Key details for this exam, checked against the published exam outline
Each question shows the correct answer and an explanation of why it is right
An identity security administrator is setting up an identity profile for the HR source and needs the identity's manager attribute to be automatically populated based on a value from the HR source account, while also allowing a fallback value if the source attribute is empty. Which mapping configuration should be used?
Identity attribute mappings in an identity profile can be configured using a transform, which allows administrators to reference a source attribute and apply logic (such as a default value or fallback) if the value is missing. Rule-based hardcoding is not scalable, manual entry defeats automation, and lifecycle states control access/provisioning, not attribute mapping defaults.
A compliance team wants to ensure that when an employee moves into a 'Leave of Absence' lifecycle state, their access to all applications is revoked automatically without deleting their accounts, so access can be restored quickly upon return. Which provisioning option within the lifecycle state configuration achieves this?
Lifecycle states allow administrators to configure account actions (enable, disable, or no action) per source when an identity transitions into that state. Disabling accounts revokes access while preserving the account for quick reinstatement, whereas deletion would remove the account entirely. Certification campaigns and identity profile changes are unrelated to this specific access revocation use case.
An administrator notices that a provisioning request to create a new account on an Active Directory source is stuck in a pending state, and the help desk wants to know where to look first to identify the root cause. Which object should the administrator search on in Identity Security Cloud to troubleshoot this provisioning error?
Account activity records track provisioning requests and their statuses (pending, completed, failed) and provide detailed error messages when a provisioning operation does not complete. Access profiles and identity profiles define configuration, not runtime provisioning status, and role membership criteria pertains to automated role assignment, not troubleshooting a stuck provisioning task.
A source owner reports that after a recent HR feed aggregation, several accounts that used to be linked to identities are now showing as uncorrelated. The administrator investigates and finds that the HR file's unique identifier column was renamed. In this scenario, what does 'uncorrelated' mean for these accounts?
Uncorrelated accounts are accounts discovered during aggregation that cannot be linked to an existing identity using the correlation rule or configuration, often because a key identifying attribute changed or is missing. This does not mean the account is disabled, deleted, or merged; it simply remains unlinked until correlation logic is corrected or manual correlation is performed.
A financial services organization must demonstrate to auditors that access to a sensitive application is reviewed periodically and that any inappropriate access is revoked in a timely manner, in line with regulatory requirements such as SOX. Which SailPoint Identity Security Cloud capability directly supports this compliance requirement?
Certification campaigns allow organizations to periodically review who has access to what, enabling reviewers to approve or revoke access, which directly satisfies compliance and audit requirements like SOX. Event triggers automate actions based on system events, workflow designer builds custom automations, and virtual appliance clustering relates to infrastructure availability, none of which specifically address periodic access review and compliance attestation.
99 questions covering all exam domains, starting from $20
Exam domains verified against: Official SailPoint Identity-Security-Administrator exam guide, last checked September 2026.
Covers valid search queries and results, scheduling search reports, REST API authentication, monitoring provisioning activity, security administration options, event triggers configuration, tenant authentication options, workflow components, and backup and restore procedures. Understanding these platform capabilities is essential for day-to-day administration of the Identity Security Cloud.
Focuses on understanding virtual appliances, monitoring their health, and performing basic troubleshooting. Virtual appliances bridge on-premises environments with the cloud platform and require reliable monitoring and maintenance.
Covers identity profiles, their authentication options, attribute mappings, mapping configuration options, lifecycle states and use cases, provisioning options within lifecycle states, and the cloud lifecycle state attribute. This domain forms the foundation for understanding how identities move through your system.
Addresses how provisioning is triggered, components of source provisioning, provisioning channels and their use cases, logging configuration and levels for specific connectors, and troubleshooting provisioning errors. Provisioning errors directly impact user access delivery and account management.
Sample question from this domain above: Q3
Examines user level capabilities, entitlements basics, types of access supported, automated role assignments, and troubleshooting access management errors. Access management is where identity data translates into actual permissions and capabilities for users.
Covers access request steps, work reassignment, approval flows, certification lifecycle, certification types, and policy types in Identity Security Cloud. Governance functions ensure accountability and compliance across the identity and access lifecycle.
Sample question from this domain above: Q5
Focuses on aggregation types, processes for obtaining account and entitlement information, uncorrelated accounts, account deletion and its effect on aggregation, connector types, source error searching, and the purpose of sources. Sources are the starting point for all identity data flowing into the platform.
Sample question from this domain above: Q4
Covers IGA definition and understanding, compliance concepts, authentication versus authorization comparison, federation concepts, and authentication methods. This domain establishes the foundational concepts that inform all other administrator tasks.
Common questions about the exam itself
