MDM Security and Access Control 4 — Questions and Answers
Question 1: In Informatica MDM, which tool is used by administrators to configure roles, assign users, and set privileges?
- MDM Provisioning Tool
- Hub Console Security Manager (Correct answer)
- ActiveVOS Console
- Data Director Admin UI
Correct answer: Hub Console Security Manager
The Hub Console's Security Manager is the administrative interface where MDM administrators define roles, assign users to roles, and configure resource privileges.
Question 2: A data steward can edit records in MDM Data Director but cannot delete them. Which privilege configuration explains this?
- The role has UPDATE but not DELETE privilege on the relevant base objects (Correct answer)
- The role is missing the MERGE privilege
- DELETE is always disabled in Data Director by default
- The role needs the PROMOTE privilege to enable deletions
Correct answer: The role has UPDATE but not DELETE privilege on the relevant base objects
In MDM Hub, UPDATE and DELETE are separate privileges on base objects, so a role can be granted UPDATE without DELETE to allow editing but not removal.
Question 3: What is the purpose of a 'package' in Informatica MDM's security model?
- A bundle of cleanse functions deployed together
- A query-based view of base object data that can be secured independently (Correct answer)
- A compressed export of ORS metadata
- A collection of business entity definitions
Correct answer: A query-based view of base object data that can be secured independently
A package in MDM Hub is a pre-configured query (similar to a database view) that presents a subset of base object fields and can be assigned its own READ privilege separate from the underlying base object.
Question 4: In Informatica MDM, which workflow-related security concern arises when ActiveVOS tasks are assigned to user roles?
- ActiveVOS uses its own separate role store independent of MDM Hub roles (Correct answer)
- MDM Hub roles automatically propagate to ActiveVOS without configuration
- Task visibility requires matching role names between MDM Hub and ActiveVOS
- ActiveVOS does not support role-based task assignment
Correct answer: ActiveVOS uses its own separate role store independent of MDM Hub roles
ActiveVOS maintains its own security realm, so workflow task assignments use ActiveVOS-specific roles that must be mapped or maintained separately from MDM Hub roles.
Question 5: Which MDM security feature prevents a user from viewing records where a specific field equals a restricted value, such as records from a confidential division?
- Column masking
- Data filters (Correct answer)
- Row-level encryption
- Secure base object views
Correct answer: Data filters
Data filters in Informatica MDM append dynamic WHERE conditions to queries, preventing users from retrieving records that match restricted field values.
Question 6: How does Informatica MDM handle password policies when using internal (non-LDAP) user authentication?
- Password policies are defined in the CMX_SYSTEM schema configuration tables
- Password policies are enforced by the underlying application server (e.g., JBoss/WebLogic) (Correct answer)
- MDM Hub does not support password policies for internal users
- Password complexity is configured in the Hub Store ORS
Correct answer: Password policies are enforced by the underlying application server (e.g., JBoss/WebLogic)
When using internal authentication, Informatica MDM relies on the Java EE application server's security realm and its password policy enforcement mechanisms.
Question 7: In Informatica MDM's role hierarchy, what distinguishes an 'admin' role from a standard data steward role?
- Admin roles can access the Hub Console configuration tools; data steward roles are limited to data operations (Correct answer)
- Admin roles have higher trust scores applied to their edits
- Admin roles bypass all data filters and masking policies
- Admin roles can only be assigned to system service accounts
Correct answer: Admin roles can access the Hub Console configuration tools; data steward roles are limited to data operations
Admin roles in MDM grant access to configuration and administrative functions in the Hub Console, while data steward roles are scoped to data viewing, editing, and workflow tasks.
MDM Security and Access Control 4
In Informatica MDM, which tool is used by administrators to configure roles, assign users, and set privileges?