ICC Security & Authentication 2 — Questions and Answers
Question 1: Which Informatica IICS feature allows administrators to restrict user access based on the IP address from which they connect?
- IP allowlisting (Correct answer)
- Role-based access control
- OAuth 2.0 enforcement
- JWT token filtering
Correct answer: IP allowlisting
IICS supports IP allowlisting so that only connections from approved IP ranges are permitted to access the platform.
Question 2: In Informatica Intelligent Cloud Services, what is the purpose of the 'Secure Agent Group' when managing security?
- To group agents by geographic location for compliance
- To cluster agents so workloads run within a controlled network perimeter (Correct answer)
- To apply shared OAuth tokens across multiple agents
- To encrypt agent logs before uploading to the cloud
Correct answer: To cluster agents so workloads run within a controlled network perimeter
A Secure Agent Group clusters Secure Agents so that sensitive workloads stay within a defined, controlled network boundary.
Question 3: Which IICS authentication mechanism uses an assertion issued by an external Identity Provider to grant access without passing passwords?
- Basic authentication
- SAML SSO (Correct answer)
- API key authentication
- Kerberos ticket-granting
Correct answer: SAML SSO
SAML SSO allows an external IdP to issue a signed assertion, letting users access IICS without transmitting their passwords.
Question 4: What happens in IICS when a user's session token expires during an active integration task run?
- The running task is immediately cancelled
- The task continues running because it uses a separate runtime credential (Correct answer)
- The task pauses until the user re-authenticates interactively
- All tasks in the org are suspended until an admin renews tokens
Correct answer: The task continues running because it uses a separate runtime credential
Active task runs use runtime credentials independent of the UI session token, so they complete even after the session expires.
Question 5: Which IICS permission level allows a user to view connection objects but not modify or use them in mappings?
- Execute
- Read (Correct answer)
- Write
- Admin
Correct answer: Read
The Read permission in IICS grants visibility into an asset's configuration without allowing execution or editing.
Question 6: An organization wants to rotate API keys for IICS REST API access without disrupting running pipelines. What is the recommended approach?
- Delete the old key then immediately create a new one
- Create a new key, update all pipelines to use it, then revoke the old key (Correct answer)
- Change the password of the service account instead of rotating the key
- Disable the old key and wait 24 hours before issuing a new one
Correct answer: Create a new key, update all pipelines to use it, then revoke the old key
The safe rotation approach is to provision a new key, migrate all consumers to it, and only then revoke the old key to avoid gaps in access.
Question 7: Which IICS feature enables field-level encryption so sensitive columns in a dataset are encrypted before being written to a target?
- Data Masking transformation (Correct answer)
- Advanced Encryption transformation
- Hierarchy Builder
- Lookup transformation with encrypted cache
Correct answer: Data Masking transformation
The Data Masking transformation in IICS can apply encryption functions to individual fields before they reach the target system.
ICC Security & Authentication 2
Which Informatica IICS feature allows administrators to restrict user access based on the IP address from which they connect?