Tableau TCA-C01 Practice Exams
Last updated on Oct 22,2026- Exam Code: TCA-C01
- Exam Name: Tableau Certified Architect
- Certification Provider: Tableau
- Latest update: Oct 22,2026
Question #21
When configuring Kerberos authentication for Tableau Server, what step is critical to ensure seamless single sign-on (SSO) functionality?
- A . Installing a third-party SSO software on the Tableau Server
- B . Setting up a trust relationship between Tableau Server and the Kerberos Key Distribution Center (KDC)
- C . Configuring all Tableau Server users to have administrative privileges
- D . Enabling anonymous access on the Tableau Server to facilitate Kerberos ticket exchange
Correct Answer: B
B
Explanation:
Correct Answer
B. Setting up a trust relationship between Tableau Server and the Kerberos Key Distribution Center (KDC) Establishing a trust relationship between Tableau Server and the Kerberos KDC is crucial for Kerberos authentication. This involves configuring the server to properly communicate with the KDC, allowing it to request and receive Kerberos tickets for authenticated users, thereby enabling seamless SSO functionality.
Option A is incorrect as installing third-party SSO software is not necessary for Kerberos authentication, which is a built-in capability.
Option C is incorrect because giving all users administrative privileges is unrelated to Kerberos authentication and would be a security risk.
Option D is incorrect as enabling anonymous access would undermine the security principles of
Kerberos authentication, which relies on verified identity tickets.
B
Explanation:
Correct Answer
B. Setting up a trust relationship between Tableau Server and the Kerberos Key Distribution Center (KDC) Establishing a trust relationship between Tableau Server and the Kerberos KDC is crucial for Kerberos authentication. This involves configuring the server to properly communicate with the KDC, allowing it to request and receive Kerberos tickets for authenticated users, thereby enabling seamless SSO functionality.
Option A is incorrect as installing third-party SSO software is not necessary for Kerberos authentication, which is a built-in capability.
Option C is incorrect because giving all users administrative privileges is unrelated to Kerberos authentication and would be a security risk.
Option D is incorrect as enabling anonymous access would undermine the security principles of
Kerberos authentication, which relies on verified identity tickets.
Question #22
For a Tableau Server installation in an air-gapped environment, what is a critical consideration regarding software updates and maintenance?
- A . Software updates must be performed in real-time via a secure internet connection
- B . Updates should be manually downloaded and vetted before being transferred to the air-gapped environment
- C . The Tableau Server should be configured to automatically download and install updates when available
- D . A dedicated satellite connection should be established for regular software updates
Correct Answer: B
B
Explanation:
Correct Answer
B. Updates should be manually downloaded and vetted before being transferred to the air-gapped environment In an air-gapped environment, the standard method for software updates
involves manually downloading and vetting updates on a secure system outside the environment. Once verified, these updates can then be securely transferred into the air-gapped environment using a physical medium. This process ensures that updates are carefully controlled and secure.
Option A is incorrect as real-time updates via an internet connection are not possible in an air-gapped environment.
Option C is incorrect because automatic updates require an internet connection, which is not available in an air-gapped setup.
Option D is incorrect as establishing a satellite connection for updates would compromise the isolation of an air-gapped environment.
B
Explanation:
Correct Answer
B. Updates should be manually downloaded and vetted before being transferred to the air-gapped environment In an air-gapped environment, the standard method for software updates
involves manually downloading and vetting updates on a secure system outside the environment. Once verified, these updates can then be securely transferred into the air-gapped environment using a physical medium. This process ensures that updates are carefully controlled and secure.
Option A is incorrect as real-time updates via an internet connection are not possible in an air-gapped environment.
Option C is incorrect because automatic updates require an internet connection, which is not available in an air-gapped setup.
Option D is incorrect as establishing a satellite connection for updates would compromise the isolation of an air-gapped environment.
Question #23
During the migration of Tableau Server from Windows to Linux, what key aspect should be addressed to maintain performance and stability?
- A . Neglecting the testing of data connections post-migration, assuming they will remain stable
- B . Conducting comprehensive testing of the Tableau Server on Linux, including data source connections and performance benchmarks
- C . Only transferring the most frequently used dashboards to reduce the load on the Linux server
- D . Changing the underlying database platform to better suit the Linux environment
Correct Answer: B
B
Explanation:
Correct Answer
B. Conducting comprehensive testing of the Tableau Server on Linux, including data source connections and performance benchmarks Comprehensive testing is essential to ensure that the Tableau Server maintains its performance and stability in the new Linux environment, including verifying data connections and performance standards.
Option A is incorrect because neglecting the testing of data connections can lead to critical issues post-migration.
Option C is incorrect as only transferring frequently used dashboards does not address the overall stability and performance of the server.
Option D is incorrect because changing the database platform is not necessarily required for a migration from Windows to Linux and could introduce unnecessary complexities.
B
Explanation:
Correct Answer
B. Conducting comprehensive testing of the Tableau Server on Linux, including data source connections and performance benchmarks Comprehensive testing is essential to ensure that the Tableau Server maintains its performance and stability in the new Linux environment, including verifying data connections and performance standards.
Option A is incorrect because neglecting the testing of data connections can lead to critical issues post-migration.
Option C is incorrect as only transferring frequently used dashboards does not address the overall stability and performance of the server.
Option D is incorrect because changing the database platform is not necessarily required for a migration from Windows to Linux and could introduce unnecessary complexities.
Question #24
An international corporation is deploying Tableau Cloud and needs to synchronize user accounts across multiple regions and systems.
Which strategy ensures efficient and consistent user account management?
- A . Relying on manual updates by regional IT teams for user account synchronization
- B . Employing SCIM to automate user provisioning across different systems and regions
- C . Assigning a central team to manually manage user accounts for all regions
- D . Using different user management protocols for each region based on local IT preferences
Correct Answer: B
B
Explanation:
Correct Answer
B. Employing SCIM to automate user provisioning across different systems and regions SCIM provides a standardized and automated approach for synchronizing user accounts across various systems and regions, ensuring consistency and efficiency in user account management.
Option A is incorrect as manual updates by regional teams can lead to delays and inconsistencies.
Option C is incorrect because centralizing manual management is still prone to inefficiency and errors, especially in a large, international corporation.
Option D is incorrect as using different protocols for each region complicates management and hinders uniformity in user experience and security.
B
Explanation:
Correct Answer
B. Employing SCIM to automate user provisioning across different systems and regions SCIM provides a standardized and automated approach for synchronizing user accounts across various systems and regions, ensuring consistency and efficiency in user account management.
Option A is incorrect as manual updates by regional teams can lead to delays and inconsistencies.
Option C is incorrect because centralizing manual management is still prone to inefficiency and errors, especially in a large, international corporation.
Option D is incorrect as using different protocols for each region complicates management and hinders uniformity in user experience and security.
Question #25
An enterprise is merging its multiple Tableau sites into a single server for better management and efficiency.
What should be the primary focus during this migration?
- A . Rapidly migrating all sites without a detailed review to accelerate the process
- B . Ensuring the compatibility and proper configuration of data connections across the merged sites
- C . Transferring only the most used dashboards and reports, disregarding less frequently used content
- D . Maintaining multiple backup servers in case the consolidation fails
Correct Answer: B
B
Explanation:
Correct Answer
B. Ensuring the compatibility and proper configuration of data connections across the merged sites Verifying the compatibility and proper configuration of data connections is essential to ensure that all data sources remain accessible and functional after the consolidation, preventing data access issues.
Option A is incorrect because a rapid migration without detailed review can lead to significant data and functionality problems.
Option C is incorrect as disregarding less frequently used content can lead to data loss and dissatisfaction among certain user groups.
Option D is incorrect because while backups are important, the focus should be on ensuring a successful consolidation, not on planning for its failure.
B
Explanation:
Correct Answer
B. Ensuring the compatibility and proper configuration of data connections across the merged sites Verifying the compatibility and proper configuration of data connections is essential to ensure that all data sources remain accessible and functional after the consolidation, preventing data access issues.
Option A is incorrect because a rapid migration without detailed review can lead to significant data and functionality problems.
Option C is incorrect as disregarding less frequently used content can lead to data loss and dissatisfaction among certain user groups.
Option D is incorrect because while backups are important, the focus should be on ensuring a successful consolidation, not on planning for its failure.
Question #26
For automating routine maintenance tasks on a Tableau Server installed on a Windows system, which method would be most suitable for deploying scripts?
- A . Utilizing Tableau Desktop to run maintenance scripts at scheduled times
- B . Employing Windows Task Scheduler to automate and manage the execution of maintenance scripts
- C . Implementing a continuous integration tool like Jenkins for script execution
- D . Manually running scripts through the command line interface each time
Correct Answer: B
B
Explanation:
Correct Answer
B. Employing Windows Task Scheduler to automate and manage the execution of maintenance scripts. For a Tableau Server on a Windows system, Windows Task Scheduler is the most suitable tool for automating routine maintenance scripts. It allows for the scheduling and management of script execution, ensuring that maintenance tasks are performed consistently and efficiently without manual intervention.
Option A is incorrect because Tableau Desktop is not designed for automating server maintenance tasks.
Option C is incorrect as while Jenkins can be used for continuous integration, it may be more complex than necessary for simple maintenance tasks.
Option D is incorrect because manually running scripts is time-consuming and not efficient for routine maintenance.
B
Explanation:
Correct Answer
B. Employing Windows Task Scheduler to automate and manage the execution of maintenance scripts. For a Tableau Server on a Windows system, Windows Task Scheduler is the most suitable tool for automating routine maintenance scripts. It allows for the scheduling and management of script execution, ensuring that maintenance tasks are performed consistently and efficiently without manual intervention.
Option A is incorrect because Tableau Desktop is not designed for automating server maintenance tasks.
Option C is incorrect as while Jenkins can be used for continuous integration, it may be more complex than necessary for simple maintenance tasks.
Option D is incorrect because manually running scripts is time-consuming and not efficient for routine maintenance.
Question #27
A multinational company is implementing Tableau Cloud and requires a secure method to manage user access across different regions, adhering to various data privacy regulations.
What is the most appropriate authentication strategy?
- A . Universal access with a single shared login for all users
- B . Region-specific local authentication for each group of users
- C . Integration with a centralized identity management system that complies with regional data privacy
laws - D . Randomized password generation for each user session
Correct Answer: C
C
Explanation:
Correct Answer
C. Integration with a centralized identity management system that complies with regional data privacy laws This strategy ensures secure and compliant user access management across different regions by leveraging a centralized system that is designed to meet various data privacy regulations.
Option A is incorrect because a single shared login lacks security and does not comply with regional data privacy laws.
Option B is incorrect as region-specific local authentication can lead to fragmented and inconsistent access control.
Option D is incorrect because randomized password generation for each session, while secure, is
impractical and user-unfriendly.
C
Explanation:
Correct Answer
C. Integration with a centralized identity management system that complies with regional data privacy laws This strategy ensures secure and compliant user access management across different regions by leveraging a centralized system that is designed to meet various data privacy regulations.
Option A is incorrect because a single shared login lacks security and does not comply with regional data privacy laws.
Option B is incorrect as region-specific local authentication can lead to fragmented and inconsistent access control.
Option D is incorrect because randomized password generation for each session, while secure, is
impractical and user-unfriendly.
Question #28
When troubleshooting an issue in Tableau Server, you need to locate and interpret installation logs. Where are these logs typically found, and what information do they primarily provide?
- A . In the database server, providing information about database queries
- B . In the Tableau Server data directory, offering details on user interactions
- C . In the Tableau Server logs directory, containing details on installation processes and errors
- D . In the operating system’s event viewer, showing system-level events
Correct Answer: C
C
Explanation:
Correct Answer
C. In the Tableau Server logs directory, containing details on installation processes and errors. The installation logs for Tableau Server are typically located in the Tableau Server logs directory. These logs provide detailed information on the installation process, including any errors or issues that may have occurred. This is essential for troubleshooting installation-related problems.
Option A is incorrect because the database server logs focus on database queries and do not provide detailed information about the Tableau Server installation process.
Option B is incorrect as the data directory primarily contains data related to user interactions, not installation logs.
Option D is incorrect because the operating system’s event viewer captures system-level events, which may not provide the detailed information specific to Tableau Server’s installation processes.
C
Explanation:
Correct Answer
C. In the Tableau Server logs directory, containing details on installation processes and errors. The installation logs for Tableau Server are typically located in the Tableau Server logs directory. These logs provide detailed information on the installation process, including any errors or issues that may have occurred. This is essential for troubleshooting installation-related problems.
Option A is incorrect because the database server logs focus on database queries and do not provide detailed information about the Tableau Server installation process.
Option B is incorrect as the data directory primarily contains data related to user interactions, not installation logs.
Option D is incorrect because the operating system’s event viewer captures system-level events, which may not provide the detailed information specific to Tableau Server’s installation processes.
Question #29
In troubleshooting Azure Active Directory authentication issues with Tableau Server, what is a key aspect to check first?
- A . The network bandwidth and speed between Tableau Server and Azure AD services
- B . The validity of the OAuth tokens used for authentication between Tableau Server and Azure AD
- C . The firewall settings on the Tableau Server blocking Azure AD traffic
- D . The version of the Azure AD module installed on Tableau Server
Correct Answer: B
B
Explanation:
Correct Answer
B. The validity of the OAuth tokens used for authentication between Tableau Server and Azure AD When troubleshooting Azure AD authentication issues with Tableau Server, one of the first aspects to check is the validity of the OAuth tokens. These tokens are essential for the authentication process, and issues such as token expiration or invalidation can prevent successful authentication.
Option A is incorrect because network bandwidth and speed, while important, are typically not the primary cause of authentication issues.
Option C is incorrect as firewall settings, although they can block traffic, are less likely to be the specific cause of Azure AD authentication problems.
Option D is incorrect because the version of the Azure AD module, while important, is not usually the first aspect to be checked in troubleshooting scenarios.
B
Explanation:
Correct Answer
B. The validity of the OAuth tokens used for authentication between Tableau Server and Azure AD When troubleshooting Azure AD authentication issues with Tableau Server, one of the first aspects to check is the validity of the OAuth tokens. These tokens are essential for the authentication process, and issues such as token expiration or invalidation can prevent successful authentication.
Option A is incorrect because network bandwidth and speed, while important, are typically not the primary cause of authentication issues.
Option C is incorrect as firewall settings, although they can block traffic, are less likely to be the specific cause of Azure AD authentication problems.
Option D is incorrect because the version of the Azure AD module, while important, is not usually the first aspect to be checked in troubleshooting scenarios.
Question #30
A financial services company needs to ensure the highest level of data security in its Tableau Server deployment.
Which configuration best addresses their need for both encryption at rest and encryption over the wire?
- A . Enabling only SSL/TLS for web client communication without encrypting the data at rest
- B . Configuring Tableau Server to use external file storage without encryption
- C . Implementing both SSL/TLS for data in transit and at-rest encryption for stored data
- D . Relying solely on network-level encryption and not configuring encryption in Tableau Server
Correct Answer: C
C
Explanation:
Correct Answer
C. Implementing both SSL/TLS for data in transit and at-rest encryption for stored data. This configuration ensures that data is encrypted both when it’s being transmitted over the network (SSL/TLS) and when it’s stored on disk (at-rest encryption), providing comprehensive security for sensitive financial data.
Option A is incorrect because it does not address the requirement for encryption of data at rest.
Option B is incorrect as it suggests using unencrypted external file storage, which is not secure.
Option D is incorrect because relying only on network-level encryption leaves data at rest unsecured.
C
Explanation:
Correct Answer
C. Implementing both SSL/TLS for data in transit and at-rest encryption for stored data. This configuration ensures that data is encrypted both when it’s being transmitted over the network (SSL/TLS) and when it’s stored on disk (at-rest encryption), providing comprehensive security for sensitive financial data.
Option A is incorrect because it does not address the requirement for encryption of data at rest.
Option B is incorrect as it suggests using unencrypted external file storage, which is not secure.
Option D is incorrect because relying only on network-level encryption leaves data at rest unsecured.