Architecture and Design Principles Flashcards
Full operation within the company network with …
no data leaving
Minimal copying and storage of
personal data within the platform
No transmitting of personal information over a network in
the clear
No mandated sharing of
personal data with other systems
Easy horizontal
scalability
Modern technology, portability, and ease of deployment. Leverage …
Docker containers, readiness for Kubernetes
BigID supports 2-node and
multiple node deployment model based on containers.
Scanning and correlation are
horizontally scalable.
In other words, scanners can be deployed remotely for … (4 items)
- Faster scanning because the scanning is local
- Reduces data traffic volume from remote locations
- Easier network configuration (only inbound rule needed)
- Safer operation since sensitive information doesn’t travel over far networks
RabbitMQ is listening on 2 ports, which are the default ports when SSL is enabled
- Port: 5671: amqp/ssl, purpose: AMQP 0-9-1 and AMQP 1.0 over TLS
- Port: 15671: https, purpose: HTTP API over TLS (HTTPS)
The BigID user interface is SSL-enabled, and uses
HTTPS on port 443 by default
The default SSL certificate is self-signed and will
generate a browser warning
The web application runs client-side JavaScript code which communicates
with the server via REST API
What is the Fundamental Processing Flow?
Scan ➤ Correlate ➤ Visualize ➤ Benefit
Fundamental Processing Flow - Scan
Scan for personal information in various data sources, leveraging matching, classification and enrichment algorithms.