Below is a search command in Identity Security Cloud.

Does the description accurately match the outcome of the search command?

Proposed Solution / Statement:

accountCount:[1 to 4

will search for identities that have 1, 2, 3, or 4 accounts.

Does this proposed solution meet the requirement / solve the scenario?

When reviewing accounts in a flat file source, some entitlements seem to be missing.

Is this a potential cause of this issue?

Proposed Solution / Statement:

The delimited file is not sorted by account ID. All entitlements for a single account ID must be listed together within the delimited file. Otherwise, only a partial subset of the entitlements will be added to the identity.

Does this proposed solution meet the requirement / solve the scenario?

Is the following statement regarding attribute sync valid?

Proposed Solution / Statement:

Attribute sync can be enabled by going to Admin > Connections > Sources and selecting and editing the source.

Does this proposed solution meet the requirement / solve the scenario?

Is the following statement about entitlements valid?

Proposed Solution / Statement:

Entitlements are stored inside of the Virtual Appliance for quick indexing.

Does this proposed solution meet the requirement / solve the scenario?

Is this a step that can be taken on a certification due date when a certification reviewer has left the organization without completing the review?

Proposed Solution / Statement:

The reviewer's manager can access the certification campaign and complete all pending reviews.

Does this proposed solution meet the requirement / solve the scenario?

Is this a step that can be taken on a certification due date when a certification reviewer has left the organization without completing the review?

Proposed Solution / Statement:

An Administrator can initiate reassignment of a pending certification to a new reviewer.

Does this proposed solution meet the requirement / solve the scenario?

Is this a valid statement about sources?

Proposed Solution / Statement:

A Delimited File Source can automatically aggregate from a file share.

Does this proposed solution meet the requirement / solve the scenario?

A new employee's identity is not correctly created and shows in the Identity Exceptions report on the Identity Profile.

Is this a correct step towards analyzing and resolving the problem?

Proposed Solution / Statement:

Ensure the account attributes mapped to the identity attributes User Name (uid), Work Email (email), and Last Name are populated correctly.

Does this proposed solution meet the requirement / solve the scenario?

An organization is considering purchasing an IGA tool. The manager asks the administrator to explain what compliance features the IGA tool provides for separation of duties, protecting personally identifying data and privileged access, and how the company can prove to the auditors that they comply with all laws and regulations.

Is this a good explanation of one of such features?

Proposed Solution / Statement:

"The vendor has provided proof that the tool complies with HIPAA, PCI-DSS, SoX, ISO 27002 and the GDPR. The fact that we use this IGA tool is sufficient legal proof for the auditors that we comply with all regulations."

Does this proposed solution meet the requirement / solve the scenario?

On 4 February 2021, the following error occurred on source Control Central of type Active Directory for identity Clarence.Harper:

Failed to update attributes. There is no such object on the server.

Is this a valid place to look for more information about what caused the error?

Proposed Solution / Statement:

In Identity Security Cloud go to search and query for:

type:event AND subtype:provision AND error:TRUE AND date: > =2021-2-4 AND identity:Clarence.Harper

Open the relevant result for more details.

Does this proposed solution meet the requirement / solve the scenario?

Is this a valid statement about identity profile?

Proposed Solution / Statement:

Once users are assigned to an identity profile, administrators cannot modify or delete the identity profile.

Does this proposed solution meet the requirement / solve the scenario?

Match the following descriptions with their appropriate definition.

Is this a valid statement about sources?

Proposed Solution / Statement:

A source contains its own set of user accounts.

Does this proposed solution meet the requirement / solve the scenario?

Is the following statement regarding account deletion in Identity Security Cloud true?

Proposed Solution / Statement:

Once an account is deleted during aggregation, it cannot be re-aggregated or recreated in Identity Security Cloud.

Does this proposed solution meet the requirement / solve the scenario?

Does the following event trigger the de-provisioning of a user's access?

Proposed Solution / Statement:

The department of a user changes, and the new department does not have access to an application that was previously assigned.

Does this proposed solution meet the requirement / solve the scenario?

Match the following options with their appropriate match.

Is this statement true regarding Identity Governance and Administration (IGA)?

Proposed Solution / Statement:

Implementing an IGA solution fully automates user access reviews, approvals, and audits.

Does this proposed solution meet the requirement / solve the scenario?

Review the following log entry:

[

{

"id": "2c9180866166b5b0016167c32ef31a66",

"name": "acme AD-TX Cluster",

"description": "acme AD - TX Cluster",

"clientType": "CCG",

"ccgVersion": "373_535_70.2.0",

"pinnedConfig": true,

"logConfiguration": null

},

{

"id": "2c9180846a93ce60016ab29f039944de",

"name": "acme AD-NY Cluster",

"description": "acme AD-NY Cluster",

"clientType": "CCG",

"ccgVersion": "373_535_70.2.0",

"pinnedConfig": true,

"logConfiguration": {

"clientId": null,

"durationMinutes": 60,

"expiration": "2025-12-15T19:13:36.079Z",

"rootLevel": "TRACE",

"logLevels": {

"sailpoint.connector.ADLDAPConnector": "TRACE"

}

}

}

]

A source owner for Active Directory has found problems with aggregation and has requested log files for their source.

Is this a valid way for the Administrator to assist in retrieving the correct logs?

Proposed Solution / Statement:

The following REST API call can be used to collect and export logs from the acme AD-NY Cluster:

GET https://acme.api.identitynow.com/v3/sources/2c9180846a93ce60016ab29f039944de/logs

Does this proposed solution meet the requirement / solve the scenario?

Users are complaining that they would like to request access to groups that have recently been added to the Corporate Directory system, but they are unable to see them. The system feature Enable Entitlement Requests has been enabled and access request segments have not been enabled.

Is this a valid step to debug the problem?

Proposed Solution / Statement:

Open the source configuration and navigate to the Entitlements page to search for the group and verify the Requestable status.

Does this proposed solution meet the requirement / solve the scenario?

Assuming an access item's approval type is set to "reviewer," does the following statement accurately describe the approval flow behavior?

Proposed Solution / Statement:

When a user requests access for themselves and they are also in the approval chain, the approval flow will route to their manager instead to prevent a conflict of interest.

Does this proposed solution meet the requirement / solve the scenario?

Is this a true statement regarding identity attribute mappings and identity profiles?

Proposed Solution / Statement:

Adding a custom attribute only applies to the identity profile on which it is defined.

Does this proposed solution meet the requirement / solve the scenario?

Does this statement accurately describe the proper methods for creating and scheduling reports in Identity Security Cloud?

Proposed Solution / Statement:

All valid search queries can be scheduled as reports.

Does this proposed solution meet the requirement / solve the scenario?

Is the following statement regarding attribute sync valid?

Proposed Solution / Statement:

Attribute sync synchronizes entitlement information from the sources configured.

Does this proposed solution meet the requirement / solve the scenario?

Is this a valid scenario where a Separation of Duties policy should be used?

Proposed Solution / Statement:

A user requests a major system configuration and approves the change.

Does this proposed solution meet the requirement / solve the scenario?

Users are complaining that they would like to request access to groups that have recently been added to the Corporate Directory system, but they are unable to see them. The system feature Enable Entitlement Requests has been enabled and access request segments have not been enabled.

Is this a valid step to debug the problem?

Proposed Solution / Statement:

Open the source configuration and navigate to the Access Profiles page to check if the group is included in it and thus hidden by any Access Profile.

Does this proposed solution meet the requirement / solve the scenario?

Is this statement regarding access management valid?

Proposed Solution / Statement:

A reviewer can be required to provide a comment when rejecting a role request.

Does this proposed solution meet the requirement / solve the scenario?

Is the following a valid configuration item for the identity profile's sign-in and security settings?

Proposed Solution / Statement:

If Multifactor Authentication is configured, the users of the Identity Profile must provide proof of their identity in two ways before they are allowed to unlock their account or reset their password.

Does this proposed solution meet the requirement / solve the scenario?

Does this statement accurately describe the proper methods for creating and scheduling reports in Identity Security Cloud?

Proposed Solution / Statement:

Scheduled reports are limited to identity search queries.

Does this proposed solution meet the requirement / solve the scenario?

Is this a valid statement about identity profile?

Proposed Solution / Statement:

The priority of an identity profile can be updated via REST API.

Does this proposed solution meet the requirement / solve the scenario?