問題一覧
1
Why might someone using IdentityIQ to aggregate accounts set the option "Disable optimization of unchanged accounts = true" on application aggregation task?
It is a best practice during the development phase, because it allows the developer to test changes made to how the data is being processed.
2
Entitlements and groups that are included in the Entitlement Catalog have many uses within IdentityIQ. Which one of the following is NOT a use of items in the Entitlement Catalog?
Available as group factories
3
The Rapid Setup mover configuration options, which can be triggered when a user moves within your organization are:
Re-run the joiner logic to adjust birthright role assignments, Certify the user's access on specified application
4
What is the minimum process to fully promote entitlements on the identity cube, for example, to include entitlements in certifications?
Mark the schema attribute for the entitlement as "Entitlement", aggregate the application, and refresh the identity cubes
5
Which of the following log levels will provide the most detailed information?
Trace
6
When you view a user's record (identity cube) you can see how a user acquired a role. In the default role model, what is the difference between assigned and detached?
Assigned means that the role is a business role and that this user was given that role by someone or through a rule; detached means the role is an IT role and identityIQ recognized that the user has the access defined in the role
7
Certification of Events can be automatically triggered by a wide range of data changes within IdentityIQ, such as manager change.
True
8
Through Rapid Setup, you can configure, per application, whether the application's entitlements are created in the Entitlement Catalog as requestable or not.
True
9
When you add extended attributes that are not marked searchable to IdentityIQ, where are these new attributes stored by default?
In a CLOB
10
Lifecycle Events can be created based on native changes. What is a native change?
A change detected during application aggregation
11
When you implement with Rapid Setup, the Rapid Setup Joiner, Mover, and Leaver configurations still require you to write the workflow to execute the process.
False
12
When implementing policies, a best practice is to set the _________ option to preview what impact they will have on the system.
Simulate
13
Which is NOT a valid method for creating Identity Cubes?
Through the identity Warehouse
14
The only users who can track an access request are the requesters themselves.
False
15
In the standard IdentityIQ access request workflow (LCM Provisioning), the default approver is the owner.
True
16
Rapid Setup Joiner configuration defines the operations that are launched when a user joins a new group within your organization, such as department transfer.
False
17
Sets of identities in IdentityIQ can be used for a number of purposes, and each is created in a different way. Select all statements that are correct.
Populations are used to control of filter which cubes are being processed (i. e. limit a refresh task to a set of identities). The set of identities are based on a save search., Groups are used to control or filter which cubes are being processed (i. e. filter a report on set of identities). The set of identities are based on a single attribute., Workgroups are used to assign IdentityIQ responsibilities (i. e. ownership of an application to a set of identities. Membership is assigned manually or through rules.
18
You can use the Edit Identity Quicklink to modify an identity's attributes and trigger attribute synchronization to other applications.
True
19
Which of these options defines how the account attributes within a provisioning plan are populated?
Provisioning policies
20
In the aggregation/refresh process, lifecycle events can be launched when a data change is detected during aggregation. Which option on the refresh task causes the refresh to trigger the lifecycle event workflows?
Process events
21
When a serious system error occurs, and an incident code is displayed, where would an admin user go to see details of the error?
Intelligence --> Advanced Analytics --> Syslog Search
22
What does the "-clean" option do when exporting Objects?
It removes the GUID and creation/modification dates from the Object being exported.
23
A provisioning plan is passed to a workflow to start the provisioning process. What is included in a provisioning plan?
One or more request for one identity
24
What is a capability in IdentityIQ?
The rights a user has within the IdentityIQ
25
From the Administrator Console, you can view details for a failed provisioning attempt and send a manual workitem to complete the request.
True
26
Once a workflow has been launched, what is the name of the object that represents the execution of the workflow?
WorkflowCase
27
What is the difference between a task and a workflow?
A task performs batch processing and it can be scheduled; a workflow can interact with a user and is typically activated in response to a user action or data change.
28
________ define which account attributes to read from an application when aggregating accounts with IdentityIQ.
Account schemas
29
Which connector requires a provisioning rule to be written when provisioning to applications of the type?
JDBC
30
There are five important tasks that are shipped pre-scheduled in IdentityIQ. Which task advances certifications through thier phases and restarts backgrounded workflows?
Perform maintenance