IdentityIQ-Engineer Exam Questions Tutorials

Yes. Rapid Setup supports standard lifecycle-event actions for Leaver processing, including application-specific account actions and delayed account deletion. This enables an implementation to disable an account when the Leaver event occurs and configure account deletion for a later point, such as 30 days afterward.

This pattern is useful because many organizations do not immediately delete accounts when employment ends. Immediate disablement blocks interactive access while preserving the account temporarily for investigation, handover, retention, reconciliation, or recovery requirements. After the retention interval expires, deletion can remove the target-system account according to the configured lifecycle policy.

The important distinction is that this is a standard timing sequence for the same lifecycle population , rather than complex branching where different categories of users receive entirely different actions. The Word bank already contains a different Rapid Setup proposition involving disabling accounts for one group while deleting accounts for another group during termination, and marks that more complex population-dependent scenario invalid. It also separately tests disable-plus-entitlement-removal during Leaver.

Therefore, this delayed-delete Leaver proposition is unique and valid.

References/topics: IdentityIQ Engineer — Rapid Setup, Leaver events, Disable Account, Delete Account, delayed deletion, lifecycle configuration.

=======

No. The key technical problem is the term Create Rule . IdentityIQ does not use an application “Create Rule” as the standard mechanism for defining how new target-system accounts are provisioned. New-account provisioning is principally defined through an application ' s Create Account Provisioning Policy . That policy identifies the fields required for account creation and determines how their values are obtained. Field values can themselves come from literals, scripts, rules, dependencies, or requester-entered information.

IdentityIQ does have a Creation Rule , but that is an aggregation rule with a different purpose. SailPoint documents the Creation Rule as executing when a new Identity is created during aggregation, commonly from an authoritative application. It can manipulate the identity being created—for example, its name or attributes—but it is not the mechanism that specifies how a new account is provisioned to a target application.

Provisioning rules such as BeforeProvisioning and AfterProvisioning can customize a ProvisioningPlan around connector execution, but that still does not make “Create Rule” the account-creation definition. Therefore, as worded, the proposed solution is false.

References/topics: IdentityIQ Engineer — Application Provisioning Policies, Create Account policy, Creation Rule, BeforeProvisioning Rule, Application Definition.

=======

In SailPoint IdentityIQ, when dealing with a policy violation of the type " Role Separation of Duties (SOD) Policy, " there are specific actions that the policy violation owner can take. These options typically include:

Mitigate: Applying a mitigating control to the violation.

Remediate: Addressing the violation by removing or altering access.

Accept: Acknowledging the violation without making changes, which usually requires justification.

Forward: Assigning the violation to another individual or group for resolution.

The option " Schedule Policy Composition Certification " is not a valid action for addressing a Role SOD Policy violation directly. The concept of scheduling a certification is related to periodic review processes, not immediate policy violation handling. Certification campaigns are scheduled and executed to review roles, entitlements, or policies, but this is not an action taken in response to a specific policy violation.

Thus, " Schedule Policy Composition Certification " is not an appropriate or valid option in this context, and the correct answer is B. No.

The statement is true. In SailPoint IdentityIQ, it is possible to configure a role to include a set of IdentityIQ capabilities. Capabilities in IdentityIQ are permissions that grant users access to specific functionalities within the platform, such as managing identities, viewing reports, or administering roles. By associating a role with specific capabilities, you can control what actions users assigned to that role can perform within the IdentityIQ environment.

SailPoint IdentityIQ Administration Guide (Role Configuration and Capabilities Section)

SailPoint IdentityIQ Configuration Guide (Sections on Roles and Capabilities)