SailPoint Certified IdentityIQ Engineer Exam Questions

Page: 1 / 14
Total 122 questions
Question 1

Is this a purpose of an IdentitylQ certification?

Solution: to attest lo a user's system access



Answer : A

Yes, this is indeed one of the primary purposes of an IdentityIQ certification. Certifications are conducted to attest to a user's system access, ensuring that each user has appropriate and justified access rights to applications, data, and systems within the organization. This is central to IdentityIQ's access governance and compliance processes.


SailPoint IdentityIQ Certification Guide

SailPoint IdentityIQ Governance Overview

Question 2

Is the following true of Identity Provisioning Policies?

Solution: The Create Identity Provisioning Policy will be applied to identity creation during aggregation from an authoritative source so that identities will be created with valid/authorized attribute values.



Answer : A

The Create Identity Provisioning Policy in SailPoint IdentityIQ is designed to apply specific provisioning rules and actions during the creation of identities, especially when aggregating data from authoritative sources. These policies ensure that newly created identities have valid and authorized attribute values based on organizational rules and compliance requirements.

During identity aggregation from an authoritative source, the provisioning policy can enforce rules such as role assignments, attribute validation, and other actions necessary to ensure that the identity is created correctly and securely.

Therefore, the correct answer is A. Yes.


Question 3

Can the following be achieved via configuration of control variables in the out-of-the-box Lifecycle Manager (LCM) workflows?

Solution: Specify which access items may be requested.



Answer : A

Yes, specifying which access items may be requested can be achieved via configuration of control variables in the out-of-the-box Lifecycle Manager (LCM) workflows. In IdentityIQ, control variables within LCM workflows allow administrators to define the scope and criteria for access requests, including restricting or specifying which entitlements, roles, or applications can be requested by users. This is part of the request configuration process, where the access items that users can see and request are defined.

Therefore, the correct answer is A. Yes.


Question 4

Is the following a true statement about IdentitylQ authentication and authorization?

Solution: What users can see and do in IdentitylQ can be party controlled by their authorized scope.



Answer : A

In SailPoint IdentityIQ, what users can see and do is indeed partly controlled by their authorized scope. Authorized scopes define the range of objects (such as identities, roles, applications) that a user has access to. Scopes can be applied to limit access based on specific criteria, ensuring that users only interact with the data and functionalities relevant to their role or responsibility within the organization.

For example, a user with access to a specific scope may only view or manage identities within a certain department or geographical location, depending on how the scope is configured.

Therefore, the correct answer is A. Yes.

Reference: This answer is derived from the SailPoint IdentityIQ Administration Guide, which outlines how scopes are used to manage access control within the platform, influencing both the visibility and actions available to users.


Question 5

Is this a true statement about localization support in IdentitylQ?

Solution: Message files may be added to support additional languages, but the out-of-the-box supplied message files cannot be modified.



Answer : B

The statement is false. In SailPoint IdentityIQ, while message files may indeed be added to support additional languages, the out-of-the-box supplied message files can also be modified. Administrators can customize these message files to adapt the text in the user interface to better suit the organization's needs. This includes modifying existing translations or adding custom messages to meet specific requirements.


SailPoint IdentityIQ Localization Guide

SailPoint IdentityIQ Configuration Guide (Customization of Message Files)

Question 6

A bank is two years into an ongoing project to provide all access through roles. The bank is actively using roles and actively adding to their role model. They need to ensure that all roles include the correct entitlements.

Will this certification type achieve the goal?

Solution: Role Composition Certification



Answer : A

A Role Composition Certification is specifically designed to ensure that roles are composed correctly by reviewing the entitlements and other roles they aggregate. This certification allows reviewers to verify whether the roles include the appropriate entitlements based on business needs and compliance requirements.

Given that the bank's objective is to ensure that all roles include the correct entitlements, a Role Composition Certification is the most appropriate tool to achieve this goal. It allows for the comprehensive review and validation of roles and their associated entitlements, ensuring alignment with the overall access governance strategy.

Therefore, the correct answer is A. Yes.


Question 7

Is this a correct procedure for testing generated emails in a non-production system?

Solution: Change the Email Notification Type to Redirect to file using FTP protocol under Global Settings > Configure IdentitylQ Settings > Mail Settings, run the test scenario, and verify that the email text saved to the redirected file.



Answer : B

The proposed solution suggests changing the Email Notification Type to 'Redirect to file using FTP protocol' under Global Settings > Configure IdentityIQ Settings > Mail Settings. However, IdentityIQ does not provide an option to redirect emails to a file using the FTP protocol directly through the Global Settings in the application.

Typically, to test generated emails in a non-production environment, you would change the Email Notification Type to 'Redirect to File' (if the option is available) or configure an SMTP server with a different setup that captures emails in a file or a specific mailbox designed for testing purposes. The specific steps for testing email generation may vary, but the solution as stated does not align with standard IdentityIQ practices.

Thus, the correct answer is B. No.


Page:    1 / 14   
Total 122 questions