Get SailPoint IdentityNow-Engineer Exam Practice Questions - Real and Updated

Answer : B

No, deleting the certification campaign associated with the application is not the correct step to remove approval requirements for an access request. Certification campaigns are related to periodic reviews of access, not the approval workflow for access requests. To remove the manager approval requirement, changes should be made to the access profile or the associated workflow, not the certification campaign.

Key Reference from SailPoint Documentation:

Certification Campaigns: Certification campaigns are used for access reviews and do not control approval workflows for access requests.

Answer : A

Yes, using a query select statement with a clause to match the incoming account to an existing account is a key configuration for the Single Account SQL Query in a JDBC connector. This query is used to fetch specific account details from the database and must be written in such a way that it uniquely identifies each account, ensuring accurate correlation between the data in the source and the identities in IdentityNow. Properly configuring this SQL query ensures the right accounts are matched and managed.

SailPoint IdentityNow JDBC Connector Single Account Query Configuration Guide.

SailPoint IdentityNow SQL Query Best Practices Documentation.

Answer : B

The virtual appliance (VA) private key is not stored in both the IdentityNow tenant and the VA. The VA private key, which is critical for secure communications, is stored only on the Virtual Appliance (VA) itself. It is used to authenticate and encrypt communications between the VA and the IdentityNow tenant. Storing such sensitive information in the IdentityNow tenant would violate best practices for key management and security.

Instead, the IdentityNow tenant only holds the public key or a reference to the key to facilitate secure exchanges with the VA. The private key remains secured locally within the VA, protecting it from potential security vulnerabilities associated with external storage.

SailPoint IdentityNow Virtual Appliance Architecture Guide.

SailPoint IdentityNow Security and Encryption Documentation.

Answer : B

No, an SoD (Separation of Duties) policy does not require a control matrix to be defined. While a control matrix can be a useful tool for organizations to visualize and enforce SoD policies by mapping roles to potential conflicting access rights, it is not a mandatory component of an SoD policy. An SoD policy primarily focuses on preventing conflicts of interest by ensuring that no individual has access to perform conflicting tasks within a business process (e.g., approving and processing payments). The control matrix is a recommended method for managing SoD but not a requirement.

Key Reference from SailPoint Documentation:

SoD Policy Overview: SailPoint recommends structuring SoD policies to focus on preventing conflicting access but does not mandate the use of a control matrix, which is an optional best practice for visualizing these controls.

Answer : A

Yes, verifying that the Virtual Appliance (VA) has connectivity to the internet is a critical step when troubleshooting a 'failed' status in IdentityNow. The VA requires internet connectivity to communicate with SailPoint IdentityNow's cloud services for synchronization, updates, and other key functions. If the VA is unable to reach the internet, it can lead to a failed status. Logging in to the VA's console to test network connectivity (e.g., using ping or curl commands) is an important step in diagnosing the issue.

Key Reference from SailPoint Documentation:

VA Internet Connectivity Troubleshooting: SailPoint recommends checking the network connectivity as one of the first steps when the VA shows a failed status.