Yes, the statement is true. In SailPoint IdentityIQ, the built-in auditing options are indeed immutable, meaning they are always recorded and cannot be disabled or altered. This ensures that critical actions and changes are always logged for compliance and security purposes. However, custom audit configurations, such as additional custom audit fields or logs, can be turned on or off based on specific organizational requirements.
Reference:
SailPoint IdentityIQ Audit Guide
SailPoint IdentityIQ Administration Guide (Sections on Auditing and Compliance)

The configuration option "Comment Character" is not required when setting up a SCIM 2.0 application in SailPoint IdentityIQ. The "Comment Character" option is generally used for handling comment lines in flat files or CSV file-based connectors. Since SCIM 2.0 is a RESTful API-based protocol designed for managing identities in a standardized way, this option does not apply to SCIM 2.0 integrations. Therefore, it is not a necessary configuration when working with SCIM 2.0 applications.
Reference:
SailPoint IdentityIQ SCIM 2.0 Integration Guide
SailPoint IdentityIQ Application Configuration Guide (SCIM and REST API sections)

The statement that a BeanShell rule in IdentityIQ must always return an object derived from the abstract class sailpoint.object.SailPointObject is incorrect. While many rules in IdentityIQ may return objects that derive from SailPointObject, it is not a strict requirement. Rules can return various types of objects depending on their purpose and context. For example, a rule might return a String, Boolean, Map, or even null, depending on what the rule is designed to accomplish.
Therefore, the correct answer is B. No.
Reference:
This conclusion is drawn from the SailPoint IdentityIQ Rule Programming Guide, which explains that the return type of a rule can vary and does not need to be an instance of SailPointObject.

In SailPoint IdentityIQ, the specific configuration that allows a user to enable an account for themselves or a subordinate through the "Manage Accounts" option does not necessarily need to be configured in Lifecycle Manager (LCM) alone. While LCM does provide extensive capabilities for account management actions like provisioning, rehire, and more, enabling an account is primarily tied to the permissions and entitlements granted to the user through their role, capabilities, and access profiles.
To address the specific functionality described:
Manage Accounts is typically a part of IdentityIQ's broader account management capabilities, which are not exclusively tied to LCM. The ability to enable or disable accounts can be governed by rules and workflows within IdentityIQ, and these may or may not be linked directly to LCM configurations.
Rehire Action in LCM: The "Rehire" action within LCM Configuration is specific to processes related to reactivating an employee's identity when they are rehired. This does not directly relate to enabling an account from the "Manage Accounts" screen. Rehire workflows typically involve reinstating the user's previous access, which could include enabling accounts, but this is a broader process.
Permissions and Roles: The ability to enable accounts is often governed by the permissions assigned to a user's role within IdentityIQ. These permissions may be granted outside of LCM configurations and handled by IdentityIQ's access governance framework.
Workflow Configurations: Enabling or disabling an account could also be tied to specific workflows, which can be configured separately from LCM, using IdentityIQ's workflow engine. These workflows determine the steps and approvals required to perform such actions.
Reference:
SailPoint IdentityIQ Configuration Guide: Account Management
SailPoint IdentityIQ Lifecycle Manager Configuration Guide
SailPoint IdentityIQ Administration Guide (Sections on Roles and Permissions, Workflow Configurations)

One of the primary purposes of an IdentityIQ certification is to provide reviewers with a snapshot of a user's system access at a given point in time. This snapshot allows managers, auditors, or other designated reviewers to verify whether the access privileges assigned to a user are appropriate, based on their job responsibilities and compliance requirements. By reviewing this snapshot, organizations can identify and remediate any inappropriate or excessive access, thus maintaining a secure and compliant environment.
Therefore, the correct answer is A. Yes.