IdentityNow-Engineer Exam Questions and Answers

QUESTION: 17

Is this an example of a vanity URL?

Solution: https://my.example.com

Yes
No

Answer(s): A

Explanation:

Yes, https://my.example.com is an example of a vanity URL. Vanity URLs are customized, branded URLs designed to be easily recognizable, memorable, and aligned with a company's branding. In this case, the subdomain my and the domain example.com create a branded, user-friendly URL. Vanity

URLs are often used for simplifying access to services like IdentityNow and for improving user experience.

Key Reference from SailPoint Documentation:

Vanity URL Usage in IdentityNow: SailPoint allows customers to configure vanity URLs to provide a more personalized and branded login experience for their users.

Reveal Solution Next Question

QUESTION: 18

Is this an example of a vanity URL?

Solution: https://identityNowacme.com

Yes
No

Answer(s): B

Explanation:

https://identityNowacme.com is not typically considered a vanity URL.
While it includes the "identityNow" term, it does not appear to follow the format of a vanity URL, which generally includes a company-specific subdomain (like my) and a custom domain (example.com). In this case, the URL is more generic and lacks the branding or simplicity typically associated with vanity URLs.

Key Reference from SailPoint Documentation:

Vanity URL Structure in IdentityNow: Vanity URLs typically feature a customized subdomain that reflects the organization's branding, and identityNowacme.com does not fit this pattern.

Reveal Solution Next Question

QUESTION: 19

An IdentityNow engineer needs to review logs to diagnose when the secure tunnel fails to allow communication. Could reviewing thi9 log file help diagnose the issue?

Solution: /home/sailpoint/log/relay.log

Yes
No

Answer(s): A

Explanation:

Yes, reviewing the /home/sailpoint/log/relay.log file can help diagnose issues related to the secure tunnel in SailPoint IdentityNow. The relay.log file captures information about the communication between the IdentityNow Virtual Appliance (VA) and the SailPoint cloud. This secure tunnel is responsible for ensuring encrypted communication, and any issues with establishing or maintaining the connection can often be found in this log.

Key Reference from SailPoint Documentation:

Relay Log for Troubleshooting: The relay.log is the primary log file to review for communication issues between the Virtual Appliance and SailPoint IdentityNow cloud, including secure tunnel failures.

Reveal Solution Next Question

QUESTION: 20

An IdentityNow engineer needs to review logs to diagnose when the secure tunnel fails to allow communication. Could reviewing thi9 log file help diagnose the issue?

Solution: /home/sailpoint/log/vs_agent.log

Yes
No

Answer(s): B

Explanation:

No, the vs_agent.log file is not typically used to diagnose secure tunnel communication issues. The vs_agent.log file is related to virtual appliance services and tasks but does not provide detailed information about the secure tunnel or communication errors. For troubleshooting the secure tunnel, the relay.log file is more appropriate.

Key Reference from SailPoint Documentation:

Log File Purposes: The vs_agent.log does not capture information about secure tunnel communication issues. Instead, the relay.log is the correct log file for such issues.

Reveal Solution Next Question

QUESTION: 21

Is this statement correct about identityNow components?

Solution: Password interception is available for the Active Directory source.

Yes
No

Answer(s): A

Explanation:

Yes, password interception is available for the Active Directory (AD) source in SailPoint IdentityNow. Password interception allows IdentityNow to capture password changes made on the AD source so that it can synchronize the new passwords across other connected systems and applications. This feature ensures password consistency and compliance across the organization's identity infrastructure.

Key Reference from SailPoint Documentation:

Password Interceptor for AD: SailPoint supports password interception for Active Directory, enabling the platform to capture and synchronize password changes from AD to other systems in real time.

Reveal Solution Next Question

QUESTION: 22

When an engineer goes to Global > System Settings and clicks on System Notifications, the following page opens:

What email notifications are enabled if the engineer selects Sources?

Solution: A notification is immediately sent after successful

Yes
No

Answer(s): B

Explanation:

In SailPoint IdentityNow, email notifications related to source events (such as successful connections or other operational states) are not automatically sent immediately after a successful source connection. The system focuses on error conditions or alerts based on source status changes or failures.
While successful source operations may be logged, notifications are not configured by default to trigger upon every successful action.

Key Reference from SailPoint Documentation:

Source Event Notifications: SailPoint's notifications for source-related events primarily focus on error handling rather than successful operations, which are generally logged for reference but do not trigger immediate notifications.

Reveal Solution Next Question

QUESTION: 23

When an engineer goes to Global > System Settings and clicks on System Notifications, the following page opens:

What email notifications are enabled if the engineer selects Sources?

Solution: A notification is sent when a source has been in an error state for fifteen minutes.

Yes
No

Answer(s): A

Explanation:

Yes, SailPoint IdentityNow sends a notification if a source has been in an error state for a sustained period, typically after fifteen minutes. This type of alert helps administrators to be aware of prolonged connection or operational issues with a source, so they can take corrective action promptly. The notification system is designed to escalate issues that may impact synchronization, provisioning, or access-related processes.

Key Reference from SailPoint Documentation:

Error State Notifications: SailPoint IdentityNow sends alerts for sources in error states, including when the error persists for a predefined period such as 15 minutes, helping administrators to respond to ongoing issues.

Reveal Solution Next Question

QUESTION: 24

Exhibit.

Solution: An engineer has one small production data center with an Active Directory, a database server, and two cloud applications to which they need to connect Where would the virtual appliances (VAs) reside In this scenario?

Solution: B

Yes
No

Answer(s): B

Explanation:

In this scenario, the Virtual Appliances (VAs) should not reside in the DMZ (B), which is typically used for hosting services that need to be exposed to both internal and external networks, like web servers or email gateways. However, VAs require more direct and secure access to internal resources like Active Directory and databases. The VA needs to reside where it has secure and reliable connectivity to internal resources like Active Directory and database servers, which would be in the internal network.

Key Reference from SailPoint Documentation:

VA Placement Guidance: Virtual Appliances are placed within the internal network, where they can securely connect to Active Directory, databases, and other internal applications for synchronization and provisioning tasks.

Reveal Solution Next Question

SailPoint IdentityNow-Engineer Exam (page: 3) SailPoint Certified IdentityNow Engineer Updated on: 25-Dec-2025

QUESTION: 17

Explanation:

QUESTION: 18

Explanation:

QUESTION: 19

Explanation:

QUESTION: 20

Explanation:

QUESTION: 21

Explanation:

QUESTION: 22

Explanation:

QUESTION: 23

Explanation:

QUESTION: 24

Explanation:

SailPoint IdentityNow-Engineer Exam (page: 3)
SailPoint Certified IdentityNow Engineer
Updated on: 25-Dec-2025