TIBCO TIBCO Security and Governance 2 — Questions and Answers
Question 1: Which TIBCO product provides centralized API governance including policy enforcement and threat protection?
- TIBCO Mashery (Correct answer)
- TIBCO Spotfire
- TIBCO Nimbus
- TIBCO EMS
Correct answer: TIBCO Mashery
TIBCO Mashery is an API management platform that provides centralized governance, policy enforcement, traffic management, and threat protection for APIs.
Question 2: In TIBCO security architecture, what is the purpose of an 'identity provider' (IdP)?
- Authenticating users and issuing security tokens used by service providers (Correct answer)
- Storing encrypted passwords in a relational database
- Routing API traffic between microservices
- Generating SSL certificates for TIBCO nodes
Correct answer: Authenticating users and issuing security tokens used by service providers
An identity provider authenticates users and issues tokens or assertions (e.g., SAML, JWT) that service providers trust to grant access.
Question 3: What does data masking accomplish in a TIBCO data governance context?
- Replacing sensitive data values with obfuscated placeholders in non-production environments (Correct answer)
- Compressing datasets to reduce storage costs
- Encrypting data in transit between services
- Auditing user access to production databases
Correct answer: Replacing sensitive data values with obfuscated placeholders in non-production environments
Data masking substitutes sensitive values with realistic but fictitious equivalents so developers and testers can work with data without exposing real personal information.
Question 4: Which protocol is used by TIBCO EMS to federate authentication with an enterprise directory service?
- LDAP / Active Directory (Correct answer)
- SFTP
- MQTT
- AMQP
Correct answer: LDAP / Active Directory
TIBCO EMS integrates with LDAP or Active Directory to authenticate users against an enterprise directory, enabling centralized identity management.
Question 5: In TIBCO integration pipelines, what is the principle of 'least privilege' access?
- Granting service accounts only the minimum permissions required to perform their function (Correct answer)
- Encrypting all log files with the weakest acceptable algorithm
- Restricting deployment to the fewest possible environments
- Routing messages through the shortest network path
Correct answer: Granting service accounts only the minimum permissions required to perform their function
Least privilege means service accounts and users receive only the exact permissions necessary for their role, reducing the attack surface if credentials are compromised.
Question 6: What is the purpose of audit logging in a TIBCO integration platform?
- Recording who performed what actions and when for compliance and forensic investigation (Correct answer)
- Improving throughput by caching frequently used routes
- Compressing message payloads to save bandwidth
- Auto-scaling services based on message volume
Correct answer: Recording who performed what actions and when for compliance and forensic investigation
Audit logs create an immutable record of user and system actions—such as configuration changes and data access—supporting compliance requirements and security investigations.
TIBCO TIBCO Security and Governance 2
Which TIBCO product provides centralized API governance including policy enforcement and threat protection?