TIBCO Security and Governance Flashcards

Which TIBCO product provides centralized API governance including policy enforcement and threat protection?

Answer: TIBCO Mashery

TIBCO Mashery is an API management platform that provides centralized governance, policy enforcement, traffic management, and threat protection for APIs.

In TIBCO security architecture, what is the purpose of an 'identity provider' (IdP)?

Answer: Authenticating users and issuing security tokens used by service providers

An identity provider authenticates users and issues tokens or assertions (e.g., SAML, JWT) that service providers trust to grant access.

What does data masking accomplish in a TIBCO data governance context?

Answer: Replacing sensitive data values with obfuscated placeholders in non-production environments

Data masking substitutes sensitive values with realistic but fictitious equivalents so developers and testers can work with data without exposing real personal information.

Which protocol is used by TIBCO EMS to federate authentication with an enterprise directory service?

Answer: LDAP / Active Directory

TIBCO EMS integrates with LDAP or Active Directory to authenticate users against an enterprise directory, enabling centralized identity management.

In TIBCO integration pipelines, what is the principle of 'least privilege' access?

Answer: Granting service accounts only the minimum permissions required to perform their function

Least privilege means service accounts and users receive only the exact permissions necessary for their role, reducing the attack surface if credentials are compromised.

What is the purpose of audit logging in a TIBCO integration platform?

Answer: Recording who performed what actions and when for compliance and forensic investigation

Audit logs create an immutable record of user and system actions—such as configuration changes and data access—supporting compliance requirements and security investigations.