EMT Practice Test

1. Question Content...

---

Question1: Is this statement true about the IdentitylQ Audit functionality and/or options?
Solution: The built-in auditing options are immutable; they are always recorded. However, custom audits can be turned on or off.

Question2: Is the following statement about workflow step types and their usage true?
Solution: When a wait step is encountered in a foreground workflow, the user will notice this, because the screen will freeze for the specified number of seconds.

Question3: Can this action be performed as part of configuring an application definition in IdentitylQ?
Solution: Define account correlation via a rule.

Question4: An engineer needs to first create a custom audit event and then set up an associated report. What are four steps to accomplish this goal?
Solution:

Question5: Is the following a true statement about IdentitylQ authentication and authorization?
Solution: What users can see and do in IdentitylQ can be party controlled by their authorized scope.

Question6: An implementation engineer needs to perform an initial installation of identitylQ.
Drag the options from the left into the answer area on the right, and place them in the correct order.

Question7: A bank is two years into an ongoing project to provide all access through roles. The bank is actively using roles and actively adding to their role model. They need to ensure that all roles include the correct entitlements.
Will this certification type achieve the goal?
Solution: Account Group Membership Certification

Question8: Is this statement valid regarding the control and usability of the Debug pages in IdentitylQ?
Solution: The application server must be restarted after reloading the logging file through the Debug-Logging page.

Question9: Is this a purpose of an IdentitylQ certification?
Solution: to attest to a user's integrity

Question10: Is the following statement about IdentitylQ rule inputs and outputs correct?
Solution: A BeanShell rule in IdentitylQ must always return an object derived from the abstract class sailpoint.object.saiipointobject.

Question11: Is this an example of a mover lifecycle event?
Solution: An employee quits their job and needs all of their accounts disabled.

Question12: Is this statement valid regarding the control and usability of the Debug pages in IdentitylQ?
Solution: Workflows can be run directly from the Debug-Object page.

Question13: Is the following statement true?
Solution: All ManagedAttribute objects associated to an Identity can be viewed on the 'Attributes' tab from 'View Identity' QuickLink.

Question14: Is this what should be performed in order to generate the database script to extend Application attributes in the IdentitylQ database on the initial installation?
Solution: Run a build with the updated schema placed inside it.

Question15: Is this statement true about identitylQ's syslog event storage?
Solution: IdentitylQ logging and auditing both require extra function calls within the application and will generate data that can be compressed to avoid any storage and Improve overall performance.

Question16: Is this statement correct about writing and executing source mapping rules to populate identity attributes?
Solution: The Identity object is passed to the rule.

Question17: Can the search type in Syslog be used to accomplish this result?
Solution: Identifying the number of employees that report to a specific person

Question18: Is this a true statement about localization support in IdentitylQ?
Solution: The language displayed in the user interface is always based on the default language selected in the global settings.

Question19: Which four steps are necessary for turning on Certifications logging at the severity log level of trace? Drag four options from the left into the answer area on the right, and place them in the correct order.

Question20: Is this statement true about email templates or behavior within them?
Solution: Whole paragraphs cannot be included or omitted based on conditional tests, such as #if (SremindersRemaining > 0). Only individual lines can be omitted in this manner.

Question21: Is the following statement about workflow step types and their usage true?
Solution: The step actions available when editing a step in the Business Process Editor are: Script. Rule, Subprocess and Call Method.

Question22: A client needs a custom quicklink, which only managers can launch, in order to launch a simple workflow. Is this a valid step to take during the development of this custom quicklink?
Solution: Insert the "Managers" quicklink population as the dynamic scope in the quicklink object.

Question23: Is this statement true about identitylQ's syslog event storage?
Solution: IdentitylQ logging events are stored in a database table in addition to log files.

Question24: Is this statement correct about writing and executing source mapping rules to populate identity attributes?
Solution: All Identity Mappings must use a rule to set the identity attribute.

Question25: A client needs a custom quicklink, which only managers can launch, in order to launch a simple workflow. Is this a valid step to take during the development of this custom quicklink?
Solution: Place a quicklink object on the workflow that is to be launched

Question26: Is this a correct procedure for testing generated emails in a non-production system?
Solution: Change the Email Notification Type to POP3 under Global Settings > Configure IdentitylQ Settings > Mail Settings, run the test scenario. and verity if the emails were successfully delivered to mailboxes specified on Identity objects.

Question27: A customer wants to make changes in their IdentitylQ user interface. Consider branding and other IdentitylQ Ul changes. Is this statement valid?
Solution: Primary and secondary colors are set through the IdentitylQ Configuration > Miscellaneous page.

Question28: Can the search type in Syslog be used to accomplish this result?
Solution: Launching a certification using the search results

Question29: Is this statement true about certifications?
Solution: The staging period is required.

Question30: An implementation engineer needs to perform an upgrade of IdentitylQ between releases. Is the following statement true?
Solution: Every version release (excluding patch releases) between the current version of IdentitylQ and the target version of IdentitylQ must be installed in sequential order for an upgrade.

Question31: Select the best policy type for defining each access policy. Use the drop-down menus to select your answers.

Question32: Is this an example of a mover lifecycle event?
Solution: A contractor whose contract expired and accounts were disabled has a new contract with the company; the contractor needs all of their previous accounts enabled.

Question33: Is this a valid step to take when importing SailPoint XML file objects into IdentitylQ?
Solution: Import the XML object through the IdentitylQ console.

Question34: Assuming that the policy violation owner has the necessary permissions, is this a valid option for the policy violation owner to use when acting on a policy violation of type 'Role SOD Policy?
Solution: Schedule Policy Composition Certification

Question35: A customer wants to make changes in their IdentitylQ user interface. Consider branding and other IdentitylQ Ul changes. Is this statement valid?
Solution: The sets of columns displayed in most tables in the IdentitylQ user interface are controlled by entries in the ColumnConfig elements of the UlConfig object.

Question36: Can a Workgroup be used for the following scenario?
Solution: Automatically creating multiple groups based on the values of a single identity attribute.

Question37: Is this statement correct about writing and executing source mapping rules to populate identity attributes?
Solution: The rule type must be IdentityAttribute.

Question38: A client needs a custom quicklink, which only managers can launch, in order to launch a simple workflow. Is this a valid step to take during the development of this custom quicklink?
Solution: Enter the name of the workflow to launch in the quicklink object.

Question39: Can the Provisioning tab under "Administrator Console' be used to do the following task?
Solution: View the specific operations on each attribute being provisioned.

Question40: Is this a true statement about localization support in IdentitylQ?
Solution: Message files may be added to support additional languages, but the out-of-the-box supplied message files cannot be modified.

Question41: A client wants users who belong to an IdentitylQ workgroup named Management to be able to request entitlements and roles, but only for other users whose location attribute is the same as theirs.
Is this a population that will achieve the goal?
Solution: Create a quicklink population, set the membership match list to "All," and set "Who can members request for?'' as share attributes with the requester, with the attribute set to location.'

Question42: is the following a valid role option that can be configured?
Solution: Configure a role to include a set of IdentitylQ capabilities.

Question43: Can an Escalation Rule be used to handle this scenario?
Solution: Automatically reassign parts of an access review to a different certifier.

Question44: Can this be achieved using Rapid Setup user interface configuration options?
Solution: Reassign all object ownership to the user's manager during Leaver and Termination events.

Question45: Can the following IdentitylQ object be extended to store client-specific data by updating the corresponding .HBM file?
Solution: WorkItem

Question46: Is this what should be performed in order to generate the database script to extend Application attributes in the IdentitylQ database on the initial installation?
Solution: Add the new object attribute to the Application ObjectConfig in IdentitylQ.

Question47: Is the following a true statement about IdentitylQ authentication and authorization?
Solution: A user's access to the Identity Warehouse is controlled by the QuickLink Populations that they are a member of.

Question48: Is the following statement true about out-of-the-box reporting?
Solution: In the Reporting user interface, instances of reports are located on the 'My Reports' tab, and templates are located on the 'Reports' tab.

Question49: Can the following action be performed using Rapid Setup application onboarding?
Solution: Specify account correlation by mapping an identity attribute to an account attribute.

Question50: Is this a true statement about localization support in IdentitylQ?
Solution: Localized messages can be retrieved from custom Java/BeanShell code using SailPoint APIs.

Question51: An engineer is assigned to configure an account attribute. The requirements are:
Purpose: Flag privileged accounts
Read from: Financial application, privileged attribute
Calculate from: Keystore application, responsibility-code attribute
Usage 1: Display as option in Advanced Analytics
Usage 2: Use when writing rules
Usage 3: Include in policies
Does the engineer need to set this configuration option on the account attribute to meet the requirements?
Solution: Edit Mode: Read Only

Question52: Can the following action be performed using Rapid Setup application onboarding?
Solution: Specify account correlation using a rule.

Question53: Can this action be performed as part of configuring an application definition in IdentitylQ?
Solution: Specify which users should be provisioned with a basic account as part of a joiner event.

Question54: A client wants users who belong to an IdentitylQ workgroup named Management to be able to request entitlements and roles, but only for other users whose location attribute is the same as theirs.
Is this a population that will achieve the goal?
Solution: Create a quicklink population, set the membership match list to the IdentitylQ workgroup "Management," and set "Who can members request for?" as report to the requester.

Question55: IdentitylQ has been installed and set up with the contents of IdentityExtended.hbm.xml as follows:

Is this a correct statement about the installation?
Solution: There is a limitation in this installation: When defining the identity mappings using Global Settings > Identity Attributes, only 12 additional searchable attributes can be defined. Additional identity attributes and mappings can be defined, but they cannot be searchable.

Question56: Is this a correct procedure for testing generated emails in a non-production system?
Solution: Change the Email Notification Type to POP3 under Global Settings > Configure IdentitylQ Settings > Mail Settings, run the test scenario. and verity if the emails were successfully delivered to mailboxes specified on Identity objects.

Question57: Can the following IdentitylQ object be extended to store client-specific data by updating the corresponding .HBM file?
Solution: Link

Question58: Can a Workgroup be used for the following scenario?
Solution: Providing a group of users with specific capabilities.