6: Which Informatica Cloud mechanism stores credentials such as database passwords so they are not embedded in plaintext within mapping configurations?
- Environment variable injection
- Connections object with encrypted credential storage (Correct answer)
- Flat-file parameter store
- Secure Agent local keystore only
Correct answer: Connections object with encrypted credential storage
IICS Connections securely store and encrypt credentials centrally, allowing mappings to reference the connection by name without exposing passwords.
Question 7: A financial services firm must demonstrate that no unauthorized changes were made to its Informatica Cloud integration assets over the past 90 days. Which capability supports this audit requirement?
- Mapping version history and audit logs (Correct answer)
- Secure Agent CPU usage logs
- Cloud Data Quality scorecard reports
- Connection test history
Correct answer: Mapping version history and audit logs
IICS maintains asset version history and audit logs that record who changed which asset and when, supporting change-control audits.
ICC Cloud Security & Compliance 3
Which Informatica Cloud feature enables data stewards to define and enforce data privacy policies such as restricting who can view columns containing PII?