xj9 - 19628 - b

30問 • 2年前

問題一覧

Why might someone using IdentityIQ to aggregate accounts set the option "Disable optimization of unchanged accounts = true" on application aggregation task?

It is a best practice during the development phase, because it allows the developer to test changes made to how the data is being processed.

Entitlements and groups that are included in the Entitlement Catalog have many uses within IdentityIQ. Which one of the following is NOT a use of items in the Entitlement Catalog?

Available as group factories

The Rapid Setup mover configuration options, which can be triggered when a user moves within your organization are:

Re-run the joiner logic to adjust birthright role assignments, Certify the user's access on specified application

What is the minimum process to fully promote entitlements on the identity cube, for example, to include entitlements in certifications?

Mark the schema attribute for the entitlement as "Entitlement", aggregate the application, and refresh the identity cubes

Which of the following log levels will provide the most detailed information?

Trace

When you view a user's record (identity cube) you can see how a user acquired a role. In the default role model, what is the difference between assigned and detached?

Assigned means that the role is a business role and that this user was given that role by someone or through a rule; detached means the role is an IT role and identityIQ recognized that the user has the access defined in the role

Certification of Events can be automatically triggered by a wide range of data changes within IdentityIQ, such as manager change.

True

Through Rapid Setup, you can configure, per application, whether the application's entitlements are created in the Entitlement Catalog as requestable or not.

True

When you add extended attributes that are not marked searchable to IdentityIQ, where are these new attributes stored by default?

In a CLOB

Lifecycle Events can be created based on native changes. What is a native change?

A change detected during application aggregation

When you implement with Rapid Setup, the Rapid Setup Joiner, Mover, and Leaver configurations still require you to write the workflow to execute the process.

False

When implementing policies, a best practice is to set the _________ option to preview what impact they will have on the system.

Simulate

Which is NOT a valid method for creating Identity Cubes?

Through the identity Warehouse

The only users who can track an access request are the requesters themselves.

False

In the standard IdentityIQ access request workflow (LCM Provisioning), the default approver is the owner.

True

Rapid Setup Joiner configuration defines the operations that are launched when a user joins a new group within your organization, such as department transfer.

False

Sets of identities in IdentityIQ can be used for a number of purposes, and each is created in a different way. Select all statements that are correct.

Populations are used to control of filter which cubes are being processed (i. e. limit a refresh task to a set of identities). The set of identities are based on a save search., Groups are used to control or filter which cubes are being processed (i. e. filter a report on set of identities). The set of identities are based on a single attribute., Workgroups are used to assign IdentityIQ responsibilities (i. e. ownership of an application to a set of identities. Membership is assigned manually or through rules.

You can use the Edit Identity Quicklink to modify an identity's attributes and trigger attribute synchronization to other applications.

True

Which of these options defines how the account attributes within a provisioning plan are populated?

Provisioning policies

In the aggregation/refresh process, lifecycle events can be launched when a data change is detected during aggregation. Which option on the refresh task causes the refresh to trigger the lifecycle event workflows?

Process events

When a serious system error occurs, and an incident code is displayed, where would an admin user go to see details of the error?

Intelligence --> Advanced Analytics --> Syslog Search

What does the "-clean" option do when exporting Objects?

It removes the GUID and creation/modification dates from the Object being exported.

A provisioning plan is passed to a workflow to start the provisioning process. What is included in a provisioning plan?

One or more request for one identity

What is a capability in IdentityIQ?

The rights a user has within the IdentityIQ

From the Administrator Console, you can view details for a failed provisioning attempt and send a manual workitem to complete the request.

True

Once a workflow has been launched, what is the name of the object that represents the execution of the workflow?

WorkflowCase

What is the difference between a task and a workflow?

A task performs batch processing and it can be scheduled; a workflow can interact with a user and is typically activated in response to a user action or data change.

________ define which account attributes to read from an application when aggregating accounts with IdentityIQ.

Account schemas

Which connector requires a provisioning rule to be written when provisioning to applications of the type?

JDBC

There are five important tasks that are shipped pre-scheduled in IdentityIQ. Which task advances certifications through thier phases and restarts backgrounded workflows?

Perform maintenance

xj9 - 19628 - a

critical flaw · 98問 · 2年前

xj9 - 19628 - a