TIBCO TIBCO Security and Governance 1 — Questions and Answers
Question 1: What authentication protocol is most commonly used to secure TIBCO Enterprise Message Service (EMS) connections?
- SSL/TLS with certificate-based authentication (Correct answer)
- HTTP Basic Auth over plain TCP
- SAML 2.0 only
- Kerberos exclusively
Correct answer: SSL/TLS with certificate-based authentication
TIBCO EMS supports SSL/TLS with certificate-based mutual authentication to encrypt and secure client-to-server connections.
Question 2: In TIBCO BusinessWorks, which artifact stores sensitive credentials such as passwords in an encrypted format?
- BW Keystore / secure properties (Correct answer)
- A plain-text .properties file
- The BW project's pom.xml
- A JavaScript config object
Correct answer: BW Keystore / secure properties
TIBCO BusinessWorks uses a keystore or secure module properties to store and encrypt sensitive credentials, preventing plain-text exposure.
Question 3: What is the purpose of role-based access control (RBAC) in TIBCO Spotfire Server?
- Restricting which users can view, author, or administer specific analyses and data (Correct answer)
- Compressing large datasets for faster loading
- Scheduling automated dashboard refresh jobs
- Converting Spotfire files to PDF format
Correct answer: Restricting which users can view, author, or administer specific analyses and data
RBAC in Spotfire Server assigns users to roles that determine their permissions for viewing, creating, or administering content and data sources.
Question 4: Which standard does TIBCO API Exchange Gateway use to secure API access with token-based authentication?
- OAuth 2.0 (Correct answer)
- SOAP WS-Security only
- FTP digest auth
- RADIUS protocol
Correct answer: OAuth 2.0
TIBCO API Exchange Gateway supports OAuth 2.0 for token-based authentication, allowing secure delegated access to APIs without sharing credentials.
Question 5: In TIBCO middleware, what does 'message-level security' mean?
- Encrypting and signing individual messages rather than just the transport channel (Correct answer)
- Filtering messages by content type at the network firewall
- Throttling message throughput to prevent DoS attacks
- Storing messages in an encrypted database
Correct answer: Encrypting and signing individual messages rather than just the transport channel
Message-level security applies encryption and digital signatures to individual messages so they remain protected even if the transport layer is compromised.
Question 6: What is the function of a TIBCO Spotfire 'license group'?
- Assigning specific product feature licenses to a set of users (Correct answer)
- Grouping datasets for shared data loading
- Defining network routing rules for Spotfire nodes
- Configuring scheduled report distribution lists
Correct answer: Assigning specific product feature licenses to a set of users
A license group in Spotfire Server maps users to a specific license tier, controlling which product features (e.g., Analyst, Business Author) they can access.
TIBCO TIBCO Security and Governance 1
What authentication protocol is most commonly used to secure TIBCO Enterprise Message Service (EMS) connections?