IdentityIQ-Engineerリアル試験問題解答は更新された[2026年08月08日]
お手軽に合格させる 最新SailPoint IdentityIQ-Engineer問題集には201問があります
SailPoint IdentityIQ-Engineer 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
質問 # 72
Can the search type in Syslog be used to accomplish this result?
Solution: Identifying the number of employees that report to a specific person
- A. No
- B. Yes
正解：A
解説：
Syslog is primarily used for logging system events and not for performing complex searches or queries on hierarchical or organizational data like identifying the number of employees that report to a specific person.
Such a query would typically require access to the organizational hierarchy or identity data, which is better achieved through IdentityIQ's reporting or search capabilities within the application rather than using Syslog.
Syslog captures log events related to system operations, errors, and other activity logs but isn ' t designed for the type of structured query described in the question.
SailPoint IdentityIQ Logging and Monitoring Guide
SailPoint IdentityIQ Administration Guide (Sections on Reporting and Search)
質問 # 73
Is this a default functionality of the Lifecycle Manager (LCM) module?
Solution: Define Application
- A. No
- B. Yes
正解：A
解説：
Defining an application is not a default functionality of the Lifecycle Manager (LCM) module. Application definitions are typically part of the core IdentityIQ platform and are managed through the IdentityIQ Administration module, not Lifecycle Manager. LCM is primarily focused on managing identity lifecycle events, such as onboarding (Joiner), role changes (Mover), and offboarding (Leaver).
Therefore, the correct answer is B. No.
Reference: This conclusion is supported by the SailPoint IdentityIQ Administration and Configuration Guides, which delineate the functionalities of different modules, including where application definitions are managed.
質問 # 74
Is this a correct procedure for testing generated emails in a non-production system?
Solution: Change the Email Notification Type to Redirect to file using FTP protocol under Global Settings > Configure IdentitylQ Settings > Mail Settings, run the test scenario, and verify that the email text saved to the redirected file.
- A. No
- B. Yes
正解：A
解説：
The proposed solution suggests changing the Email Notification Type to " Redirect to file using FTP protocol
" under Global Settings > Configure IdentityIQ Settings > Mail Settings. However, IdentityIQ does not provide an option to redirect emails to a file using the FTP protocol directly through the Global Settings in the application.
Typically, to test generated emails in a non-production environment, you would change the Email Notification Type to " Redirect to File " (if the option is available) or configure an SMTP server with a different setup that captures emails in a file or a specific mailbox designed for testing purposes. The specific steps for testing email generation may vary, but the solution as stated does not align with standard IdentityIQ practices.
Thus, the correct answer is B. No.
Reference: This answer is based on the SailPoint IdentityIQ Administration Guide, which outlines email configuration options and best practices for testing in non-production environments.
質問 # 75
Can this be achieved using Rapid Setup user interface configuration options?
Solution: Disable an account and remove all its entitlements on a particular application during Mover events.
- A. No
- B. Yes
正解：A
解説：
The scenario described involves disabling an account and removing all its entitlements on a particular application during Mover events. The Rapid Setup user interface in SailPoint IdentityIQ primarily handles common configurations like enabling or disabling accounts, assigning or unassigning roles, and triggering certifications during lifecycle events.
However, the combination of disabling an account and removing all its entitlements for a Mover event typically involves more detailed configuration that goes beyond the capabilities of the Rapid Setup interface. Achieving this would generally require creating a custom workflow or a specific rule that handles both disabling the account and removing entitlements based on the Mover event triggers.
Thus, the Rapid Setup UI cannot achieve this level of detailed configuration, making the correct answer B. No.
Reference:
This conclusion is drawn from the SailPoint IdentityIQ Lifecycle Manager documentation, which specifies the functionalities available through the Rapid Setup interface and the additional configurations possible through custom workflows.
質問 # 76
Can this be achieved using Rapid Setup user interface configuration options?
Solution: Disable an account and remove all its entitlements on a particular application during Mover events.
- A. No
- B. Yes
正解：A
解説：
The scenario described involves disabling an account and removing all its entitlements on a particular application during Mover events. The Rapid Setup user interface in SailPoint IdentityIQ primarily handles common configurations like enabling or disabling accounts, assigning or unassigning roles, and triggering certifications during lifecycle events.
However, the combination of disabling an account and removing all its entitlements for a Mover event typically involves more detailed configuration that goes beyond the capabilities of the Rapid Setup interface.
Achieving this would generally require creating a custom workflow or a specific rule that handles both disabling the account and removing entitlements based on the Mover event triggers.
Thus, the Rapid Setup UI cannot achieve this level of detailed configuration, making the correct answer B. No.
Reference:This conclusion is drawn from the SailPoint IdentityIQ Lifecycle Manager documentation, which specifies the functionalities available through the Rapid Setup interface and the additional configurations possible through custom workflows.
質問 # 77
Is this statement true about identitylQ's syslog event storage?
Solution: To improve security, items logged through syslog are unable to be sent to Log4j.
- A. No
- B. Yes
正解：A
解説：
The statement is false. In SailPoint IdentityIQ, syslog events can indeed be sent to Log4j. The system allows for flexible configuration where logging can be directed to multiple outputs, including both syslog and Log4j. This flexibility enables organizations to route logs according to their needs while maintaining security and compliance.
Reference:
SailPoint IdentityIQ Logging and Auditing Guide
SailPoint IdentityIQ Administration Guide (Syslog Configuration and Log4j Integration)
質問 # 78
Is this a benefit of using the Run Rule feature of the Debug-Object page?
Proposed Solution:
It can be used to display the return value of simple code.
- A. Yes
- B. No
正解：A
解説：
Yes. The Run Rule capability in the IdentityIQ debug/admin tooling is useful for executing BeanShell rule logic and viewing the result, especially during development or troubleshooting. When an engineer writes a simple rule that returns a value, the Run Rule feature can be used to validate the logic and observe the returned output. This is useful for quick testing of rules that evaluate identity attributes, build strings, test object lookups, or verify small pieces of BeanShell logic before embedding the rule into a workflow, lifecycle event, policy, certification configuration, or application configuration. However, this feature must be used carefully because rule execution can interact with real IdentityIQ objects depending on the code. The benefit described in the proposed solution is narrow and valid: displaying the return value of simple code is a legitimate use case. It is not the same as saying the feature should be used for unrestricted database manipulation. References/topics: IdentityIQ Engineer - Debug pages, Run Rule, BeanShell rules, rule testing, troubleshooting.
質問 # 79
A customer wants to make changes in their IdentitylQ user interface. Consider branding and other IdentitylQ Ul changes. Is this statement valid?
Solution: Primary and secondary colors are set through the IdentitylQ Configuration > Miscellaneous page.
- A. No
- B. Yes
正解：A
解説：
The primary and secondary colors in the IdentityIQ user interface are not set through the IdentityIQ Configuration > Miscellaneous page. Instead, these colors are typically configured through the style.css or other custom CSS files that are part of the IdentityIQ UI customization process. Administrators can define and modify the color scheme, fonts, and other style elements by editing the relevant CSS files or using the Branding feature within IdentityIQ.
Therefore, the correct answer is B. No.
Reference:This information is based on the SailPoint IdentityIQ Branding Guide, which details how to modify the visual aspects of the UI, including colors, by editing CSS files rather than through the Miscellaneous settings.
質問 # 80
Is this a purpose of an IdentitylQ certification?
Solution: to review a snapshot of a user's system access
- A. Yes
- B. No
正解：A
解説：
One of the primary purposes of an IdentityIQ certification is to provide reviewers with a snapshot of a user's system access at a given point in time. This snapshot allows managers, auditors, or other designated reviewers to verify whether the access privileges assigned to a user are appropriate, based on their job responsibilities and compliance requirements. By reviewing this snapshot, organizations can identify and remediate any inappropriate or excessive access, thus maintaining a secure and compliant environment.
Therefore, the correct answer is A. Yes.
質問 # 81
Is this what should be performed in order to generate the database script to extend Application attributes in the IdentitylQ database on the initial installation?
Solution: Run a build with the updated schema placed inside it.
- A. No
- B. Yes
正解：A
解説：
Running a build with the updated schema placed inside it is not the correct procedure to generate the database script to extend Application attributes in the IdentityIQ database during the initial installation. To extend the schema, you typically need to define the changes in a specific XML schema file and then generate the corresponding database scripts using IdentityIQ tools designed for schema extension. A build process does not inherently generate the required database scripts for extending attributes.
Reference:
SailPoint IdentityIQ Schema Configuration Guide
SailPoint IdentityIQ Installation and Setup Guide
質問 # 82
Is this statement true about the IdentitylQ Audit functionality and/or options?
Solution: The built-in auditing options are immutable; they are always recorded. However, custom audits can be turned on or off.
- A. Yes
- B. No
正解：A
解説：
Yes, the statement is true. In SailPoint IdentityIQ, the built-in auditing options are indeed immutable, meaning they are always recorded and cannot be disabled or altered. This ensures that critical actions and changes are always logged for compliance and security purposes. However, custom audit configurations, such as additional custom audit fields or logs, can be turned on or off based on specific organizational requirements.
Reference:
SailPoint IdentityIQ Audit Guide
SailPoint IdentityIQ Administration Guide (Sections on Auditing and Compliance)
質問 # 83
A client wants users who belong to an IdentitylQ workgroup named Management to be able to request entitlements and roles, but only for other users whose location attribute is the same as theirs.
Is this a population that will achieve the goal?
Solution: Create a quicklink population, set the membership match list to the IdentitylQ workgroup " Management, " and set " Who can members request for? " as report to the requester.
- A. No
- B. Yes
正解：A
解説：
* The provided solution does not fulfill the client ' s requirement. Setting " Who can members request for? " to " report to the requester " only limits the request scope to users who directly report to the requester, which does not account for the location attribute. The goal is to restrict requests based on the location attribute, and this specific configuration does not consider that attribute. To achieve the desired behavior, the configuration should include logic that filters users based on the same location as the requester.
References:
SailPoint IdentityIQ Quicklink Population Configuration Guide
SailPoint IdentityIQ Advanced Population Management Guide
質問 # 84
An engineer needs to first create a custom audit event and then set up an associated report.
What are four steps to accomplish this goal?
Proposed Solution:
Create a Custom Certification Event Schedule and associated ruleRunner task.
- A. No
- B. Yes
正解：A
解説：
This is not a valid step for creating a custom audit event and associated report. A Custom Certification Event Schedule relates to certification scheduling or certification-event processing, not to defining a new audit action in the audit framework. A ruleRunner task can execute a rule, but simply creating a certification event schedule and ruleRunner task does not establish a custom audit event type, does not register the event in AuditConfig, and does not create a report capable of querying that audit data. For a custom audit event, the engineer must define the audit action/event, ensure the code path writes the audit event with the appropriate attributes, and then create or configure a report that can retrieve and display those audit records. The proposed solution is pointed at the wrong subsystem. It confuses certification scheduling automation with audit event definition and reporting. References/topics: IdentityIQ Engineer - AuditConfig, AuditAction, custom audit events, audit reporting, ruleRunner task limitations.
質問 # 85
Is the following statement about IdentityIQ rule inputs and outputs correct?
Proposed Solution:
In the Rule Editor in the IdentityIQ user interface, an input variable can be inserted by double-clicking its name from the list of " Arguments " .
- A. Yes
- B. No
正解：A
解説：
This statement is correct. The IdentityIQ rule editor is designed to assist engineers when writing BeanShell rules by exposing rule-context information, including available arguments/input variables for the selected rule type. In the editor, variables shown in the arguments list are not decorative; they represent objects or values IdentityIQ makes available to the rule at runtime. Being able to insert an input variable by interacting with the argument list is consistent with the purpose of the rule editor: helping the developer use the correct variable names and avoid spelling or context mistakes. This is especially important because rule arguments differ by rule type. A correlation rule, provisioning rule, workflow rule, and certification rule may each expose different variables. The proposed solution is therefore valid because the Rule Editor can use the rule registry metadata to present available arguments and support insertion into the BeanShell source. References/topics:
IdentityIQ Engineer - BeanShell Rule Editor, rule arguments, Rule Registry, input variables, rule development tooling.
質問 # 86
Is this relationship type available for an IdentityIQ Role that has a multiple-level structure?
Proposed Solution:
Hierarchy
- A. Yes
- B. No
正解：A
解説：
Yes. Hierarchy is a valid relationship concept for IdentityIQ roles when a role model has a multiple-level structure. IdentityIQ roles are not limited to flat entitlement collections. Role models can be built with layered relationships, where higher-level roles represent broader business access and lower-level roles represent more technical or application-specific access. This is common in mature role-based access control designs: a business role may include IT roles, which in turn may include entitlements or application roles. A hierarchical structure allows organizations to express access in business terms while still mapping that access down to technical resources. The important engineering point is that the role model must be carefully designed to avoid circular dependencies, overbroad inheritance, and difficult certification outcomes. Hierarchical role relationships support maintainable access modeling when used properly, especially in enterprises that are actively using role-based provisioning and role reviews. References/topics: IdentityIQ Engineer - role hierarchy, role relationships, Bundle object, business roles, IT roles, role-based access model.
質問 # 87
Is this what should be performed in order to generate the database script to extend Managed Attribute attributes in the IdentityIQ database on the initial installation?
Proposed Solution:
Run the extendedSchema script on the IdentityIQ database.
- A. No
- B. Yes
正解：A
解説：
This proposed solution is incorrect because it confuses generating a schema script with applying a generated schema script. To generate the database script for extended attributes, the engineer must update the relevant Hibernate mapping files and then run the appropriate IdentityIQ schema-generation command, commonly from the IIQ_HOME/WEB-INF/bin area, so IdentityIQ can produce the database-specific SQL needed for the extension. Running the extendedSchema script on the database is an execution/apply step, not the generation step. In other words, the generated SQL script is run after it has already been produced. For ManagedAttribute or other object extensions, the sequence matters: define the extension in the mapping/configuration layer, generate the script, stop application services as needed, apply the script to the database, then ensure IdentityIQ object configuration reflects the new attribute. The proposed solution skips the generation step entirely.
References/topics: IdentityIQ Engineer - Hibernate extension files, extended schema generation, ManagedAttribute extension, database schema update process.
質問 # 88
Can a Workgroup be used for the following scenario?
Solution: Providing a group of users with specific capabilities.
- A. Yes
- B. No
正解：A
解説：
In SailPoint IdentityIQ, a Workgroup can indeed be used to provide a group of users with specific capabilities. Workgroups are collections of users that can be assigned roles, tasks, and permissions. By associating capabilities with a Workgroup, all members of that Workgroup will inherit the capabilities defined.
This feature is commonly used to manage teams or departments that need to share specific privileges, such as the ability to approve access requests or manage certifications. Configuring capabilities for a Workgroup is a standard practice within IdentityIQ to simplify permission management and ensure consistent access control across the group.
Therefore, the correct answer is A. Yes.
Reference:
This conclusion is drawn from the SailPoint IdentityIQ Administration Guide, which details how Workgroups function and how they can be used to assign capabilities and manage access control within the platform.
質問 # 89
......
最新のIdentityIQ-Engineer学習ガイド2026年最新の- 提供するのはテストエンジンとPDF：https://www.goshiken.com/SailPoint/IdentityIQ-Engineer-mondaishu.html
最新版を今すぐ試そうIdentityIQ-Engineer練習テスト問題解答：https://drive.google.com/open?id=12X0QSio17dxNWaO0Duhj8HTH33X4TLTE