NEW SAILPOINT PROFESSIONAL
CERTIFICATION EXAM QUESTIONS
WITH CORRECT ANSWERS
True or False: Roles can contain multiple access profiles. - ANSWER-True
True or False: All entitlements in IdentityNow must be contained within a role. -
ANSWER-False
Define: Access Request - ANSWER-An Access Request is an interactive process of
asking for a specific role, access profile, or entitlement.
True or False: Users can only request access for themselves in the IdentityNow
Request Center. - ANSWER-False
IdentityNow allows for multiple options when making requests:
1) You may choose to allow users to make requests only for themselves.
2) Your managers can make requests for their direct reports.
3) You can allow any user to make requests for any other user.
True or False: All Access Requests must be approved by at least on identity before
IdentityNow will provision the new access. - ANSWER-False
True or False: IdentityNow admins can specify that certain access requires three
levels of approval before that access is provisioned while other access does not
require any approve before it is provisioned. - ANSWER-True
Define: Access Certification - ANSWER-At the highest level, Access Certification
takes a user's set of assigned access and presents that data to an authority such as
their manager or a source owner who then reviews the access to verify it is correct.
What steps can be taken by an approver during an access review? - ANSWER--
Approve access
- Revoke access
- reassign approval to another authority
What are the phases of the certification process? - ANSWER-1) Generation
2) Preview
3) Active
4) End
Certifiers make decisions on items in their access reviews during which of the
following phases?
1) Generation
2) Preview
3) Active - ANSWER-3) Active
, True or False: Only users with Admin authorization level can reassign access items
to new certifiers. - ANSWER-False
True or False: Certifiers must make decisions on all items within an access review in
one sitting. - ANSWER-False
Define: Provisioning - ANSWER-Provisioning is the process of granting, changing, or
removing user access to systems, applications, and databases based on a unique
user identity.
What are the steps in the provisioning process? - ANSWER-1) Trigger Provisioning
2) Package the Plan
3) Manage Fulfillment
4) Verify the Change
What is the first step in the provisioning process? - ANSWER-Triger Provisioning:
A triggering even such as an action initiated by a user or an automated even in
IdentityNow results in a request for data to change.
What is the second step in the provisioning process? - ANSWER-Package the Plan:
IdentityNow packages the request into a plan that describes all the data and the
operations to be performed so that it can communicate these changes across all
systems.
What is the third step in the provisioning process? - ANSWER-Manage Fulfillment:
IdentityNow sends the request for fulfillment directly, for connected sources, or by
notification to an external ticketing system, or to an individual to manually fulfill the
request.
What is the fourth step in the provisioning process? - ANSWER-Verify the Change:
After the request has been fulfilled, the data is re-aggregated and the requested
changes verified.
What are the two categories of actions that can trigger provisioning? - ANSWER-1)
Data-driven/ automated
2_ Request-driven/ user-initiated
True or False: IdentityNow will filter entitlements from being provisioned if the identity
already had those entitlements. - ANSWER-True
Which action will result in a provisioning request to remove entitlement A from Joe's
account?
1) Joe's Lifecycle State changes to inactive which is configured to de-provision all
access and disable all accounts.
CERTIFICATION EXAM QUESTIONS
WITH CORRECT ANSWERS
True or False: Roles can contain multiple access profiles. - ANSWER-True
True or False: All entitlements in IdentityNow must be contained within a role. -
ANSWER-False
Define: Access Request - ANSWER-An Access Request is an interactive process of
asking for a specific role, access profile, or entitlement.
True or False: Users can only request access for themselves in the IdentityNow
Request Center. - ANSWER-False
IdentityNow allows for multiple options when making requests:
1) You may choose to allow users to make requests only for themselves.
2) Your managers can make requests for their direct reports.
3) You can allow any user to make requests for any other user.
True or False: All Access Requests must be approved by at least on identity before
IdentityNow will provision the new access. - ANSWER-False
True or False: IdentityNow admins can specify that certain access requires three
levels of approval before that access is provisioned while other access does not
require any approve before it is provisioned. - ANSWER-True
Define: Access Certification - ANSWER-At the highest level, Access Certification
takes a user's set of assigned access and presents that data to an authority such as
their manager or a source owner who then reviews the access to verify it is correct.
What steps can be taken by an approver during an access review? - ANSWER--
Approve access
- Revoke access
- reassign approval to another authority
What are the phases of the certification process? - ANSWER-1) Generation
2) Preview
3) Active
4) End
Certifiers make decisions on items in their access reviews during which of the
following phases?
1) Generation
2) Preview
3) Active - ANSWER-3) Active
, True or False: Only users with Admin authorization level can reassign access items
to new certifiers. - ANSWER-False
True or False: Certifiers must make decisions on all items within an access review in
one sitting. - ANSWER-False
Define: Provisioning - ANSWER-Provisioning is the process of granting, changing, or
removing user access to systems, applications, and databases based on a unique
user identity.
What are the steps in the provisioning process? - ANSWER-1) Trigger Provisioning
2) Package the Plan
3) Manage Fulfillment
4) Verify the Change
What is the first step in the provisioning process? - ANSWER-Triger Provisioning:
A triggering even such as an action initiated by a user or an automated even in
IdentityNow results in a request for data to change.
What is the second step in the provisioning process? - ANSWER-Package the Plan:
IdentityNow packages the request into a plan that describes all the data and the
operations to be performed so that it can communicate these changes across all
systems.
What is the third step in the provisioning process? - ANSWER-Manage Fulfillment:
IdentityNow sends the request for fulfillment directly, for connected sources, or by
notification to an external ticketing system, or to an individual to manually fulfill the
request.
What is the fourth step in the provisioning process? - ANSWER-Verify the Change:
After the request has been fulfilled, the data is re-aggregated and the requested
changes verified.
What are the two categories of actions that can trigger provisioning? - ANSWER-1)
Data-driven/ automated
2_ Request-driven/ user-initiated
True or False: IdentityNow will filter entitlements from being provisioned if the identity
already had those entitlements. - ANSWER-True
Which action will result in a provisioning request to remove entitlement A from Joe's
account?
1) Joe's Lifecycle State changes to inactive which is configured to de-provision all
access and disable all accounts.
