A user named John publishes a workbook named Sales Quota to a project named Sales. The All Users group has the View and Download Workbook/Save As capabilities only to the Sales project. A user named Sandy has the Explorer (can publish) site role, on the Sales Quota workbook. No other users or groups have permissions to the Sales project. The Sales project is set to Managed by the owner. What are the effective rights for Sandy?
All of the capabilities associated with the Editor rule
View and Download Workbook/Save As
The same rights as John
No access
Which two commands are valid and complete commands? (Choose two.)
tsm maintenance backup
tsm maintenance restore
tsm maintenance cleanup
tsm maintenance ziplogs
TSM commands manage Tableau Server maintenance—let’s validate their syntax:
Command Requirements:
Some need arguments (e.g., file paths); others are standalone.
Valid and Complete: Must work as-is without errors.
Option C (tsm maintenance cleanup): Correct.
Details: Removes temporary files and old logs—no arguments required (optional flags like -l exist).
Use: tsm maintenance cleanup—runs fully.
Option D (tsm maintenance ziplogs): Correct.
Details: Creates a zip of logs (e.g., tsm-logs.zip)—no arguments needed (optional -d for date range).
Use: tsm maintenance ziplogs—complete and valid.
Option A (tsm maintenance backup): Incorrect.
Why: Requires -f
Option B (tsm maintenance restore): Incorrect.
Why: Needs -f
Why This Matters: Correct syntax ensures maintenance tasks execute without errors—critical for server health.
What are two features of the Tableau Server user-based license? (Choose two.)
A subscription license
Enables distinct user roles
Restricts the number of machine cores you can deploy
A perpetual license
Tableau Server’s user-based licensing model assigns licenses to individual users (Creator, Explorer, Viewer) rather than machines or cores. Key features include:
Subscription license: Licenses are typically subscription-based, renewed annually or monthly, aligning with Tableau’s pricing model.
Distinct user roles: It supports three roles (Creator, Explorer, Viewer), each with specific capabilities, enabling granular access control.
Option A (A subscription license): Correct. User-based licenses are subscription-based by default.
Option B (Enables distinct user roles): Correct. The model defines Creator, Explorer, and Viewer roles.
Option C (Restricts the number of machine cores): Incorrect. This applies to core-based licensing, not user-based.
Option D (A perpetual license): Incorrect. Perpetual licenses were phased out; user-based licenses are subscription-based as of recent models.
A user published a workbook ten days ago. The user can see the workbook on the Server, but she is unable to find the workbook by using Search. What should you do to resolve the problem?
Instruct the user to re-publish the workbook with keywords
Instruct the user to add tags to the workbook
Instruct the user to log out, and then log back in
Run the tsm maintenance reindex-search command
Tableau Server’s search functionality relies on an indexed catalog of content (workbooks, data sources, etc.) stored in the Repository. If a user can see a workbook in the UI (e.g., under Content > Workbooks) but not find it via search, the search index may be outdated or corrupted. This can happen due to:
Indexing delays after publishing.
Server maintenance or crashes affecting the index.
Option D (Run the tsm maintenance reindex-search command): Correct. This command rebuilds the search index, ensuring all content (including the user’s workbook) is properly cataloged and searchable. Steps:
Stop Tableau Server (tsm stop).
Run tsm maintenance reindex-search.
Start Tableau Server (tsm start).This is a server administrator task and resolves systemic search issues.
Option A (Re-publish the workbook with keywords): Incorrect. Re-publishing might update the index for that workbook, but it doesn’t fix a broader indexing problem. Keywords enhance relevance, not indexing itself.
Option B (Add tags to the workbook): Incorrect. Tags improve searchability but don’t address an index failure. If the workbook isn’t indexed, tags won’t help.
Option C (Log out, and then log back in): Incorrect. This refreshes the user session but doesn’t affect the server-side search index.
Why This Matters: A reliable search index is critical for content discovery in large deployments—reindex-search ensures consistency.
To which site role can you associate the Viewer user-based license level?
Creator
Explorer (can publish)
Viewer
Explorer
Tableau Server uses a role-based licensing model with three primary license levels: Creator, Explorer, and Viewer. Each license level corresponds to specific site roles that define what users can do on the server.
Viewer License: This is the most restrictive license, allowing users to view and interact with published content (e.g., dashboards and visualizations) but not to create or publish new content.
Site Role: The Viewer license can only be associated with the Viewer site role. This role restricts users to viewing capabilities, aligning with the license’s purpose.
Option A (Creator): Incorrect. The Creator license is for users who can create, edit, and publish content using Tableau Desktop and the web interface. It corresponds to the Creator site role, not Viewer.
Option B (Explorer (can publish)): Incorrect. This is a variation of the Explorer license, which allows users to edit and publish content within limits. It’s more permissive than Viewer.
Option C (Viewer): Correct. The Viewer site role matches the Viewer license level perfectly.
Option D (Explorer): Incorrect. The Explorer license allows users to explore data and create content in the web interface, exceeding the Viewer license’s capabilities.
What is the minimum required free hard disk space recommended for a Tableau Server installation in production?
32 GB
50 GB
15 GB
64 GB
Tableau Server has specific hardware requirements for production environments to ensure stability and performance. The minimum recommended free disk space for a production installation is 50 GB. This accounts for:
The installation itself (approximately 1–2 GB).
Space for log files, temporary files, and extracts managed by the File Store and Data Engine.
Room for backups and operational overhead.
The full minimum hardware recommendations for a single-node production deployment are:
8 CPU cores (2.0 GHz or faster).
32 GB RAM.
50 GB free disk space (on the system drive, typically C: on Windows).
Option A (32 GB): Incorrect. While 32 GB is the minimum RAM requirement, it’s insufficient for disk space in production.
Option B (50 GB): Correct. This matches Tableau’s official recommendation for production environments.
Option C (15 GB): Incorrect. 15 GB is the minimum for a non-production or trial installation, not production.
Option D (64 GB): Incorrect. While 64 GB exceeds the minimum, it’s not the specified requirement—50 GB is sufficient.
What process enables you to access Tableau Services Manager (TSM) over HTTPS?
License Manager
Administration Controller
Administration Agent
Coordination Service
TSM is Tableau Server’s management layer, accessible via CLI or web UI (port 8850). HTTPS secures this access—let’s identify the responsible process:
TSM Architecture:
Administration Controller: Core TSM process, running on the initial node, handling configuration, UI, and CLI commands.
HTTPS: Enabled by default on port 8850 with a self-signed certificate (configurable to custom certs).
Option B (Administration Controller): Correct.
Details: Hosts the TSM web UI (https://
Why: It’s the central hub for TSM operations, including secure access.
Option A (License Manager): Incorrect.
Why: Validates licenses, not responsible for HTTPS or UI access.
Option C (Administration Agent): Incorrect.
Why: Runs on additional nodes in multi-node setups to relay commands to the Controller—no direct HTTPS role.
Option D (Coordination Service): Incorrect.
Why: ZooKeeper manages cluster state, not TSM’s web interface or HTTPS.
Why This Matters: Secure TSM access protects server administration—Administration Controller is the linchpin.
Which three types of authentications can you use to implement single-sign-on (SSO) authentication to Tableau Server? (Choose three.)
OpenID Connect
Local Authentication
Kerberos with Active Directory
Security Assertion Markup Language (SAML)
Single Sign-On (SSO) allows users to authenticate once (e.g., via a corporate identity provider) and access Tableau Server without re-entering credentials. Tableau Server supports several SSO methods:
OpenID Connect (OIDC): An OAuth 2.0-based protocol for SSO, configured via Tableau’s SAML settings with an OIDC-compatible IdP (e.g., Google, Okta).
Kerberos with Active Directory: A ticket-based SSO protocol, widely used in Windows environments with AD integration.
SAML: A flexible SSO standard using XML assertions, supporting various IdPs (e.g., ADFS, PingFederate).
Let’s evaluate:
Option A (OpenID Connect): Correct. OIDC is an SSO method, implemented as a SAML variant in Tableau Server, enabling seamless login.
Option C (Kerberos with Active Directory): Correct. Kerberos provides SSO in AD environments, delegating authentication to the domain controller.
Option D (Security Assertion Markup Language - SAML): Correct. SAML is a core SSO method in Tableau, widely adopted for enterprise integrations.
Option B (Local Authentication): Incorrect. Local Authentication uses Tableau’s internal user database, requiring manual credential entry—no SSO support.
Why This Matters: SSO enhances user experience and security by leveraging existing identity systems, reducing password fatigue.
Which two options can be configured by a server administrator per site? (Choose two.)
Ability to embed credentials
Limitation on storage space
Limitation on number of users
Language and locale
Tableau Server supports multi-tenancy via sites, each with customizable settings managed by server or site administrators. Let’s analyze what’s configurable per site:
Site Settings: Found in the web UI under Site > Settings > General. Server admins can override site admin settings.
Option B (Limitation on storage space): Correct.
Details: Server admins can set a storage quota per site (e.g., 100 GB) to cap disk usage for extracts and workbooks.
How: In TSM or site settings (if enabled)—e.g., tsm configuration set -k site.storage.quota -v 100000.
Impact: Prevents one site from monopolizing resources in multi-site deployments.
Option D (Language and locale): Correct.
Details: Each site can set its language (e.g., English, French) and locale (e.g., date/number formats).
How: Site settings UI—e.g., "Language: French, Locale: France."
Impact: Tailors the user experience per site’s audience.
Option A (Ability to embed credentials): Incorrect.
Details: Embedding credentials (e.g., in data sources) is a server-wide setting (tsm data-access), not per-site. Site admins can’t override it.
Option C (Limitation on number of users): Incorrect.
Details: User limits are tied to licenses (server-wide), not configurable per site. Site admins manage user assignments, not quotas.
Why This Matters: Site-specific settings enable tailored governance and resource allocation in multi-tenant environments.
You attempt to delete a user who owns content on a Tableau Server. What is the result of the delete action?
The user is deleted, and the user’s content is reassigned to the server administrator
The user is deleted, and the user’s content is reassigned to the project leader
The user and all of the user’s content is deleted
The user is switched to an Unlicensed site role and is NOT deleted
Deleting a user in Tableau Server involves handling their owned content (workbooks, data sources)—let’s analyze the process:
Deletion Rules:
Ownership Check: Tableau prevents deletion if the user owns content to avoid orphaning it.
Action: Instead of deleting, the user’s site role is set to Unlicensed, retaining their account and content ownership.
Resolution: An admin must reassign ownership (e.g., via Users > Actions > Change Owner) before deletion.
Option D (User switched to Unlicensed and NOT deleted): Correct.
Details: Attempting deletion (e.g., Users > Select User > Actions > Delete) triggers a check. If content exists, the user becomes Unlicensed—still in the system but unable to log in.
Why: Protects data integrity—content remains accessible for reassignment.
Option A (Deleted, content to server admin): Incorrect.
Why: No automatic reassignment to the server admin—manual action is required first.
Option B (Deleted, content to project leader): Incorrect.
Why: Project leaders don’t automatically inherit content—no such mechanism exists.
Option C (User and content deleted): Incorrect.
Why: Tableau avoids deleting content with the user—too destructive without explicit intent.
Why This Matters: This safeguard prevents accidental data loss, ensuring admins manage ownership transitions deliberately.
What process decides when a Repository failover is required?
Cluster Controller
Coordination Service
Gateway
Backgrounder
In a high-availability (HA) Tableau Server setup, the Repository (PostgreSQL) has an active and passive instance. Failover occurs if the active Repository fails. Let’s dive into the process:
HA Setup:
Two Repository instances across nodes (active/passive).
Failover switches to the passive instance if the active one becomes unavailable (e.g., crash, network issue).
Cluster Controller:
Role: Monitors all processes (e.g., Repository, File Store) across nodes, detecting failures via heartbeats and status checks.
Failover Decision: If the active Repository stops responding, Cluster Controller initiates failover, promoting the passive instance to active.
Coordination: Works with Coordination Service (ZooKeeper) to update topology but makes the initial detection call.
Option A (Cluster Controller): Correct.
Why: It’s the watchdog process, constantly monitoring Repository health and triggering failover when needed.
Option B (Coordination Service): Incorrect.
Role: ZooKeeper maintains cluster state and coordinates topology updates post-failover, but doesn’t detect the failure—Cluster Controller does.
Option C (Gateway): Incorrect.
Role: Routes client requests—unrelated to internal process monitoring or failover.
Option D (Backgrounder): Incorrect.
Role: Executes background tasks—no involvement in Repository failover decisions.
Why This Matters: Understanding failover ensures HA reliability—Cluster Controller is the linchpin for resilience.
You install Tableau Server on a server that has four processor cores. How many instances of each Tableau Server process are installed?
2
1
8
4
Tableau Server’s installer configures process instances based on hardware and deployment type (single-node vs. multi-node). For a single-node installation with 4 cores, we need to consider the default process topology. Let’s break this down exhaustively:
Key Processes:
Gateway: Handles incoming requests (1 instance).
Application Server (VizPortal): Manages UI and sessions (1 instance).
VizQL Server: Renders visualizations (2 instances).
Backgrounder: Runs extract refreshes, subscriptions (1 instance).
Data Server: Manages data connections (1 instance).
File Store: Stores extracts (1 instance).
Repository: Metadata database (1 instance, active).
Cluster Controller, Cache Server, etc.: Supporting processes (typically 1 each).
Default Configuration:
On a single-node install, Tableau sets 1 instance per process unless specified otherwise, except for VizQL, which defaults to 2.
The installer doesn’t scale instances linearly with cores (e.g., 4 cores ≠ 4 instances). Post-install, TSM can adjust this (e.g., tsm topology set-process), but the question asks for the installed default.
Minimum hardware (8 cores, 32 GB RAM) suggests higher defaults, but 4 cores still triggers a minimal setup.
Option B (1): Correct with Caveat.
Most processes (e.g., Backgrounder, Gateway, Data Server) default to 1 instance on install, regardless of 4 cores.
VizQL defaults to 2, but the question’s phrasing ("each process") implies a general rule. Historically (and per docs), 1 is the baseline for most, with VizQL as the exception.
Interpretation: Assuming "each" means the typical case, 1 fits most processes on a 4-core single-node setup.
Option A (2): Incorrect. Only VizQL defaults to 2; others don’t.
Option C (8): Incorrect. Far exceeds defaults—8 cores might justify more, but not 4.
Option D (4): Incorrect. Not tied to core count by default; manual config would be needed.
Why This Matters: Understanding defaults aids capacity planning—4 cores is below production minimum (8), so performance tuning may be needed post-install.
What account should you use to run the Tableau Server installation program?
A local user account
A domain user account
An account in the local administrator group
An NT AUTHORITY\NetworkService account
Installing Tableau Server on Windows requires an account with sufficient privileges to configure services, write to the file system, and manage registry settings. Let’s analyze this in depth:
Installation Requirements:
The installer creates services (e.g., Tableau Server Gateway), writes to Program Files and ProgramData, and configures TSM.
It needs local administrative privileges on the machine to perform these tasks.
Post-install, a "Run As" account can be set for services (e.g., NT AUTHORITY\NetworkService), but this is separate from the install account.
Option C (An account in the local administrator group): Correct.
Why: The account must be in the local Administrators group to:
Install software (UAC elevation).
Configure services and ports.
Write to protected directories (e.g., C:\Program Files\Tableau).
Examples: A local admin (e.g., Administrator) or a domain user added to the Administrators group (e.g., DOMAIN\AdminUser).
Process: Log in as this account, run the installer, and provide TSM admin credentials during setup.
Option A (A local user account): Incorrect.
A standard local user (not in Administrators) lacks permissions—installation would fail with "Access Denied" errors.
Option B (A domain user account): Incorrect unless clarified.
A domain user without local admin rights can’t install. If it’s in the Administrators group, it qualifies, but C is more specific.
Option D (NT AUTHORITY\NetworkService): Incorrect.
This is a built-in service account for running services (default "Run As" post-install), not for executing the installer—an interactive user account is required.
Why This Matters: Using the right account prevents install failures and ensures secure configuration—critical for production setups.
TESTED 06 Jul 2026
