Online Access Free IdentityIQ-Engineer Practice Test

Is this statement true about certifications?
Solution: The staging period is required.

• A.No
• B.Yes

An implementation engineer needs to perform an upgrade of IdentitylQ between releases. Is the following statement true?
Solution: Supported platforms of an older version of IdentitylQ will always be supported in newer versions of IdentitylQ.

• A.No
• B.Yes

IdentitylQ is using emails to notify users about completion of steps within a process, or actions that need to be addressed.
To ensure this notification is working, a main configuration must be set up in IdentitylQ to provide mail server and mail server authentication details.
Is this a required setting that an engineer must set up in IdentitylQ in order to ensure successful communication with the SMTP server?
Solution: Email Protocol

• A.No
• B.Yes

Is this a benefit of using the Run Rule feature of the Debug-Object page?
Proposed Solution:
It can be used to display the return value of simple code.

• A.No
• B.Yes

Select the best policy type for defining each access policy. Use the drop-down menus to select your answers.

Correct Answer:

Explanation:
The best policy types for defining each access policy are as follows:
* Users cannot be members of the AccountsPayable group in AD and have the CreateVendor access right in the Vendor System application at the same time.answer: Entitlement SOD
* This policy deals with conflicting access rights at the entitlement level (i.e., group membership and specific access rights). " Entitlement Separation of Duties " (SOD) ensures that users don ' t have access to conflicting entitlements.
* Users can have two accounts on a given system, but no more.answer: Account
* This policy pertains to the number of accounts a user can have on a system. The " Account " policy type manages restrictions on how many accounts users can possess.
* Users who have either the VPN role or the Travel role cannot also be in the Contractor role.answer:
Role SOD
* This policy involves conflicting roles. " Role Separation of Duties " (Role SOD) ensures that users cannot have conflicting roles, such as VPN and Contractor, or Travel and Contractor.
Comprehensive Detailed Explanation with All IdentityIQ Engineer References
* Entitlement SOD: This policy prevents users from having conflicting access rights. In this case, being in the AccountsPayable group while also having access to create vendors creates a potential conflict.
IdentityIQ uses Entitlement SOD to handle these scenarios by preventing such combinations of entitlements.
* Account: This type of policy limits the number of accounts users can have on a given system. By setting up an Account policy, IdentityIQ ensures that a user cannot exceed the set number of accounts (e.
g., two accounts on a system).
* Role SOD: When dealing with conflicting roles (such as VPN or Travel role conflicting with a Contractor role), Role SOD policies ensure that users do not end up in roles that violate governance or security policies. This type of policy ensures role-based access conflicts are mitigated in IdentityIQ.
SailPoint IdentityIQ Compliance Manager Guide (section on defining and managing Separation of Duties (SOD) policies).