SailPoint-Certified-IdentityNow-Engineer無料認定試験材料はこちらの110問題
リアルSailPoint-Certified-IdentityNow-Engineerは100%カバー率リアル試験問題を試そう！
質問 # 62
Exhibit.
Solution: An engineer has one small production data center with an Active Directory, a database server, and two cloud applications to which they need to connect Where would the virtual appliances (VAs) reside In this scenario?
Solution: B
- A. No
- B. Yes
正解：A
解説：
In this scenario, the Virtual Appliances (VAs) should not reside in the DMZ (B), which is typically used for hosting services that need to be exposed to both internal and external networks, like web servers or email gateways. However, VAs require more direct and secure access to internal resources like Active Directory and databases. The VA needs to reside where it has secure and reliable connectivity to internal resources like Active Directory and database servers, which would be in the internal network.
Key Reference from SailPoint Documentation:
VA Placement Guidance: Virtual Appliances are placed within the internal network, where they can securely connect to Active Directory, databases, and other internal applications for synchronization and provisioning tasks.
質問 # 63
Review the steps.
1______________________________________
2. Import the virtual appliance (VA) image to the virtualization platform.
3. Start the VA.
4. Log in to the VA using the default credentials.
5. Change the password for the SailPoint user.
6______________________________________
7. Create a new VA cluster in IdentityNow.
8. Create a new VA configuration in IdentityNow. 9 Download / procure the config.yaml.
10. Configure the keyPassphrase in the config.yaml.
11. Upload the config.yaml into the VA.
12______________________________________.
Are these the missing steps?
Solution: 1. Click Test Connection on the VA configuration. 6. Download / procure the VA image. 12.
Configure networking configurations (as needed).
- A. No
- B. Yes
正解：A
解説：
No, the provided steps are not correct. The sequence of actions is misplaced:
Step 1: Before clicking "Test Connection," you need to download or procure the VA image and import it into the virtualization platform.
Step 6: After logging in and changing the password, the next step is to configure the networking settings, not downloading the image again.
Step 12: After uploading the config.yaml, you should proceed with testing the connection to ensure the VA is correctly configured and can communicate with IdentityNow.
Corrected Steps:
Download / procure the VA image.
Configure networking configurations (as needed).
Click Test Connection on the VA configuration.
Reference:
SailPoint IdentityNow Virtual Appliance Installation and Configuration Guide.
SailPoint IdentityNow Virtual Appliance Test Connection Documentation.
質問 # 64
An IdentityNow engineer has set up an access profile for an application. The access profile allows for users to request access, and for a user's manager to approve or deny access.
After a recent staff meeting, management has expressed that they want to remove any approval requirements for this application.
Is management's request possible in IdentityNow. and. if so. are these the recommended steps the engineer should take to meet their new requirement?
Solution: It is possible. Edit the access profile, and uncheck the box marked 'Required Approval'.
- A. No
- B. Yes
正解：B
解説：
Yes, it is possible to remove the approval requirement for an application in IdentityNow by editing the access profile and unchecking the 'Required Approval' box. This configuration change would eliminate the need for a manager or other approver to review access requests, allowing users to be granted access without requiring approval.
Key Reference from SailPoint Documentation:
Access Profile Configuration: Access profiles can be configured to require or not require approval for access requests, and this option can be modified directly in the profile settings.
質問 # 65
Review the sentence below
The virtual appliance (VA) private key is_____.
Does this option correctly complete the sentence?
Solution: Stored both in the identityNow tenant and on the VA.
- A. No
- B. Yes
正解：A
解説：
The virtual appliance (VA) private key is not stored in both the IdentityNow tenant and the VA. The VA private key, which is critical for secure communications, is stored only on the Virtual Appliance (VA) itself. It is used to authenticate and encrypt communications between the VA and the IdentityNow tenant. Storing such sensitive information in the IdentityNow tenant would violate best practices for key management and security.
Instead, the IdentityNow tenant only holds the public key or a reference to the key to facilitate secure exchanges with the VA. The private key remains secured locally within the VA, protecting it from potential security vulnerabilities associated with external storage.
Reference:
SailPoint IdentityNow Virtual Appliance Architecture Guide.
SailPoint IdentityNow Security and Encryption Documentation.
質問 # 66
The customer has a system that matches the following description. Is this a suitable connector type to use?
The system is a modern, cloud-based, web application that uses a MySQL database backend provided by the cloud platform. The database is only accessible from the web application. The web application exposes a fully compliant SCIM 2.0 interface with OAuth 2.0 client credentials.
Solution: SCIM 2.0 Connector
- A. No
- B. Yes
正解：B
解説：
Yes, the SCIM 2.0 Connector is the most suitable connector for this use case. The system described is a modern, cloud-based web application that exposes a fully compliant SCIM 2.0 interface and uses OAuth 2.0 client credentials for authentication. SCIM (System for Cross-domain Identity Management) is a standardized protocol designed to simplify identity management in cloud applications. The SCIM 2.0 Connector in SailPoint IdentityNow is specifically built to integrate with systems that provide a SCIM interface, making it the ideal connector for this scenario.
Reference:
SailPoint IdentityNow SCIM 2.0 Connector Guide.
SailPoint IdentityNow Cloud-Based Integration Documentation.
質問 # 67
A customer wants to configure a virtual appliance (VA) to use a static IP address. Does this file on the VA need to be modified to perform the configuration?
Solution: /home/sailpoint/config.yaml
- A. No
- B. Yes
正解：A
解説：
The /home/sailpoint/config.yaml file is not used to configure the Virtual Appliance (VA) to use a static IP address. This file is generally used for other configuration purposes related to the SailPoint IdentityNow application settings, not for network configurations like setting static IP addresses.
Network configurations are handled at the system or network service level within the VA's Linux environment.
Reference:
SailPoint IdentityNow Virtual Appliance Configuration Guide.
SailPoint IdentityNow Networking Configuration Documentation.
質問 # 68
Is the following description of an access profile correct?
Solution: It directly references roles to provide access.
- A. No
- B. Yes
正解：A
解説：
No, an access profile does not directly reference roles to provide access. Instead, access profiles are collections of entitlements or permissions that are bundled together to simplify access provisioning.
Access profiles can be associated with roles, but they do not reference roles directly. Roles in IdentityNow define broader sets of permissions, which may include access profiles, but access profiles themselves are not tied directly to roles.
Reference:
SailPoint IdentityNow Access Profiles Documentation.
SailPoint IdentityNow Roles and Access Profiles Configuration Guide.
質問 # 69
The customer has a system that matches the following description. Is this a suitable connector type to use?
The system is a modern, cloud-based, web application that uses a MySQL database backend provided by the cloud platform. The database is only accessible from the web application. The web application exposes a fully compliant SCIM 2.0 interface with OAuth 2.0 client credentials.
Solution: Generic Cloud Connector
- A. No
- B. Yes
正解：A
解説：
No, the Generic Cloud Connector is not the most suitable connector type for this use case. The system described is a modern, cloud-based web application that exposes a SCIM 2.0 interface with OAuth 2.0 client credentials for authentication. The Generic Cloud Connector is typically used for systems that do not have specialized connectors but can integrate via general APIs or REST endpoints. Since the application supports SCIM 2.0, which is a standardized protocol for managing identities, the SCIM 2.0 Connector would be the more appropriate choice, as it is specifically designed for this type of integration.
Reference:
SailPoint IdentityNow SCIM 2.0 Connector Guide.
SailPoint IdentityNow Connector Overview Documentation.
質問 # 70
A customer wants to configure a virtual appliance (VA) to use a static IP address. Does this file on the VA need to be modified to perform the configuration?
Solution: /home/sailpoint/proxy.yaml
- A. No
- B. Yes
正解：A
解説：
The /home/sailpoint/proxy.yaml file is used for proxy settings, not for configuring the Virtual Appliance to use a static IP address. This file is typically modified to configure outbound proxy settings for the VA if it needs to route traffic through a proxy server. Static IP address configuration is handled elsewhere, at the operating system or network configuration level.
Reference:
SailPoint IdentityNow Virtual Appliance Proxy Configuration Documentation.
SailPoint IdentityNow Network Settings Documentation.
質問 # 71
Does this correctly describe Manager Correlation?
Solution: Linking the manager of a given identity based on the value of an account or identify attribute
- A. No
- B. Yes
正解：B
解説：
Yes, this correctly describes Manager Correlation in SailPoint IdentityNow. Manager Correlation is the process of linking the manager of a given identity based on the value of an attribute in an account or identity profile, such as an employee's manager attribute. This allows the system to automatically identify and associate the correct manager for an identity, which can be important for tasks like access approvals and certification reviews.
Key Reference from SailPoint Documentation:
Manager Correlation Process: Manager correlation involves linking an identity to its manager based on specific attributes in the identity or account, such as the managerId or similar fields.
質問 # 72
An IdentityNow engineer has set up an access profile for an application. The access profile allows for users to request access, and for a user's manager to approve or deny access.
After a recent staff meeting, management has expressed that they want to remove any approval requirements for this application.
Is management's request possible in IdentityNow. and. if so. are these the recommended steps the engineer should take to meet their new requirement?
Solution: It is possible. Delete the access profile.
- A. No
- B. Yes
正解：A
解説：
No, deleting the access profile is not the correct way to meet the requirement of removing approval for access requests. The access profile defines the entitlements and permissions that users can request for an application. Deleting it would remove the entire ability to request access, rather than just removing the approval workflow. The correct step would be to modify the approval settings in the access profile (as explained in Question 44), not to delete it.
Key Reference from SailPoint Documentation:
Access Profile Management: Modifying approval settings in the access profile is the appropriate step to meet management's new requirement, not deleting the profile itself.
質問 # 73
Is the following true about custom connectors in IdentityNow?
Solution: Custom connector are imported the identityNow UI.
- A. No
- B. Yes
正解：B
解説：
Yes, custom connectors are imported into IdentityNow via the UI. After development and testing, the custom connector configuration is uploaded to the platform through the IdentityNow interface. This allows administrators to define how the connector interacts with external systems and specify settings like account aggregation, correlation, and provisioning.
Key Reference from SailPoint Documentation:
Connector Import Process: Custom connectors are uploaded into IdentityNow through the UI, where they can then be configured and used to connect to external systems.
質問 # 74
Is the following true about the web-services connector in IdentityNow?
Solution: The connector only supports JSON content-types.
- A. No
- B. Yes
正解：A
解説：
The Web Services connector in IdentityNow does not exclusively support JSON content-types; it also supports XML as a content type for communication. JSON (JavaScript Object Notation) is widely used, but the connector is flexible and can be configured to handle XML-based APIs as well, depending on the requirements of the target system. Thus, it does not only support JSON.
Reference:
SailPoint IdentityNow Web Services Connector Documentation.
SailPoint IdentityNow Web Services Connector Content-Type Configuration Guide.
質問 # 75
An engineer needs to troubleshoot the following issue:
Incomplete Identities on authoritative source
Is this a reasonable action for the engineer to take?
Solution: Download the identity Exceptions report from the identity profile page.
- A. No
- B. Yes
正解：B
解説：
Yes, downloading the Identity Exceptions report from the identity profile page is a reasonable and recommended action when troubleshooting incomplete identities on an authoritative source. This report provides detailed information about any issues or exceptions encountered during identity aggregation, such as missing required attributes or mapping errors. Analyzing this report can help identify the root cause of incomplete identity records and assist in resolving those issues.
Reference:
SailPoint IdentityNow Identity Profile Configuration and Troubleshooting Guide.
SailPoint IdentityNow Exception Handling and Reporting Documentation.
質問 # 76
Is this statement correct about security and/or encryption of data?
Solution: When setting up a virtual appliance cluster. SailPoint creates an asymmetnc key pair based on a user-provided passphrase. and then uses this key pair to communication with the IdentityNow tenant.
- A. No
- B. Yes
正解：B
解説：
Yes, this statement is correct. When setting up a Virtual Appliance (VA) cluster, SailPoint does indeed create an asymmetric key pair based on a user-provided passphrase. This key pair is used for secure communication between the Virtual Appliance and the IdentityNow tenant. The asymmetric encryption model uses a public-private key pair where the private key is stored securely within the VA, and the public key is shared with the IdentityNow tenant to establish a secure, encrypted communication channel. This setup ensures that data exchanged between the VA and the IdentityNow tenant remains protected.
Reference:
SailPoint IdentityNow Virtual Appliance Security Guide.
SailPoint IdentityNow Asymmetric Encryption and Key Management Documentation.
質問 # 77
In an optimized aggregation, if an account is unchanged since the last aggregation, does this step execute?
Solution: The virtual appliance connects to the target system to retrieve accounts.
- A. No
- B. Yes
正解：A
解説：
In an optimized aggregation, if an account has not changed since the last aggregation, the Virtual Appliance (VA) does not need to connect to the target system to retrieve that account's information again. Optimized aggregation is designed to reduce the load on the system by skipping over accounts that have not been updated, thus preventing unnecessary data retrieval and improving performance.
During optimized aggregation, only accounts or data that have been modified or added since the last aggregation are retrieved. This efficiency is achieved by using timestamps or incremental updates to determine which data needs to be pulled from the target system.
Reference:
SailPoint IdentityNow Aggregation and Optimization Documentation.
SailPoint IdentityNow Virtual Appliance Configuration Guide for Aggregation.
質問 # 78
Is this statement true about certification campaigns?
Solution: Search-based certification campaigns are used to review access for non-correlated accounts.
- A. No
- B. Yes
正解：B
解説：
Yes, search-based certification campaigns can be used to review access for non-correlated accounts.
Non-correlated accounts are accounts that do not have a direct link to any identity in the system, which means they may represent orphaned or unmanaged accounts. Search-based certifications allow administrators to create campaigns based on specific criteria, including targeting these non- correlated accounts to ensure they are properly reviewed and addressed within the organization.
Reference:
SailPoint IdentityNow Search-Based Certification Campaign Guide.
SailPoint IdentityNow Non-Correlated Account Management Documentation.
質問 # 79
Is this statement true about the IdentityNow release cycle?
Solution: IdentityNow releases are controlled and coordinated by SailPoint.
- A. No
- B. Yes
正解：B
解説：
Yes, IdentityNow releases are controlled and coordinated by SailPoint. SailPoint manages the software release cycle for IdentityNow, which follows a SaaS (Software-as-a-Service) delivery model.
This means updates, new features, patches, and other improvements are automatically rolled out by SailPoint without requiring manual intervention by customers. The release schedule is typically structured around planned maintenance windows and communicated to customers in advance.
SailPoint ensures these updates are deployed securely and efficiently to all tenants.
Reference:
SailPoint IdentityNow SaaS Release Management Guide.
SailPoint IdentityNow Product Updates and Release Notes.
質問 # 80
Exhibit.
Solution: An engineer has one small production data center with an Active Directory, a database server, and two cloud applications to which they need to connect Where would the virtual appliances (VAs) reside In this scenario?
Solution: C
- A. No
- B. Yes
正解：B
解説：
Yes, the Virtual Appliances (VAs) should reside in C, which represents the on-premise network. In this scenario, the engineer has an Active Directory, a database server, and cloud applications. The VA needs to reside inside the internal on-premises network (C) to securely communicate with the Active Directory and database server. The VA will manage the secure connection to these internal resources and can also interact with cloud applications via SailPoint IdentityNow.
Key Reference from SailPoint Documentation:
VA Deployment in On-Prem Network: SailPoint advises deploying Virtual Appliances within the internal on-premises network where they can securely access identity sources like Active Directory and internal databases.
質問 # 81
Is this statement correct about security and/or encryption of data?
Solution: identityNow uses a hashing algorithm for secure encryption of data in transit and uses TLS for hashing passwords and the answers to security questions
- A. No
- B. Yes
正解：A
解説：
No, this statement is incorrect. While IdentityNow does use TLS (Transport Layer Security) for securing data in transit, TLS is not a hashing algorithm; it is a protocol used for encryption to ensure secure communication over networks. Additionally, IdentityNow uses hashing algorithms for securely storing passwords and answers to security questions (e.g., SHA-256 or bcrypt), but it does not use TLS for hashing these values. Hashing algorithms are one-way functions that help store sensitive data securely by converting them into irreversible fixed-length representations.
TLS protects data during transmission by encrypting it, while hashing is used for securing stored data such as passwords.
Reference:
SailPoint IdentityNow Encryption and Security Practices Documentation.
SailPoint IdentityNow Password Hashing and Encryption Mechanisms Guide.
質問 # 82
......
SailPoint-Certified-IdentityNow-Engineer試験問題集簡単なまとめ：https://www.passtest.jp/SailPoint/SailPoint-Certified-IdentityNow-Engineer-shiken.html
SailPoint-Certified-IdentityNow-Engineer最新SailPoint Certificationトレーニングと認定をゲット：https://drive.google.com/open?id=1OdIIDGjKy4BqT1BCXpCV5acXWV8IQRS4