TIBCO Security and Governance Flashcards

What authentication protocol is most commonly used to secure TIBCO Enterprise Message Service (EMS) connections?

Answer: SSL/TLS with certificate-based authentication

TIBCO EMS supports SSL/TLS with certificate-based mutual authentication to encrypt and secure client-to-server connections.

In TIBCO BusinessWorks, which artifact stores sensitive credentials such as passwords in an encrypted format?

Answer: BW Keystore / secure properties

TIBCO BusinessWorks uses a keystore or secure module properties to store and encrypt sensitive credentials, preventing plain-text exposure.

What is the purpose of role-based access control (RBAC) in TIBCO Spotfire Server?

Answer: Restricting which users can view, author, or administer specific analyses and data

RBAC in Spotfire Server assigns users to roles that determine their permissions for viewing, creating, or administering content and data sources.

Which standard does TIBCO API Exchange Gateway use to secure API access with token-based authentication?

Answer: OAuth 2.0

TIBCO API Exchange Gateway supports OAuth 2.0 for token-based authentication, allowing secure delegated access to APIs without sharing credentials.

In TIBCO middleware, what does 'message-level security' mean?

Answer: Encrypting and signing individual messages rather than just the transport channel

Message-level security applies encryption and digital signatures to individual messages so they remain protected even if the transport layer is compromised.

What is the function of a TIBCO Spotfire 'license group'?

Answer: Assigning specific product feature licenses to a set of users

A license group in Spotfire Server maps users to a specific license tier, controlling which product features (e.g., Analyst, Business Author) they can access.