Prepare Smarter for the IdentityIQ-Engineer Exam
Build your exam confidence with flexible preparation resources designed around the latest IdentityIQ-Engineer exam objectives. Practice at your own pace using PDF questions, online exam simulations, or desktop practice software.
The engineer is configuring a new application definition.
The customer wants an Audit record to be created with the error message, if provisioning fails.
Is this the rule an engineer should write to accomplish the goal?
Solution: Configure a Postlterate rule
Correct Answer: B
A Post-Iterate rule is used in the context of data aggregation or import processes, where it runs after each record has been processed during
the iteration of accounts. This type of rule is not appropriate for handling provisioning errors or creating audit records based on provisioning failures.
For auditing provisioning errors, you should configure error handling in the provisioning policy or use a custom workflow that logs errors into the audit log.
The Post-Iterate rule is irrelevant to provisioning tasks and error logging, making it unsuitable for this purpose. Refer to the SailPoint IdentityIQ documentation
on rules and workflows for proper error handling strategies during provisioning.
An implementation engineer needs to perform an upgrade of IdentitylQ between releases. Is the following statement true?
Solution: Every version release (excluding patch releases) between the current version of IdentitylQ and the target version of IdentitylQ
must be installed in sequential order for an upgrade.
Correct Answer: B
When upgrading SailPoint IdentityIQ between releases, it is not necessary to install every version in sequential order between the current version
and the target version. SailPoint provides upgrade paths that often allow skipping several major versions by directly upgrading to the desired target version
from a supported previous version. However, it is crucial to follow the specific upgrade paths and procedures documented by SailPoint, which may involve
intermediate steps or specific considerations depending on the versions involved.
Therefore, the correct answer is B. No.
[Reference:This answer is supported by SailPoint IdentityIQ Upgrade Guides, which detail the approved upgrade paths and instructions for moving between specific versions,
indicating that sequential upgrades through every version are not always required., , , ]
Can the search type in Identity be used to accomplish this result?
Proposed Solution:
Identifying the number of certifications that are currently in the revocation phase
Correct Answer: B
No. Identity search is designed to search Identity objects and identity-related attributes, not to count certification campaigns or certification items in a specific lifecycle phase. “Revocation phase” belongs to the certification/remediation process, not the Identity object itself. To identify the number of certifications currently in revocation, an engineer should use certification search, certification reports, task/report output, or direct certification-related reporting depending on implementation permissions. Using Identity search would return identities, not certification phase counts. Even if an identity is involved in a revocation action, the certification’s phase/status is not the primary searchable object in Identity search. This is similar to the Word bank’s distinction that Syslog search is for log events and not for unrelated governance object queries. The proposed use case is therefore outside the Identity search type’s purpose. References/topics: IdentityIQ Engineer — Identity search, certification lifecycle, revocation phase, certification reporting, Advanced Analytics.
Is the following statement true?
Solution: Every Link object must be associated to an Identity object
Correct Answer: A
In SailPoint IdentityIQ, every Link object, which represents an account on an application for an identity, must be associated with an Identity object. The Link object is inherently tied to an identity, as it is a representation of that identity’s account on a target system. Without this association, the Link would not have context within IdentityIQ. This is a fundamental aspect of IdentityIQ ' s data model. Refer to the SailPoint IdentityIQ Data Model documentation for detailed information on the relationships between Link objects and Identity objects.
Is this where email templates can be viewed after product installation?
Proposed Solution:
In the Debug page as an EmailTemplate object
Correct Answer: A
Yes. IdentityIQ stores email templates as IdentityIQ objects, and after installation they can be inspected through the Debug pages as EmailTemplate objects. Email templates define notification content used by workflows, certifications, lifecycle events, approvals, policy violations, provisioning processes, and other system activities. The Debug page allows administrators and engineers to view many persisted IdentityIQ object types directly, including rules, workflows, task definitions, applications, identities, configuration objects, and email templates. This is useful when troubleshooting notification behavior, checking template names, verifying variables used in template content, or confirming whether a customized template exists in the environment. However, editing production templates directly through Debug should be handled carefully and normally controlled through proper change-management practices. The proposed location is technically valid: email templates can be viewed as EmailTemplate objects through the Debug interface. References/topics: IdentityIQ Engineer — EmailTemplate objects, Debug pages, notification configuration, workflow and certification email notifications.