TIBCO TIBCO Security and Governance 2

Question 1

Which TIBCO product provides centralized API governance including policy enforcement and threat protection?

Accepted Answer

TIBCO Mashery

Answer

TIBCO Mashery is an API management platform that provides centralized governance, policy enforcement, traffic management, and threat protection for APIs.

Question 2

In TIBCO security architecture, what is the purpose of an 'identity provider' (IdP)?

Accepted Answer

Authenticating users and issuing security tokens used by service providers

Answer

An identity provider authenticates users and issues tokens or assertions (e.g., SAML, JWT) that service providers trust to grant access.

Question 3

What does data masking accomplish in a TIBCO data governance context?

Accepted Answer

Replacing sensitive data values with obfuscated placeholders in non-production environments

Answer

Data masking substitutes sensitive values with realistic but fictitious equivalents so developers and testers can work with data without exposing real personal information.

Question 4

Which protocol is used by TIBCO EMS to federate authentication with an enterprise directory service?

Accepted Answer

LDAP / Active Directory

Answer

TIBCO EMS integrates with LDAP or Active Directory to authenticate users against an enterprise directory, enabling centralized identity management.

Question 5

In TIBCO integration pipelines, what is the principle of 'least privilege' access?

Accepted Answer

Granting service accounts only the minimum permissions required to perform their function

Answer

Least privilege means service accounts and users receive only the exact permissions necessary for their role, reducing the attack surface if credentials are compromised.

TIBCO - Assessment Test Practice Test

TIBCO - Assessment Test Practice Test

TIBCO TIBCO Security and Governance 2