A bank is two years into an ongoing project to provide all access through roles. The bank is actively using roles and actively adding to their role model. They need to ensure that all roles include the correct entitlements.Will this certification type achieve the goal?Solution: Account Group Membership Certification
Answer(s): B
An Account Group Membership Certification is designed to certify group memberships within accounts, typically focusing on the validation of access within specific account groups (e.g., Active Directory groups).This type of certification does not directly address the accuracy of role composition or the correctness of entitlements assigned within roles. Since the bank's goal is to ensure that all roles include the correct entitlements, an Account Group Membership Certification is not suitable for this purpose.Thus, the correct answer is B. No.
This conclusion is supported by the SailPoint IdentityIQ Certification Guide, which details the purpose and function of each certification type, highlighting that Account Group Membership Certification is not meant for role entitlement validation.
A bank is two years into an ongoing project to provide all access through roles. The bank is actively using roles and actively adding to their role model. They need to ensure that all roles include the correct entitlements.Will this certification type achieve the goal?Solution: Role Composition Certification
Answer(s): A
A Role Composition Certification is specifically designed to ensure that roles are composed correctly by reviewing the entitlements and other roles they aggregate. This certification allows reviewers to verify whether the roles include the appropriate entitlements based on business needs and compliance requirements.Given that the bank's objective is to ensure that all roles include the correct entitlements, a Role Composition Certification is the most appropriate tool to achieve this goal. It allows for the comprehensive review and validation of roles and their associated entitlements, ensuring alignment with the overall access governance strategy.Therefore, the correct answer is A. Yes.
This answer is based on the SailPoint IdentityIQ Certification Guide, which highlights the Role Composition Certification as the recommended approach for validating and maintaining the accuracy of role entitlements within an organization's identity governance framework.
Is this what should be performed in order to generate the database script to extend Application attributes in the IdentitylQ database on the initial installation?Solution: Run a build with the updated schema placed inside it.
Running a build with the updated schema placed inside it is not the correct procedure to generate the database script to extend Application attributes in the IdentityIQ database during the initial installation. To extend the schema, you typically need to define the changes in a specific XML schema file and then generate the corresponding database scripts using IdentityIQ tools designed for schema extension. A build process does not inherently generate the required database scripts for extending attributes.
SailPoint IdentityIQ Schema Configuration GuideSailPoint IdentityIQ Installation and Setup Guide
Is this what should be performed in order to generate the database script to extend Application attributes in the IdentitylQ database on the initial installation?Solution: Run the command iiq extendedSchema in the IIQ_Home/WEB-INF/bin directory.
Running the command iiq extendedSchema in the IIQ_Home/WEB-INF/bin directory is correct and one of the standard procedures for generating database scripts to extend Application attributes in the IdentityIQ database. This command processes the schema definitions (including any new attributes) and generates the appropriate SQL scripts to update the database schema. These scripts can then be executed against the database to apply the changes.
SailPoint IdentityIQ Administration Guide (Schema Extension and Database Management Sections)SailPoint IdentityIQ Configuration Guide (Extended Schema Management)
Is this what should be performed in order to generate the database script to extend Application attributes in the IdentitylQ database on the initial installation?Solution: Add the new object attribute to the Application ObjectConfig in IdentitylQ.
Adding a new object attribute to the Application ObjectConfig in IdentityIQ is not sufficient on its own to generate the database script needed to extend Application attributes. This action updates the configuration within IdentityIQ for how the application object is managed, but it does not produce the necessary SQL scripts to modify the underlying database schema. The actual database schema must be extended using specific IdentityIQ tools and commands like iiq extendedSchema.
SailPoint IdentityIQ Configuration Guide (ObjectConfig and Schema Management)SailPoint IdentityIQ Administration Guide (Database Schema Extension)
Post your Comments and Discuss SailPoint IdentityIQ-Engineer exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the IdentityIQ-Engineer content, but please register or login to continue.