在如今互聯網如此發達社會裏，選擇線上培訓已經是很普遍的現象。KaoGuTi就是眾多線上培訓網站之一。KaoGuTi的線上培訓有著多年的經驗，可以為參加SailPoint IdentityIQ-Associate 認證考試的考生提供高品質的學習資料，來能滿足考生的所有需求。
| Certification Vendor: | SailPoint |
|---|---|
| Exam Name: | SailPoint Certified IdentityIQ Associate Exam |
| Exam Number: | IdentityIQ-Associate |
| Available Languages: | English |
| Real Exam Qty: | 60 |
| Exam Format: | Single Choice, Multiple Choice |
| Passing Score: | 70 |
| Related Certifications: | SailPoint Certified IdentityIQ Engineer SailPoint Certified IdentityIQ Advanced Administrator |
| Exam Price: | $150 USD |
| Exam Duration: | 90 minutes |
| Certificate Validity Period: | 2 years |
| Sample Questions: | SailPoint IdentityIQ-Associate Sample Questions |
| Exam Way: | Online proctored exam through SailPoint certification portal |
| Pre Condition: | No formal prerequisites; basic knowledge of identity management concepts recommended |
| Official Syllabus URL: | https://developer.sailpoint.com/idn/certifications |
>> IdentityIQ-Associate考試重點 <<
對於IdentityIQ-Associate認證考試，你是怎麼想的呢？作為非常有人氣的SailPoint認證考試之一，這個考試也是非常重要的。但是，當你為了更好地準備考試而尋找參考資料的時候，你會發現找到一本非常優秀的參考書是很難的。那麼，應該怎麼辦才好呢？沒關係。KaoGuTi很好地體察到了你們的願望，並且為了滿足廣大考生的要求，向你們提供最好的考試考古題。
| 主題 | 簡介 |
|---|---|
| 主題 1 |
|
| 主題 2 |
|
| 主題 3 |
|
| 主題 4 |
|
| 主題 5 |
|
問題 #57
Is this statement true for the use of tasks?
They can be used to confirm that the correct access is provided by an account group.
答案：B
解題說明：
No. In SailPoint IdentityIQ, tasks are execution mechanisms used to perform system operations such as aggregation, identity refresh, certification generation support, report execution, maintenance processing, and other repeatable administrative jobs. A task can collect data, refresh calculated identity information, process objects, or execute configured logic, but it does not itself provide the business review function of confirming whether an account group provides the correct access.
Confirming that an account group provides appropriate access is a governance activity. That type of validation is performed through access reviews or certifications, where a designated reviewer evaluates group membership, permissions, ownership, or entitlement meaning and decides whether the access remains appropriate. This requires human or configured governance judgment, not simply execution of a background task.
A task may support the process indirectly by aggregating current account group data or preparing certification data, but the actual confirmation of correctness belongs to certification and governance review functionality.
Reference topics: Foundational Concepts, tasks versus workflows, Governance, certifications, account group reviews, access reviews, and Access Modeling.
問題 #58
Does this statement accurately describe how roles are acquired by users in the default role model configuration?
Business roles can only be requested by managers.
答案：B
解題說明：
No. This statement does not accurately describe role acquisition in IdentityIQ. Business roles are not restricted to being requested only by managers. In IdentityIQ, roles may be acquired through role assignment logic, role detection, access requests, or administrative action, depending on the role configuration and the organization's request model.
A business role commonly represents access associated with a business function, job, department, location, or organizational responsibility. Users may receive business roles automatically when their identity attributes satisfy configured role profiles or assignment rules, typically recalculated during Identity Refresh. Separately, roles may be made requestable through Lifecycle Manager and exposed through QuickLinks, where request eligibility is controlled by QuickLink Populations, request configuration, and workflow rules.
Managers may be allowed to request roles for direct reports, but that is only one possible configuration.
IdentityIQ can also allow users to request roles for themselves, allow delegated requesters to request for others, or restrict requests to specific populations.
Therefore, "only requested by managers" is too narrow and incorrect. Reference topics: Access Modeling, business roles, role assignment, role detection, Identity Refresh, User-Driven Requests, QuickLink Populations, and role request configuration.
問題 #59
Is this statement true for IdentityIQ application definitions?
Applications in IdentityIQ are named with the connector that is selected.
答案：B
解題說明：
No. In SailPoint IdentityIQ, the application name is a configurable label assigned to the application object and does not have to match the connector selected. The application definition represents an external system or source, while the connector defines the technical integration method used to communicate with that system.
These are related configuration elements, but they are not the same field and one does not automatically name the other.
For example, an application could be named "Corporate Directory," "North America Active Directory," or
"HR Source," while using an LDAP, Active Directory, JDBC, Delimited File, Web Services, or another connector type. The connector selection determines available configuration settings, supported schema behavior, aggregation options, and provisioning capabilities. The application name is used for identification within IdentityIQ, reporting, certifications, requests, policies, and administrative configuration.
Therefore, the statement is incorrect because IdentityIQ applications are not named by the selected connector.
They are named by the administrator or implementer according to the business or system context. Reference topics: Applications, application definition, connector selection, connector-dependent settings, schemas, aggregation, and provisioning support.
問題 #60
Is this statement true for the use of applications?
They are defined in IdentityIQ to represent the systems from which identities are read.
答案：B
解題說明：
The statement is not technically accurate. In SailPoint IdentityIQ, applications are defined to represent external systems, platforms, directories, databases, or resources from which account, group, entitlement, and attribute data are aggregated, and in some cases to which provisioning changes are written. IdentityIQ does not generally "read identities" directly from applications. Instead, it reads account records and associated attributes from applications, then uses identity correlation, authoritative-source logic, and identity refresh processing to construct or update IdentityCubes.
This distinction is fundamental. An application may be an authoritative source, such as an HR system, where account attributes contribute heavily to identity creation and lifecycle state. However, the object read from the source is still an account or source record, not an IdentityIQ identity object. The identity is modeled inside IdentityIQ after aggregation and correlation occur.
Therefore, the more precise statement is that applications represent systems from which IdentityIQ reads account and access data, not systems from which IdentityIQ simply reads identities. Reference topics: Applications, application definition, account aggregation, authoritative applications, correlation, IdentityCube creation, and Identity Modeling.
問題 #61
Is this statement true about attributes in IdentityIQ?
Identity attributes hold details about a user.
答案：A
解題說明：
The statement is true. In SailPoint IdentityIQ, identity attributes are stored on the IdentityCube and represent normalized information about a user. These attributes describe the identity at the governance level rather than describing a single account on a connected application. Common examples include first name, last name, email, department, location, job title, employee number, manager, lifecycle state, and status.
Identity attributes are important because IdentityIQ uses them throughout identity governance processes. They support identity correlation, manager correlation, certification scoping, policy evaluation, role assignment, lifecycle events, access request routing, reporting, and population or group membership. Identity attributes may be sourced from an authoritative application, derived from account data, calculated through rules, or refreshed through Identity Refresh processing.
This differs from account attributes, which are defined in an application account schema and belong to a specific application account link. Identity attributes provide the consolidated user profile that IdentityIQ uses to make governance decisions.
Reference topics: Identity Modeling - IdentityCubes, identity attributes versus account attributes, manager correlation, Identity Refresh options.
問題 #62
......
IdentityIQ-Associate考題寶典: https://www.kaoguti.com/IdentityIQ-Associate_exam-pdf.html