SAILPOINT ENGINEERING
COMPREHENSIVE EXAM STUDY GUIDE
WITH COMPLETE SOLUTIONS
●● A corporation is implementing an access request workflow to
manage identities across its subsidiaries. These subsidiaries operate in
different environments, requiring distinct access policies. The workflow
must ensure that access requests are processed efficiently while
complying with regulations. They also want to integrate this workflow
with its existing ticketing system. What's the best approach?
A. Implement a single global workflow that includes conditional logic to
handle regulatory requirements
B. Design a decentralized workflow model where each subsidiary
manages its access independently
C. Develop a hybrid workflow that combines global policies with local
customization for each subsidiary
D. Create separate workflows for each subsidiary to address local
compliance and integrate them individually
E. Use a centralized workflow with a manual review process to ensure
compliance with all regulatory environments
Answer: C. Develop a hybrid workflow that combines global policies
with local customization for each subsidiary
,●● A financial institution uses SailPoint to automate its account
provisioning processes. The compliance team is concerned about
ensuring that any deviations from the standard provisioning workflow
are detected and reviewed promptly. Which SailPoint feature should the
compliance team leverage to monitor and review these deviations
effectively?
A. Policy Violation Management
B. Identity Intelligence
C. Risk Scoring
D. Access Request Manager
E. Compliance Manager
F. Audit Logs
Answer: A. Policy Violation Management
●● A global financial services company is in the process of
implementing SailPoint IdentityNow to manage its complex user access
needs. The firm has multiple internal applications and a few third-party
services that require API authentication. To maintain a high level of
security, the company wants to ensure that every API request is
authenticated and authorized properly. They are considering using
OAuth 2.0 for this purpose but are unsure of how to implement it
effectively across all platforms. What is the most appropriate first step
for the company to take when setting up OAuth 2.0 for API
authentication in SailPoint?
,A. Define scopes that limit the API access
B. Set up resource owner password credentials for all APIs
C. Create a custom API gateway
D. Use implicit flow for web applications
E. Use client credentials grant type for all applications
F. Implement password grant type for all users
Answer: A. Define scopes that limit the API access
●● When configuring access request policies in SailPoint IdentityNow,
it is important to ensure that policies are aligned with to avoid conflicts
and ensure compliance.
A. Organizational goals
B. Competitor practices
C. Regulatory standards
D. Employee feedback
E. User preferences
F. IT department budgets
Answer: C. Regulatory standards
●● A financial institution wants to integrate its internal HR system with
SailPoint IdentityNow using API-based aggregation for better identity
governance. The HR system's API has rate limits that restrict the number
, of requests per minute. What strategy should the institution implement to
ensure successful aggregation without exceeding these limits?
A. Increase the API rate limit by contacting the HR system vendor
B. Schedule aggregations during off-peak hours for better performance
C. Apply API throttling to automatically adjust the request rate
D. Use API response caching to minimize redundant requests
E. Implement asynchronous API calls to distribute request events
F. Use parallel processing to speed up data retrieval
Answer: D. Use API response caching to minimize redundant requests
●● An enterprise wants to ensure that changes made in the admin
console are traceable and accountable. Which feature of SailPoint
IdentityNow should they utilize to fulfill this requirement?
A. Change Notification
B. Identity Provisioning
C. Access Certification
D. Role Management
E. Event Triggers
F. Audit Logs
Answer: F. Audit Logs
COMPREHENSIVE EXAM STUDY GUIDE
WITH COMPLETE SOLUTIONS
●● A corporation is implementing an access request workflow to
manage identities across its subsidiaries. These subsidiaries operate in
different environments, requiring distinct access policies. The workflow
must ensure that access requests are processed efficiently while
complying with regulations. They also want to integrate this workflow
with its existing ticketing system. What's the best approach?
A. Implement a single global workflow that includes conditional logic to
handle regulatory requirements
B. Design a decentralized workflow model where each subsidiary
manages its access independently
C. Develop a hybrid workflow that combines global policies with local
customization for each subsidiary
D. Create separate workflows for each subsidiary to address local
compliance and integrate them individually
E. Use a centralized workflow with a manual review process to ensure
compliance with all regulatory environments
Answer: C. Develop a hybrid workflow that combines global policies
with local customization for each subsidiary
,●● A financial institution uses SailPoint to automate its account
provisioning processes. The compliance team is concerned about
ensuring that any deviations from the standard provisioning workflow
are detected and reviewed promptly. Which SailPoint feature should the
compliance team leverage to monitor and review these deviations
effectively?
A. Policy Violation Management
B. Identity Intelligence
C. Risk Scoring
D. Access Request Manager
E. Compliance Manager
F. Audit Logs
Answer: A. Policy Violation Management
●● A global financial services company is in the process of
implementing SailPoint IdentityNow to manage its complex user access
needs. The firm has multiple internal applications and a few third-party
services that require API authentication. To maintain a high level of
security, the company wants to ensure that every API request is
authenticated and authorized properly. They are considering using
OAuth 2.0 for this purpose but are unsure of how to implement it
effectively across all platforms. What is the most appropriate first step
for the company to take when setting up OAuth 2.0 for API
authentication in SailPoint?
,A. Define scopes that limit the API access
B. Set up resource owner password credentials for all APIs
C. Create a custom API gateway
D. Use implicit flow for web applications
E. Use client credentials grant type for all applications
F. Implement password grant type for all users
Answer: A. Define scopes that limit the API access
●● When configuring access request policies in SailPoint IdentityNow,
it is important to ensure that policies are aligned with to avoid conflicts
and ensure compliance.
A. Organizational goals
B. Competitor practices
C. Regulatory standards
D. Employee feedback
E. User preferences
F. IT department budgets
Answer: C. Regulatory standards
●● A financial institution wants to integrate its internal HR system with
SailPoint IdentityNow using API-based aggregation for better identity
governance. The HR system's API has rate limits that restrict the number
, of requests per minute. What strategy should the institution implement to
ensure successful aggregation without exceeding these limits?
A. Increase the API rate limit by contacting the HR system vendor
B. Schedule aggregations during off-peak hours for better performance
C. Apply API throttling to automatically adjust the request rate
D. Use API response caching to minimize redundant requests
E. Implement asynchronous API calls to distribute request events
F. Use parallel processing to speed up data retrieval
Answer: D. Use API response caching to minimize redundant requests
●● An enterprise wants to ensure that changes made in the admin
console are traceable and accountable. Which feature of SailPoint
IdentityNow should they utilize to fulfill this requirement?
A. Change Notification
B. Identity Provisioning
C. Access Certification
D. Role Management
E. Event Triggers
F. Audit Logs
Answer: F. Audit Logs
