Question 1

When an XML document has an input tag type, which are supported inputs? (Choose 4.)

Accepted Answer

A) B) C) D) E) F) G) A,D,F,G

Question 2

Which application is used to map authorizations to Identity Vault Roles?

Accepted Answer

A)   iFilter
B)   iManager
C)   Designer
D)   User Applications
E)   Role Mapping Administrator E

Question 3

Which Policy Sets are applied only during an add event?

Accepted Answer

A)   Matching, Create, and Placement
B)   Input Transformation, Matching, and Create
C)   Matching, Create, and Schema Transformation
D)   Input Transformation, Schema Transformation, and Command Transformation A

Question 4

Which statements about filters are true? (Choose 2.)

Accepted Answer

A)   You cannot export a filter from a driver.
B)   You can configure a filter policy for a driver set.
C)   You can add a class or attribute to a filter policy.
D)   There are separate filter policies for the Publisher and the Subscriber channels.
E)   The same filter policy is used for both the Publisher and the Subscriber channels.

Question 5

When data changes in the Identity Vault or a connected application, which processes the changes?

Accepted Answer

A)   Drivers
B)   Remote Loader
C)   Identity Vault
D)   Metadirectory Engine
E)   Connected application

Question 6

Which statements are true? (Choose 2.)

Accepted Answer

A)   When an event is being sent to a driver, it is a notification.
B)   When an event is being sent to a driver, it is a command.
C)   When an event is being sent to Identity Manager, it is a command.
D)   When an event is being sent to Identity Manager, it is a notification.
E)   Events and commands are handled the same way within an IDM 4 environment.

Question 7

Using iManager, what do you need to select to allow you to see the Filter icons so that you can edit filters?

Accepted Answer

A)   The Driver
B)   The Driver Set
C)   The Application
D)   The Identity Vault

Question 8

The Requests & Approvals tab in the Identity Manager user application includes a group of actions called My Settings. The My Settings actions give you the ability to view your proxy and delegate assignments. What is the difference between a proxy and a delegate?

Accepted Answer

A)   A delegate assignment is independent of process requests.
B)   A delegate assignment applies to a particular type of request.
C)   A delegate assignment can only be given to a Team Manager.
D)   A Provisioning Manager can only define delegate assignments
E)   A delegate assignment can only be given to a Provisioning Manager.

Question 9

What type of Identity Manager Event does a Subscriber Trigger Event Job create?

Accepted Answer

A)   sync
B)   query
C)   modify
D)   status
E)   triggerF)  triggerless

Question 10

If there is a name conflict between different variable sources in an XPATH statement, what is the order of precedence?

Accepted Answer

A)   Local (policy scope) , Global, Local (driver scope) 
B)   Global, Local (driver scope) , Local (policy scope) 
C)   Local (driver scope) , Local (policy scope) , Global
D)   Global, Local (policy scope) , Local (driver scope) 
E)   Local (policy scope) , Local (driver scope) , and global

Question 11

What does a Driver object contain? (Choose 2.)

Accepted Answer

A)   Packages
B)   Driver Set
C)   Policy Objects
D)   Application driver shim
E)   Subscriber and Publisher objects

Question 12

Which statement is true regarding regular expressions?

Accepted Answer

A)   Must be case sensitive
B)   Can match entire string
C)   Cannot use wildcard characters
D)   Cannot be changed by escape characters

Question 13

What is a purpose of the DAL (Directory Abstraction Layer)?

Accepted Answer

A)   To process work flows
B)   To grant/revoke entitlements
C)   To store entities attribute data for use in work flows
D)   To provide a customized view of objects and their attributes that are stored in the Identity Vault

Question 14

You are trying to add content to a package. You have created content in an item. You right-click that item and select Add to Package; however, no packages are showing in the list. What is the cause of this problem?

Accepted Answer

A)   You must build a package before you can add content to it.
B)   You must version a package before you can add content to it.
C)   You must create a package in Designer before you can add content to it.
D)   You must import a package into Designer before you can add content to it.

Question 15

Which are directory objects that encapsulate the business rules for granting or revoking a corporate resource or role, and binding the corporate resource or role to a workflow?

Accepted Answer

A)   Role Mapping Definitions
B)   Provisioning Request Definitions
C)   Data Abstraction Layer Definitions
D)   Global Configuration Values Definitions

Question 16

Which statement about entitlements is true?

Accepted Answer

A)   Entitlements are used as the association key for the user objects.
B)   eDirectory schema is extended the first time Entitlements are invoked.
C)   The DirXML-EntitlementRef attribute keeps track of the entitlements that a user has been granted or revoked.
D)   Entitlements that grant or revoke Group Membership will always take precedence over policies that grant or revoke Group Memberships.

Question 17

Which user type works with the User Application's Identity Self-Service, Work Dashboard, and Roles and Resource tabs and has no administrative permissions?

Accepted Answer

A)   Designers
B)   Team Manager
C)   Business Users
D)   Domain Manager

Question 18

The Roles hierarchy supports three levels. Which represents the highest role level?

Accepted Answer

A)   Kaiser Role
B)   Business Role
C)   Resource Role
D)   Technical Role
E)   Workflow Role

Question 19

In the Standard SoD Constraint Exception Approval Workflow Activity, which Activity Name determines whether the approval is a quorum condition?

Accepted Answer

A)   Localize SoD Name
B)   Approve SoD Conflict
C)   Check for Processing Type
D)   Approve SoD Conflict (Serial) 
E)   Approve SoD Conflict (Quorum)

Question 20

Which domain defines rights to launch attestation requests and view the status of attestation requests?

Accepted Answer

A)   Role Domain
B)   Resource Domain
C)   Compliance Domain
D)   Provisioning Domain
E)   Configuration Domain

Exam 2: Certified NetIQ Identity Manager Administrator