MDM Security and Access Control 5

Question 1

Which Informatica MDM API security mechanism requires callers to pass a session token obtained from an initial login call?

Accepted Answer

MDM Hub SIF session tokens

Answer

OAuth 2.0 bearer tokens

Answer

SAML assertions embedded in each call

Answer

API keys in request headers

Question 2

A security audit finds that multiple MDM Hub users share the same login credentials. What is the primary risk this creates?

Accepted Answer

Loss of individual accountability in audit logs and inability to enforce per-user access controls

Answer

Increased database connection pool exhaustion

Answer

Higher likelihood of record merge conflicts

Answer

Reduced cleanse function performance

Question 3

In Informatica MDM, what security consideration applies when using the Bulk Data Manager for large-scale data loads?

Accepted Answer

Bulk loads bypass all row-level security and data filters

Answer

Bulk load service accounts must be granted EXECUTE privilege on landing tables

Answer

Bulk loads require Admin role to run regardless of data content

Answer

Bulk Data Manager encrypts all data in transit automatically

Question 4

Which Informatica MDM security feature allows masking a field like date-of-birth so some users see the full value while others see only the year?

Accepted Answer

Separate packages with different field projections

Answer

Field-level trust settings

Answer

Column masking with role-based unmasking policies

Answer

Data Director display rules

Question 5

When Informatica MDM is integrated with an external identity provider via LDAP groups, how are LDAP groups typically mapped to MDM security?

Accepted Answer

LDAP group membership is mapped to MDM Hub roles through explicit configuration in the Hub Console

Answer

LDAP groups are automatically converted to MDM roles with identical names

Answer

Each LDAP group creates a new ORS in MDM Hub

Answer

LDAP groups control only workflow task assignment, not data access

Question 6

In Informatica MDM, which security practice should be applied to the MDM Hub's database service account to minimize risk?

Accepted Answer

Restrict the service account to only the specific schemas and operations MDM Hub requires

Answer

Grant the service account DBA privileges for maximum compatibility

Answer

Use the same service account for both MDM Hub and the application server

Answer

Store the database password directly in the hub-conf.xml file in plaintext

Question 7

What is the recommended approach for securing Informatica MDM SIF web service endpoints exposed to external consumers?

Accepted Answer

Place MDM SIF endpoints behind an API gateway or reverse proxy with TLS termination and network access controls

Answer

Expose endpoints on the public internet without restriction and rely on MDM login() for security

Answer

Disable SIF endpoints and use only file-based integration

Answer

Grant external consumers the Admin role to simplify access