Design a Tableau Infrastructure22% of the exam
Configuration keys, identity pools and recovery design
Recommend a Tableau Server configuration: identity stores and identity pools, the TSM keys that govern sessions, schedules, spooling, failing jobs, query time and ports, security choices for traffic and extracts, hardware and network specifications, and a disaster recovery strategy covering snapshot backups, settings export gaps and backup file paths.
1.5 Recommend a Tableau Server configuration: 1.5.1 Recommend an appropriate identity store and authentication configuration; 1.5.2 Recommend specific configuration keys and values to suit a given use case; 1.5.3 Recommend a configuration to address security requirements such as encryption at rest and encryption over the wire; 1.5.4 Recommend hardware and network specifications; 1.5.5 Create a disaster recovery strategy.
~7 min read · 13 practice questions
What the exam expects
- Recommend an identity store and authentication configuration, adding identity pools when users cannot live in the initial store.
- Recommend configuration keys and values for sessions, serial schedules, Hyper spooling, failing jobs, view-update time and reserved ports.
- Recommend security settings for traffic over the wire (repository SSL) and extracts at rest, with their capacity cost.
- Recommend hardware and network specifications, including the documented exceptions for dedicated nodes.
- Create a disaster recovery strategy: snapshot backups, what settings export leaves out, and backup file locations.
Key terms:
- Initial pool (TSM configured): the identity store and authentication chosen in TSM at setup; it cannot be modified.
- Identity pool: an optional, server-level group of users with its own identity store and OIDC authentication.
- Repository SSL: TLS between the PostgreSQL repository and other components, optionally for direct clients too.
- Snapshot backup: the External File Store backup that pairs a network-share snapshot with a repository backup file.
Key facts
Identity pool authentication
- Detail
- OIDC only
Identity pool scope
- Detail
- Server-level; not site-scoped
Session lifetime
- Detail
- Needs
apply_lifetime_limit=true; minutes
Site-level serial schedules
- Detail
backgrounder.restrict_serial_collections_to_site_level=true
Total spooling cap
- Detail
hyper.global_file_partition_size_limit; 0 = unlimited
View-update limit
- Detail
vizqlserver.querylimit, seconds, default 1800
Repository SSL default
- Detail
- Off for all connections
Enforce mode
- Detail
- Encrypts existing extracts through Backgrounder jobs
Dedicated Backgrounder hardware
- Detail
- 4 cores may suffice for up to two instances
Dynamic port range
- Detail
- 8000-9000 by default
Not in settings export
- Detail
- Mutual SSL certificate and key; repository-access passwords
External File Store backup
- Detail
- Snapshot backup, not
tsm maintenance backup
Changing a basefilepath
- Detail
- Existing files are not moved
Sources for this section (9)
- Identity Poolshelp.tableau.com (opens in a new tab)
- tsm configuration set Optionshelp.tableau.com (opens in a new tab)
- Repository SSLhelp.tableau.com (opens in a new tab)
- Extract Encryption at Resthelp.tableau.com (opens in a new tab)
- Minimum Hardwarehelp.tableau.com (opens in a new tab)
- TSM Portshelp.tableau.com (opens in a new tab)
- Full Backup and Restorehelp.tableau.com (opens in a new tab)
- Snapshot backupshelp.tableau.com (opens in a new tab)
- tsm File Pathshelp.tableau.com (opens in a new tab)
- When does Tableau Server install only one instance of every process by default?
- Why should an absolute browser-session limit leave room for the longest extract uploads?
- What does Tableau advise about running other resource-intensive applications on a Tableau Server host?
- When you choose a new
basefilepath.backuprestorelocation, which kind of location is not allowed?
The questions are free to read. Answers with their sources and self-grading are included with the pack.
Keep reading with the Tableau Architect pack
- Core concepts
- Exam traps
- Worked scenario
The pack includes:
- All 18 lessons of the Tableau Architect guide, with reading progress
- Interactive decision walks and step-by-step sequence steppers
- Practice exams purchase adds inline bank questions and topic practice (13 questions for this lesson)
- An official source cited for every claim
- An AI tutor that answers from the guide
- Choose guide-only, practice-only, or save $4 with both