IdentityIQ-Associate Exam Preparation Material | SailPoint Certified IdentityIQ Associate Exam

Explanation:
The statement is false. In SailPoint IdentityIQ, the Application Name is a logical identifier used to label and distinguish the application object inside IdentityIQ. It does not determine which connector the application uses. The connector is selected separately as part of the application configuration, and that connector selection determines the available connection parameters, supported operations, schema behavior, aggregation capabilities, and provisioning capabilities.
For example, an application could be named “HR System,” “Active Directory,” or “Corporate Accounts,” but the name itself does not cause IdentityIQ to use an LDAP, JDBC, Delimited File, Web Services, or other connector. The selected connector type defines how IdentityIQ communicates with the source or target system. It also influences whether the application can aggregate accounts, discover schema, manage groups, perform provisioning, or write changes back to the managed system.
Therefore, the application name is descriptive metadata, while the connector type is the technical integration mechanism.
Reference topics: Applications, application definition, connector selection, connector-dependent settings, schema configuration, aggregation, and provisioning support.

Explanation:
The statement is false. The Identity Refresh task does not execute aggregation rules configured on an application definition. Aggregation rules are part of the application aggregation process, where IdentityIQ connects to a source system, reads account or group data, applies connector and application-level processing, and stores account links, entitlement values, and related data in the IdentityIQ repository.
The Identity Refresh task operates after data is already present in IdentityIQ. Its function is to update IdentityCubes and recalculate identity-level governance information. Depending on selected options, Identity Refresh may update identity attributes, refresh role assignments, detect assigned or detected roles, evaluate policies, process lifecycle events, refresh manager relationships, or recalculate risk and access-related identity state.
Application aggregation and identity refresh are separate task functions. Aggregation obtains and normalizes data from applications; Identity Refresh interprets and recalculates identity governance state using that aggregated data. Therefore, rules tied specifically to aggregation on the application definition are execute during aggregation, not during Identity Refresh.
Reference topics: Identity Modeling ― Identity Refresh task options; Applications ― aggregation rules and application definitions; Foundational Concepts ― tasks and workflows.

Explanation:
Yes. In SailPoint IdentityIQ, marking an application account schema attribute as managed designates that the values discovered for that attribute are treated as managed entitlement values and promoted into the Entitlement Catalog. This is typically used for attributes that represent access, such as groups, roles, permissions, profiles, or other application-specific entitlement assignments. During aggregation, IdentityIQ reads account data from the application. When a schema attribute is marked as managed, the distinct values of that attribute can become ManagedAttribute objects, allowing IdentityIQ to govern them as cataloged access items.
This catalog promotion is important because raw technical values often need business context before they can be reviewed, requested, approved, certified, or reported on. The Entitlement Catalog can store metadata such as display name, description, owner, requestability, classification, and other governance attributes. These values then become usable in access certifications, access requests, reports, policy evaluation, and role modeling.
Therefore, the statement accurately describes the managed attribute function.
Reference topics:
Applications ― account schema attribute properties; Access Modeling ― entitlement catalog;
Governance ― certification content and entitlement review.

Explanation:
Yes. This is a primary use of the entitlement catalog in SailPoint IdentityIQ. Entitlements aggregated from target applications are often technical values, such as group names, permission codes, directory groups, database roles, or application-specific access identifiers. These values may be meaningful to administrators but unclear to business reviewers, requesters, managers, or access approvers. The entitlement catalog enriches those technical access values with governance metadata, including user-friendly display names, descriptions, ownership, classification, requestability, and other attributes used across IdentityIQ.
This enriched entitlement data improves decision quality in access requests, certifications, and reports. During an access request, a requester can search and select understandable access items. During a certification, a reviewer can make better approve-or-revoke decisions because the entitlement is presented with meaningful business context. In reporting, catalog metadata makes access analysis clearer and more usable for audit and compliance teams.
Therefore, providing user-friendly entitlement display names for access requests, reports, and certifications is a correct entitlement catalog function.
Reference topics: Access Modeling ― entitlement catalog purpose; Governance ― certifications and review context; User-Driven Requests ― access request display; Applications ― entitlement aggregation from group/account schemas.

Explanation:
No. Defining access conditions that violate business policies is not provisioning. In SailPoint IdentityIQ, this activity belongs to governance and policy configuration. Policies define conditions that IdentityIQ should detect as violations, such as separation-of-duty conflicts, prohibited combinations of access, excessive privilege, or access that conflicts with organizational rules. These policies are evaluated against identities, roles, accounts, and entitlements to identify existing or potential violations.
Provisioning is the execution or fulfillment of access changes. Examples of provisioning include creating an account, modifying account attributes, adding or removing entitlements, disabling an account, deleting an account, or generating manual fulfillment work items. A policy violation may influence provisioning by blocking a request, warning the requester, requiring approval, or triggering remediation, but defining the violation condition itself is not a provisioning action.
Therefore, the described action is governance policy definition, not provisioning.
Reference topics: Governance, policy configuration, policy detection, preventive policy checking, Provisioning, provisioning plans, remediation, and access-change fulfillment.