EMT Practice Test

1. Question Content...

---

Question1: Is the following description of an access profile correct?
Solution: it can be acknowledged during certifications.

Question2: Is this statement true about certification campaigns?
Solution: Certifications are assigned to the reviewer when the campaign status is Preview Ready.

Question3: Is this an item that an IdentityNow engineer should configure when implementing a source that uses a JDBC connector?
Solution: This item is complete

Question4: Is the following true about the web-services connector in IdentityNow?
Solution: The connector only supports JSON content-types.

Question5: Is this statement true about the purpose of a tenant?
Solution: A non-production tenant is used for testing new features.

Question6: A customer wants to configure a virtual appliance (VA) to use a static IP address. Does this file on the VA need to be modified to perform the configuration?
Solution: /etc/ systemd/network/ static, network

Question7: The customer has a system that matches the following description. Is this a suitable connector type to use?
The system is a modern, cloud-based, web application that uses a MySQL database backend provided by the cloud platform. The database is only accessible from the web application. The web application exposes a fully compliant SCIM 2.0 interface with OAuth 2.0 client credentials.
Solution: Generic Cloud Connector

Question8: The customer has a system that matches the following description. Is this a suitable connector type to use?
The system is a modern, cloud-based, web application that uses a MySQL database backend provided by the cloud platform. The database is only accessible from the web application. The web application exposes a fully compliant SCIM 2.0 interface with OAuth 2.0 client credentials.
Solution: SCIM 2.0 Connector

Question9: Does the following use case correctly describe passthrough authentication?
Solution: A user logs into identityNow via an identity provider's login. The identity provider exchanges information via federation.

Question10: Is this statement true?
Solution: All emails generated from a tenant go to the intended recipient by default.

Question11: Can a user with Report-admin level permissions within IdentityNow perform this action?
Solution: View a live display of events in progress

Question12: Refer to the following diagram.

For this strategy, all virtual appliances (VAs) are deployed in a single VA cluster, with all VAs running concurrently. Some of these VAs are in the primary data center, and others {called OR VAs) are deployed in a DR data center.
While using this strategy, is this a disadvantage?
Solution: The disaster recovery VAs are not being utilized at all until a disaster recovery event occurs.

Question13: An engineer needs to troubleshoot the following issue:
Incomplete Identities on authoritative source
Is this a reasonable action for the engineer to take?
Solution: Download the identity Exceptions report from the identity profile page.

Question14: Is the following description of an access profile correct?
Solution: It directly references roles to provide access.

Question15: Does this example accurately describe an IdentityNow data flow?
1. The user changes their password in IdentityNow.
2. The virtual appliance checks in with the IdentityNow tenant and receives the request
3. The virtual appliance contacts the IQService host.
4. The IQService host makes the change in Active Directory.

Question16: Is this an advantage of microservice architecture?
Solution: It provides quicker resolution of unintentional issues or failures with the service.

Question17: Is this an example of a vanity URL?
Solution: https://identityNowacme.com

Question18: Is this an item that an IdentityNow engineer should configure when implementing a source that uses a JDBC connector?
Solution: Use a query select statement with a clause to match the incoming account to an existing account for the Single Account SQL Query configuration item

Question19: Is this statement true about using the IdentityNow APIs?
Solution: IdentityNow's versioned APIs are fully supported.

Question20: Is this statement true about using the IdentityNow APIs?
Solution: API documentation is located at https://docs.sailpoint.com

Question21: Does this run on the VA?
Solution: Active Directory connector

Question22: An IdentityNow engineer needs to review logs to diagnose when the secure tunnel fails to allow communication. Could reviewing thi9 log file help diagnose the issue?
Solution: /home/sailpoint/log/relay.log

Question23: Is this an item that an IdentityNow engineer should configure when implementing a source that uses a JDBC connector?
Solution: Define an account schema by using 'Discover Schema'' or by manually configuring the schema attributes.

Question24: Is this statement true about the purpose of a tenant?
Solution: A non-production tenant is for demonstrating functionality.

Question25: Exhibit.

The diagram represents me contents of a single Active Directory forest. Assume that all employees hove employeeType set to employee and contractors have employeeType set to contractor.
is the following configuration valid for the given scenario?
Solution:
The customer needs to query only Employees from Domain A and Contingent Workers from Domain B Fotests:
1. DN - dc=domains, dc=com;TLS =No; Server = server,domaina.com
2. DN - dc=domaininb,dc=com;TLS =No; Server = server,domaina.com
search DNS:
1. DN - OU=users, DC=domains, DC=com; LDAP Filter = (employeeType=employee
2. DN - OU=Contingent Workers, OU=Users, DC=domainb, DC=com

Question26: When an engineer goes to Global > System Settings and clicks on System Notifications, the following page opens:

What email notifications are enabled if the engineer selects Sources?
Solution: A notification is sent when a source has been in an error state for fifteen minutes.

Question27: In an IdentityNow environment, the source lest connection is failing with a timeout error.
Is this a step an identityNow engineer should take to troubleshoot the problem?
Solution: Turn off the virtual appliance's (VA) internal firewall.

Question28: In an IdentityNow environment, the source lest connection is failing with a timeout error.
Is this a step an identityNow engineer should take to troubleshoot the problem?
Solution: Test connectivity from the virtual appliance (VA) to the source.

Question29: The customer has a system that matches the following description. Is this a suitable connector type to use?
The system is a modern, cloud-based, web application that uses a MySQL database backend provided by the cloud platform. The database is only accessible from the web application. The web application exposes a fully compliant SCIM 2.0 interface with OAuth 2.0 client credentials.
Solution: OpenLDAP Connector

Question30: Is this statement true?
Solution: IdentifyNow allow HTML editing of an email template.

Question31: In an IdentityNow environment, the source lest connection is failing with a timeout error.
Is this a step an identityNow engineer should take to troubleshoot the problem?
Solution: Clear the Authentication checkbox for the source in identityNow.

Question32: Review the following transform:

Can the following output of this transform be expected, based on the input provided in the option?
Solution:

Question33: Does this run on the VA?
Solution: IQService

Question34: Is this statement true about certification campaigns?
Solution: Search-based certification campaigns are used to review access for non-correlated accounts.

Question35: Is this statement true about the purpose of a tenant?
Solution: The default non-production tenant has full performance scalability.

Question36: In an IdentityNow environment, the source lest connection is failing with a timeout error.
Is this a step an identityNow engineer should take to troubleshoot the problem?
Solution: Clear the Authentication checkbox for the source in identityNow.

Question37: Is this statement true about certification campaigns?
Solution: A certification item can be reassigned multiple times.

Question38: An IdentityNow engineer needs to find identities with disabled AD accounts by using IdentityNow's search features. Is this the correct search syntax to perform this task?
Solution:

Question39: Is this statement true about using the IdentityNow APIs?
Solution: The APIs can be used by additional clients like cURL or Postman.

Question40: Is this statement true about deploying and configuring IdentityNow's virtual appliance (VA)?
Solution: When deploying the VA in Azure, the identityNow engineer will need to utilize the Azure command
-line interface(CLI) to deploy the VA image.

Question41: An IdentityNow engineer needs to find identities with disabled AD accounts by using IdentityNow's search features. Is this the correct search syntax to perform this task?
Solution:

Question42: When preparing for a manager certification campaign is this a step that is considered a best practice before the campaign preview is generated?
Solution: validate the email template. Certification Due

Question43: Is this statement accurate regarding SailPoint's multi-tenant processing environment?
Solution: identityNow admins have the option to choose how often updates to their tenant occur.

Question44: Is this statement accurate regarding SailPoint's multi-tenant processing environment?
Solution: identityNow admins have the option to choose how often updates to their tenant occur.

Question45: Does the following use case accurately describe provisioning on a source that has provisioning disabled?
Solution: Provisioning is initialed by a process (e.g. Access Request Role Assignments). Provisioning instructions are calculated based on current access, and go through filtering and expansion processes.
Provisioning is then assigned to a source for provisioning. Since provisioning is disabled on the source a manual task is opened in IdentityNow A person carries out the provisioning manually.

Question46: Is this statement true about the IdentityNow release cycle?
Solution: IdentityNow releases are controlled and coordinated by SailPoint.