EMT Practice Test

1. Question Content...

---

Question1: Is this an item that an IdentityNow engineer should configure when implementing a source that uses a JDBC connector?
Solution: Use a query select statement with a clause to match the incoming account to an existing account for the Single Account SQL Query configuration item

Question2: Is this statement true about deploying and configuring IdentityNow's virtual appliance (VA)?
Solution: When using the AWS deployment option, the identityNow engineer needs to convert the VA image in order to deploy it.

Question3: Is this statement correct about security and/or encryption of data?
Solution: When setting up a virtual appliance cluster. SailPoint creates an asymmetnc key pair based on a user-provided passphrase. and then uses this key pair to communication with the IdentityNow tenant.

Question4: Review the following transform:

Can the following output of this transform be expected, based on the input provided in the option?
Solution:

Question5: Does this example accurately describe an IdentityNow data flow?
Solution:
1. The IdentityNow engineer logs into the virtual appliance and creates a new identity profile.
2. The virtual appliance contacts the IdentityNow tenant to synchronize the identity profile.
3. The IdentityNow tenant provisions accounts to source systems.
4. The IdentityNow tenant sends an API call to the virtual appliance with confirmation that accounts were provisioned

Question6: Is the following description of an access profile correct?
Solution: It directly references roles to provide access.

Question7: Is this statement true about the purpose of a tenant?
Solution: Live access reviews should be performed in a production environment.

Question8: When an engineer goes to Global > System Settings and clicks on System Notifications, the following page opens:

What email notifications are enabled if the engineer selects Sources?
Solution: A notification is sent when a source has been in an error state for fifteen minutes.

Question9: Is the following true about custom connectors in IdentityNow?
Solution: Custom connector are developed and compiled inside identityNow.

Question10: Is this statement true about certification campaigns?
Solution: Search-based certification campaigns can be leveraged to target specific access held by users

Question11: Is the following true about custom connectors in IdentityNow?
Solution: Custom connector configurations can have account correlation settings defined.

Question12: Is this statement accurate regarding SailPoint's multi-tenant processing environment?
Solution: A proprietary fairness algorithm is used to manage and distribute the workload.

Question13: Is this an appropriate use case for the Build Map?
Solution: To provide the ability to modify to modify the map data of an account for a JDBC or a Delimated File source.

Question14: Is this statement true about deploying and configuring IdentityNow's virtual appliance (VA)?
Solution: When deploying the VA in Azure, the identityNow engineer will need to utilize the Azure command -line interface(CLI) to deploy the VA image.

Question15: Is this statement true about certification campaigns?
Solution: Search-based certification campaigns are used to review access for non-correlated accounts.

Question16: Review the steps.
1._____________________________________.
2 Import the virtual appliance (VA) image to the virtuahzation platform.
3. Start the VA.
4. Log in to the VA using the default credentials.
5. Change the password for the SailPoint user.
6______________________________________
7. Create a new VA cluster in IdentityNow.
8. Create a new VA configuration in IdentityNow.
9. Download / procure the config.yaml.
10. Configure the keyPassphrase in the config.yaml.
11. Upload the config.yaml into the VA.
12._____________________________________
Solution: 1. Configure networking configurations (as needed) 6. Click Test Connection on the VA configuration. 12. Download / procure the VA image.

Question17: An IdentityNow engineer has the following problem:
IdentityNow shows status failed on a virtual appliance (VA).
Is this one of the steps that should be taken troubleshoot the issue?
Solution: Review the log files in /home/sailpoint/log for errors.

Question18: Does the following use case accurately describe provisioning on a source that has provisioning disabled?
Solution: Provisioning is initialed by a process (e.g. Access Request Role Assignments). Provisioning instructions are calculated based on current access, and go through filtering and expansion processes. Provisioning is then assigned to a source for provisioning. Since provisioning is disabled on the source a manual task is opened in IdentityNow A person carries out the provisioning manually.

Question19: In an IdentityNow environment, the source lest connection is failing with a timeout error.
Is this a step an identityNow engineer should take to troubleshoot the problem?
Solution: Clear the Authentication checkbox for the source in identityNow.

Question20: Can a user with Report-admin level permissions within IdentityNow perform this action?
Solution: View a live display of events in progress

Question21: Is this statement true about the IdentityNow release cycle?
Solution: IdentityNow releases are controlled and coordinated by SailPoint.

Question22: In an IdentityNow environment, the source lest connection is failing with a timeout error.
Is this a step an identityNow engineer should take to troubleshoot the problem?
Solution: Check that port values configured on the identityNow source are connected for the source.

Question23: Is this an advantage of microservice architecture?
Solution: It provides quicker resolution of unintentional issues or failures with the service.

Question24: When preparing for a manager certification campaign is this a step that is considered a best practice before the campaign preview is generated?
Solution: Evaluate available campaign administration filters

Question25: Is this statement true?
Solution: All emails generated from a tenant go to the intended recipient by default.

Question26: Is this an item that an IdentityNow engineer should configure when implementing a source that uses a JDBC connector?
Solution: Select the checkbox to use database admin as service account.

Question27: HOTSPOT
Match each Virtual Appliance command to Its purpose.

Question28: Is the following description of an access profile correct?
Solution: It allows definition of an approval process.

Question29: An IdentityNow engineer needs to find identities with disabled AD accounts by using IdentityNow's search features. Is this the correct search syntax to perform this task?
Solution:

Question30: Is this statement true?
Solution: IdentifyNow allow HTML editing of an email template.

Question31: In an IdentityNow environment, the source lest connection is failing with a timeout error.
Is this a step an identityNow engineer should take to troubleshoot the problem?
Solution: Test connectivity from the virtual appliance (VA) to the source.

Question32: An IdentityNow engineer needs to find identities with disabled AD accounts by using IdentityNow's search features. Is this the correct search syntax to perform this task?
Solution:

Question33: Is this an advantage of microservice architecture?
Solution: identities take up less space in the cloud.

Question34: Is this statement true about certification campaigns?
Solution: A certification item can be reassigned multiple times.

Question35: A customer wants to configure a virtual appliance (VA) to use a static IP address. Does this file on the VA need to be modified to perform the configuration?
Solution: /etc/ systemd/network/ static, network

Question36: An IdentityNow engineer has the following problem:
An identity is listed under Identities with Errors.
Is this one of the steps that should be taken to troubleshoot the issue?
Solution: Check for missing lastname, email, or uid attributes.

Question37: Is this an example of a vanity URL?
Solution: https://identityNowacme.com

Question38: An engineer needs to troubleshoot the following issue:
Incomplete Identities on authoritative source
Is this a reasonable action for the engineer to take?
Solution: Review the All Source Activity report available in Search.

Question39: A customer wants to configure a virtual appliance (VA) to use a static IP address. Does this file on the VA need to be modified to perform the configuration?
Solution: /home/sailpoint/proxy.yaml

Question40: Does this run on the VA?
Solution: Active Directory connector

Question41: Is this statement true about using the IdentityNow APIs?
Solution: API documentation is located at https://docs.sailpoint.com

Question42: In an optimized aggregation, if an account is unchanged since the last aggregation, does this step execute?
Solution: The virtual appliance connects to the target system to retrieve accounts.

Question43: An IdentityNow engineer has the following problem:
IdentityNow shows status failed on a virtual appliance (VA).
Is this one of the steps that should be taken troubleshoot the issue?
Solution: Log in to the console of the VA and verify that the VA has connectivity to the internet.

Question44: An engineer needs to troubleshoot the following issue:
Incomplete Identities on authoritative source
Is this a reasonable action for the engineer to take?
Solution: Review the identities without Managers report.

Question45: Can a user with Report-admin level permissions within IdentityNow perform this action?
Solution: invite new users to IdentityNow.

Question46: An IdentityNow engineer has set up an access profile for an application. The access profile allows for users to request access, and for a user's manager to approve or deny access.
After a recent staff meeting, management has expressed that they want to remove any approval requirements for this application.
Is management's request possible in IdentityNow. and. if so. are these the recommended steps the engineer should take to meet their new requirement?
Solution: It is possible. Edit the access profile, and uncheck the box marked 'Required Approval'.

Question47: Is this an item that an IdentityNow engineer should configure when implementing a source that uses a JDBC connector?
Solution: Define an account schema by using 'Discover Schema'' or by manually configuring the schema attributes.

Question48: Is this statement correct about security and/or encryption of data?
Solution: identityNow uses a hashing algorithm for secure encryption of data in transit and uses TLS for hashing passwords and the answers to security questions

Question49: Is the following true about the web-services connector in IdentityNow?
Solution: Create Account' is a valid web-services connector operation type

Question50: Is this statement accurate regarding SailPoint's multi-tenant processing environment?
Solution: identityNow admins have the option to choose how often updates to their tenant occur.

Question51: Is this the recommended way to test lifecycle state transitions in IdentityNow?
Solution: Configure and enable lifecycle states. Find a test identity that is not in the target lifecycle state. Manually change the test identity lifecycle state to the target state from the admin user interface Verify the results of the lifecycle slate in the identity's activity page.

Question52: Is this an example of a vanity URL?
Solution: https://my.example.com

Question53: When preparing for a manager certification campaign is this a step that is considered a best practice before the campaign preview is generated?
Solution: validate the email template. Certification Due