SailPoint • IdentityIQ Engineer • On-premise IdentityIQ C E R T I F I C A T I O N G U I D E SailPoint IdentityIQ Engineer Certification Guide Syllabus, sample questions and a study plan for the on-premise IdentityIQ engineer exam Inside: all fifty published objectives under the seven blueprint sections, with a count chart standing in for the percentages SailPoint does not publish; why this is the on-premise exam and not the cloud one, and how it differs from the IdentityIQ Associate; what "up to 66 questions", Pass/Fail and two attempts mean once you know the exam can end early; a five-step route to exam day; and ten sample questions with an answer key. UP TO 66 QUESTIONS 90 MIN SEAT TIME PASS / FAIL SCORING $400 EXAM FEE 2 ATTEMPTS INCLUDED Prepared by CertFun • www.certfun.com www.certfun.com SailPoint IdentityIQ Engineer SailPoint Certified IdentityIQ Engineer 1 CERTIFICATION GUIDE Contents Click any line to jump straight to that section. The same seven entries appear in your PDF reader’s bookmark pane. SECTION 01 Exam Overview 2 SECTION 02 The On-Premise Exam, Not the Cloud One 4 SECTION 03 The Seven Sections, Objective by Objective 5 SECTION 04 What the Credential Is Worth 7 SECTION 05 A Five-Step Route to Exam Day 8 SECTION 06 IdentityIQ Engineer Sample Questions 9 SECTION 07 Where to Go Next 13 www.certfun.com SailPoint IdentityIQ Engineer SailPoint Certified IdentityIQ Engineer 2 SECTION 01 Exam Overview The SailPoint Certified IdentityIQ Engineer is the engineering certification for IdentityIQ - SailPoint’s on-premise identity governance product - and it is the senior of the two IdentityIQ certifications SailPoint offers. SailPoint’s own prep guide describes the candidate as someone who will "install, deploy and configure IdentityIQ" in customers’ non-production environments and sandboxes, with moderate knowledge of XML and Java/BeanShell and of the operating systems, databases and application servers IdentityIQ runs on. The facts below come from the official Identity University exam page, SailPoint’s IdentityIQ Engineer Exam Prep Guide and CertFun’s IdentityIQ Engineer exam syllabus. Certification SailPoint Certified IdentityIQ Engineer Exam code None numeric. SailPoint and CertFun both identify the exam by its role name, IdentityIQ Engineer Awarding body SailPoint Technologies, through Identity University Product in scope IdentityIQ - SailPoint’s on-premise product, not Identity Security Cloud Level Role-based engineer certification. The exam page recommends a minimum of one year of hands-on experience; the prep guide puts it at approximately one to three years of implementation experience Number of questions Up to 66. The exam ends as soon as you have answered enough questions correctly or incorrectly, so not every question is necessarily shown Seat time Up to 90 minutes, completed in one sitting Passing score Reported as Pass / Fail. No percentage is published; the score report shows the percentage you answered correctly in each section Question format Discrete Option Multiple Choice (DOMC): options appear one at a time, each judged Yes or No. No going back, no flagging for review Exam fee $400 (USD) Delivery Online and proctored. Purchased on the Identity University exam page; after registering you have 364 days to schedule and take it Attempts The enrolment includes two attempts. Pass the first and the status reads "Passed"; fail it and the status reads "Not Complete" until you use the second, after which it reads "Passed" or "Not Passed" Prerequisites None published. The experience figures are recommendations, not gates. SailPoint recommends completing the Identity Security Engineer (IdentityIQ) training path first www.certfun.com SailPoint IdentityIQ Engineer SailPoint Certified IdentityIQ Engineer 3 Objectives Fifty published objectives under seven blueprint sections. No percentage weightings are published Validity The prep guide says the certification is valid for two years and is awarded as a Credly digital badge within 24 to 48 hours of passing. SailPoint’s recertification programme renews it through training courses, projects and events Where those numbers come from, stated plainly. The question count and the seat time - up to 66 questions, up to 90 minutes - are SailPoint’s own figures from the prep guide, and CertFun’s syllabus page carries the same two. The fee, the 364-day window, the two attempts and the status wording are on the exam page itself. The two sources disagree on only one thing, and mildly: the exam page recommends one year of hands-on experience, the prep guide one to three years of implementation experience. Both are recommendations; neither is checked at purchase. Four lines in that table change how you should prepare. The first is "up to 66" . The prep guide says the exam "will automatically end once you have answered enough questions correctly or incorrectly", which means a strong candidate may finish well inside the 90 minutes and a weak one may be stopped before seeing the whole paper. There is no coasting through the easy questions at the end to recover: every item counts towards a threshold you cannot see. The second is Pass / Fail . No percentage is published, so the usual tactic of working out how many you can afford to lose does not apply. What you do get is a score report after the exam showing the percentage correct in each of the seven sections - useful for a retake, useless for planning the first attempt. The honest planning assumption is that you need to be comfortable across all seven sections rather than strong in four and hopeful in three. The third is the 364-day window and the two included attempts . Registering does not book a seat; it opens a year in which you can schedule one. Two attempts come with the enrolment, which is unusually generous - most vendors sell the retake separately - but the second attempt lives inside the same window, not in a fresh one. The status wording is worth recognising in advance so it does not alarm you: after a failed first attempt SailPoint shows "Not Complete" , not "Failed", because the enrolment is not finished until the second attempt is used. And the questions do not look like ordinary multiple choice. The prep guide describes the Discrete Option Multiple Choice (DOMC) format in SailPoint’s own words: you read a prompt, click "Show me an option", and a single option appears; you click Yes if it is correct and No if it is not, and you cannot change that answer afterwards. More options may follow, one at a time, and how many you see "will vary from one question to the next". As Caveon, the company that created DOMC, explains, the practical consequence is that you cannot solve an item by elimination - by setting four options side by side and discarding the weakest. You judge each statement on its own, often without having seen the others. Keep that in mind when you work the sample questions in Section 06, which are printed in the conventional four-option layout. www.certfun.com SailPoint IdentityIQ Engineer SailPoint Certified IdentityIQ Engineer 4 SECTION 02 The On-Premise Exam, Not the Cloud One SailPoint sells four professional certifications, and two of them are called some version of "Engineer". Candidates book the wrong one often enough that it is worth thirty seconds of your time. The split is by product first and by depth second: Certification Product Fee Experience recommended Identity Security Administrator Identity Security Cloud $400 6 months hands-on Identity Security Engineer Identity Security Cloud $400 1 year hands-on IdentityIQ Associate IdentityIQ (on-premise) $300 1 year hands-on IdentityIQ Engineer IdentityIQ (on-premise) $400 1 year hands-on This guide is about the last row. The fees and the experience lines are from SailPoint’s certification programme page. If your work is in a tenant you reach through a browser, with virtual appliances bridging out to the systems you govern, you want an Identity Security Cloud exam instead, and CertFun’s SailPoint certification index carries the syllabus for each of them. If your work is in an installation you deployed yourself - a WAR you build, BeanShell rules you write, a database you can connect to, log4j you can turn up - this is your exam. Associate or Engineer? The two IdentityIQ certifications are not two levels of the same test. SailPoint’s exam page describes the Associate as the "final exam" for the IdentityIQ Introduction and IdentityIQ Essentials courses - foundational concepts, applications, identity and access modelling, governance, requests and provisioning - and CertFun’s IdentityIQ Associate syllabus lists it at 43 questions in 90 minutes for $300. The Engineer exam assumes all of that and then asks about the things only an implementer touches: installation and patching, rule libraries and workflow steps, connector rule types, log4j and the debug pages. If you have never written a rule or read a task result to find out why an aggregation stopped, the Associate is the honest starting point. If you have, the Associate is optional and the Engineer is the credential partners and employers actually ask for. Where the official prep guide lives now. SailPoint has retired its legacy Compass community and moved its knowledge articles to a new home, and the prep-guide link on the official exam page now lands on the IdentityIQ Engineer Exam Prep Guide in that new knowledge base, open without a sign-in. It is the single most important document for this exam: it carries the full blueprint reproduced in Section 03, the DOMC rules, and the instruction to look up every blueprint term on documentation.sailpoint.com. Its one stale line is a pointer to a "Compass page" about DOMC, which is the retired community; Caveon’s own description, linked in Section 01, covers the same ground. One more distinction, because it costs people money. SailPoint runs knowledge credentials alongside its certifications - Identity Security Leader, Identity Security Professional and Identity Security Expert. Those are unlocked by completing training and are a different thing from what you are reading about here: on its certification programme page SailPoint describes certifications as demonstrating "advanced, hands-on expertise through a rigorous, proctored exam", and the credentials as a way to build and www.certfun.com SailPoint IdentityIQ Engineer SailPoint Certified IdentityIQ Engineer 5 validate capability. The Identity Security Engineer (IdentityIQ) training path is what SailPoint recommends you complete before sitting this exam, and it says so on its face: "This path prepares you for the SailPoint Certified IdentityIQ Engineer exam." Earning the badge at the end of the path is not the same as holding the certification. SECTION 03 The Seven Sections, Objective by Objective SailPoint’s exam page names seven topic areas in prose; the prep guide expands the same seven into a numbered blueprint of 50 objectives , and CertFun’s syllabus page reproduces it word for word. All fifty are below in SailPoint’s own wording. They are the only blueprint this exam has, and the prep guide’s advice is to look up every term in them on SailPoint’s product documentation. There are no percentage weightings. SailPoint publishes no section percentages and no per-section question counts for this exam, so the chart below does not show any. What it shows is how many of the 50 published objectives sit under each section - a proxy for emphasis, and an honest one only as far as it goes. A section with ten objectives is not guaranteed to carry ten questions’ worth of the paper. It is, however, the only ranking anybody can derive from what SailPoint has actually published - and since the score report is broken down by these same seven sections, they are the units you will be judged in. IdentityIQ Installation, build, and deployment 7 of 50 IdentityIQ Lifecycle Manager 7 of 50 IdentityIQ Identity Governance 7 of 50 IdentityIQ Development 10 of 50 IdentityIQ Application Onboarding 6 of 50 IdentityIQ Debugging and Troubleshooting 6 of 50 IdentityIQ Data and Access Modeling 7 of 50 Published objectives per section, in blueprint order. A proxy for weighting, not a weighting. The shape of that chart is flatter than most exams, and that is the first thing to notice. Five of the seven sections carry six or seven objectives each; only IdentityIQ Development stands out, with ten. Development is where the exam stops asking what IdentityIQ does and starts asking what you have built in it: rule libraries and their input and output arguments, workflow variables and transitions, the steps that generate work items, sub-workflows, the SailPoint API objects you reach for from BeanShell, email templates, branding and localisation. If your experience is mostly configuration through the user interface, this is the section that will find you out. The rest is the implementer’s working week in order. Installation, build and deployment (seven) covers the infrastructure, the install steps, patches and upgrades, and two things people forget are configuration - end-user access and the email server. Lifecycle Manager (seven) and Identity Governance (seven) are the governance core: provisioning policies, LCM workflows, lifecycle events, QuickLinks, batch requests on one side, campaigns, policies, reporting, analytics and auditing on the other. Application Onboarding (six) and Debugging and Troubleshooting (six) are the smallest, but the debugging section is the one most worth rehearsing by hand: log4j, Syslog, the console, the debug pages, email www.certfun.com SailPoint IdentityIQ Engineer SailPoint Certified IdentityIQ Engineer 6 redirection and the Administrator Console are six different places to look, and the sample questions in Section 06 show the exam likes to ask which one answers a given question. Data and Access Modeling (seven) closes the list with roles, attribute mappings, extended attributes and the object model itself. IdentityIQ Installation, build, and deployment (7 objectives) • Understand the different infrastructure components of IdentityIQ deployments • Demonstrate knowledge of the IdentityIQ installation steps and procedures • Demonstrate knowledge of creating extended attributes • Understand ongoing build and deployment of IdentityIQ • Understand the process of installing patches and upgrades • Understand the configuration of end user access • Understand the configuration of email server settings IdentityIQ Lifecycle Manager (7 objectives) • Know how to configure Lifecycle Manager • Understand Identity provisioning policies • Configure LCM workflows • Configure lifecycle events and their associated workflows • Create and manage QuickLinks and QuickLink populations • Know how to configure and use Batch Requests • Leverage rapid setup in lifecycle events and Identity operations IdentityIQ Identity Governance (7 objectives) • Configure and schedule Certification campaigns • Understand the purpose of common certification rules • Configure and leverage policies • Understand different responses to policy violations • Execute and leverage reporting • Leverage Advanced Analytics • Configure and utilize auditing IdentityIQ Development (10 objectives) • Understand the purpose and use of rule libraries • Understand and leverage rule input/output arguments • Use workflow variables, transitions, and step conditions • Understand workflow steps that generate work items • Know the different workflow step usages • Understand how sub-workflows can be leveraged • Know the common SailPoint API objects and methods, and how to leverage them • Know how to customize and use email templates • Know which elements of the SailPoint UI can be branded and how to change them www.certfun.com SailPoint IdentityIQ Engineer SailPoint Certified IdentityIQ Engineer 7 • Perform localization in the SailPoint UI for common customer use cases IdentityIQ Application Onboarding (6 objectives) • Configure application definitions • Configure common connector settings • Configure rapid set up aggregation settings • Know how to schedule various tasks to achieve desired data loading and processing outcomes • Understand common application rule types • Understand common connector rule types IdentityIQ Debugging and Troubleshooting (6 objectives) • Configure and leverage log4j • Configure and leverage Syslog • Leverage IdentityIQ console for debugging • Leverage the debug pages for debugging • Leverage email redirection for debugging • Leverage the Administrator Console for debugging IdentityIQ Data and Access Modeling (7 objectives) • Understand default role models/types • Configure roles and role options • Configure Identity attribute mappings • Know which common IdentityIQ objects can have extended attributes • Know the common IdentityIQ data objects and what they represent • Understand the relationship between common data object models • Understand the difference between different group types Read those fifty statements once with a pen and mark every one you could not walk a colleague through without opening the product. That marked list, and not the section names, is your study plan. SECTION 04 What the Credential Is Worth Identity governance sits in an awkward, well-paid corner of security: it is unglamorous, it is audited, and it is very hard to staff. SailPoint’s prep guide says who this exam is for in one line: the audience "typically includes IdentityIQ partner staff and SailPoint employees, such as implementation engineers and IAM developers", and it is "also appropriate for customer employees who develop their own implementation". The training path page names the same people - implementation engineers, developers, solution architects and security engineers. That is a consultant’s job description as much as an employee’s, which is the first thing to understand about what this credential is for: a large share of IdentityIQ implementation work is done by partners, and partners have to demonstrate certified staff. On pay, here is what can actually be sourced, and what cannot. There is no published salary figure for holders of this specific certification - not from SailPoint, not from any survey this guide could open - www.certfun.com SailPoint IdentityIQ Engineer SailPoint Certified IdentityIQ Engineer 8 and none is invented here. The nearest defensible proxy is the role. Payscale’s Identity and Access Management (IAM) Engineer page reports an average base salary of $120,323 in the United States, with the tenth-to-ninetieth percentile band running from about $79,000 to $170,000 , drawn from 82 salary profiles and last updated on 1 June 2026. Read that as the market rate for the role in the US, not as a number the certificate confers. One trap in reading that page, since it is easy to fall into: Payscale also reports that an early-career IAM engineer with one to four years of experience earns an average total compensation of $110,406. That is a different measure from the $120,323 base figure - it includes bonus and overtime - so the gap between the two is not a progression and should not be read as one. The more reliable argument for sitting this exam is not the salary table, it is scarcity of the specific skill. IdentityIQ installations are long-lived, heavily customised, and frequently inherited from whoever built them years ago. Every one of them needs somebody who can read the rule that stopped firing, patch the server without breaking the custom workflow, and prove to an auditor who approved what. The fifty objectives in Section 03 are, almost exactly, the brief for that person - which is why working through them has value whether or not you ever book the exam. The two-year validity the prep guide gives the certification is also worth knowing before you plan: this is a credential you maintain, not one you file. What you are actually signing up for A proctored exam SailPoint describes as testing advanced, hands-on expertise One to three years of implementation experience recommended - not a gate Seven sections, fifty objectives, no percentage weightings published Pass / Fail, and the exam can end early once a hidden threshold is reached SECTION 05 A Five-Step Route to Exam Day 1 Confirm it is the on-premise exam you want IdentityIQ, not Identity Security Cloud. Engineer, not Associate, if you build things. 2 Complete the training path SailPoint recommends Onboarding, advanced provisioning, workflows and rules - the path names this exam. 3 Work the fifty objectives against your own installation Mark every statement you cannot demonstrate. Start with Development and Debugging. 4 Rehearse scenario questions one option at a time About 82 seconds a question if all 66 appear. Judge each option alone - DOMC. 5 Register, then schedule inside the 364-day window Two attempts are included. Book the first when the marked list is empty. Step two is the step people skip, and the people who have passed say not to. In the SailPoint Developer Community thread on preparing for this exam, opened in October 2025, one candidate who passed www.certfun.com SailPoint IdentityIQ Engineer SailPoint Certified IdentityIQ Engineer 9 reports doing so "after completing the university.sailpoint.com training videos" and the exercises after each topic; another says the best way "is follow the course", because the exam expects answers that come from the documentation and the courses; a third reports that "practical questions are asked instead of theoretical", based on the topics listed in the syllabus. The Identity Security Engineer (IdentityIQ) path is not a prerequisite and nothing stops you buying the exam on day one - but it is written against the same material the blueprint is, and it is the only preparation SailPoint itself endorses. Step three is where the real work is, and it should be done in an installation , not in a notebook. Take the Development objectives first, since they are the largest block: write a rule that uses a rule library, pass it an argument, read what comes back; build a workflow with a step that generates a work item and watch where the item goes. Then take Debugging: turn up log4j for one class, redirect email, open the debug pages and the console and learn what each shows that the others do not. Objectives phrased as "leverage X for debugging" are a promise that the exam will describe a broken thing and ask what you would look at; the only way to rehearse that is to break something yourself. Where a behaviour will not settle from documentation, the Developer Community is where engineers doing this work argue it out. Step four earns its place because of the question style, not the clock arithmetic. Ninety minutes for 66 questions is a little over eighty seconds each, which is not tight in the abstract; it is tight when every third question opens with a paragraph of situation you have to hold in your head while options arrive one at a time. Rehearse against timed sets until reading a scenario and spotting what it is really asking becomes one motion - CertFun’s IdentityIQ Engineer practice exam is built for that, with a full 66-question, 90-minute set and a 33-question mini set in the same timed format. Since scoring is Pass / Fail with no published threshold, use practice results as a map of your weak sections rather than as a score to clear. And rehearse the DOMC habit itself: cover the options, uncover one, decide Yes or No, and only then look at the next. SECTION 06 IdentityIQ Engineer Sample Questions These ten come from CertFun’s IdentityIQ Engineer sample questions page, shown here in shuffled order. All ten are single-answer with four options. They are a fair demonstration of the style the blueprint promises: almost none of them asks for a definition. They ask what a task result pattern means, which record an auditor should be shown, what to check first when an import behaves differently, and why a self-certifying campaign is a governance problem. Because the real exam is DOMC, get more out of them by covering the options and uncovering one at a time: decide Yes or No on each before you see the next, and notice how often an option you would have eliminated by comparison looks plausible when it stands alone. Q1. An engineer has been given credentials and network access for a new application that will be brought under IdentityIQ. Which action comes first? a) Choose the connector for the application and configure its connection settings b) Schedule the recurring account aggregation task c) Map the application's entitlements onto the IT roles through which they will be requested d) Define the correlation configuration that attaches the aggregated accounts to identities www.certfun.com SailPoint IdentityIQ Engineer SailPoint Certified IdentityIQ Engineer 10 Q2. A campaign is configured so that each identity reviews the access on their own accounts, on the grounds that they know best what they use. What is the governance problem with that design? a) The reviewers will not be able to interpret entitlements named after system objects b) The decisions cannot be recorded against the identity, so there is no evidence of the review c) Revocations raised by the identity themselves cannot be remediated automatically d) The access is not attested by anyone independent of the person holding it Q3. A configuration change tested successfully in a lower environment behaves differently after its XML objects were imported into another environment. The import reported no error. What should be established first? a) Whether the change ought to be hand-built in the target, rather than imported at all b) Whether the target environment is running the same IdentityIQ build as the source, since a difference there would account for any change in behavior and has to be settled before the objects themselves are examined c) Whether the objects were exported through the console rather than the user interface, which changes what an export contains d) Which values inside the imported objects are environment-specific and whether they were carried across from the source environment unchanged Q4. An engineer has onboarded a new application and run an account aggregation. Accounts now appear on the correlated identity cubes, but none of the target system's groups are available to model entitlements from. What explains this? a) Groups appear only after an identity refresh promotes them onto the cubes b) Groups are read by a separate group aggregation over the application's group schema c) Account aggregation reads groups as well, so the application's group schema must be defined incorrectly d) Groups are produced in IdentityIQ by role mining once enough accounts exist Q5. A hospital provisions every new clinician's baseline access with no action from the clinician, and separately lets clinicians ask for additional ward systems themselves, with the ward manager approving those. Which pairing of Lifecycle Manager mechanisms fits? a) Both from a lifecycle event, with the extra ward systems chosen inside the event's workflow by the clinician. b) Baseline access from a provisioning policy on each ward system, and additional access from a certification campaign. c) Both from an access request, with the baseline raised automatically on the clinician's behalf at hire. d) Baseline access from a lifecycle event, and additional access from an approved access request. www.certfun.com SailPoint IdentityIQ Engineer SailPoint Certified IdentityIQ Engineer 11 Q6. An auditor asks for evidence of who approved a named access request and when, covering the previous quarter. Which record answers that question? a) The system events the platform wrote over that period, covering its own components' errors and restarts. b) The audit records covering the governance actions taken on the request. c) The application server log for the quarter, filtered to the component that dispatched the approval work item. d) The task results of the identity refreshes that ran during the quarter, read for the approvals they recorded. Q7. An engineer has just deployed IdentityIQ to a rebuilt application server node and initialized it. The login page renders and an administrative account can sign in. What is the strongest next check that the deployment is actually working, rather than merely serving pages? a) Run a small platform task, then read its task result to confirm the application can reach the database and schedule work. b) Confirm the login page loads over the load balancer from outside the data center, which proves the deployed application is reachable by its users. c) Open a certification campaign and confirm reviewers can see their items, since that exercises the widest set of the product's features in one step. d) Check the application server log for stack traces and warnings and, finding none, record the deployment as verified. Q8. An environment runs several IdentityIQ application server nodes against one relational database. After a scheduled aggregation is added, an engineer notices it runs once per cycle rather than once per node, while a configuration change made through the user interface on one node is visible immediately from the others. What best explains both observations? a) Configuration is shared through the database while scheduling is per-node, and the task appears to run once only because the other nodes' runs find nothing to do b) Each node holds its own copy of the configuration and its own scheduler, and the nodes reconcile with each other at the end of every cycle, which is why the change appears everywhere and the task runs once c) Configuration and scheduled work both live in the shared database, and the nodes coordinate there so one node takes each task d) The load balancer pins the scheduler to a single node and replicates configuration changes to the other nodes' caches as they are made www.certfun.com SailPoint IdentityIQ Engineer SailPoint Certified IdentityIQ Engineer 12 Q9. An account aggregation against one application fails. The task result shows the connector connected and read account objects without complaint, then was refused when it attempted to read the group objects. Nothing in IdentityIQ was changed before the run. What does that pattern indicate, and where does the fix belong? a) The group schema no longer matches what the target system exposes, so the schema has to be re-discovered and the entitlement mapping rebuilt from the objects it returns b) The stored credential has expired, so the connection settings have to be re-entered and the aggregation repeated before anything can be concluded from this result c) The account IdentityIQ connects with is authenticated but not authorized on the group objects, so the refusal goes to the target system's administrator d) The connector type chosen for this application is the wrong one and should be replaced Q10. A team is onboarding a payroll application. Its owners have offered to enable single sign-on for IdentityIQ's own users and have asked whether anything else is needed. What does IdentityIQ actually require from them? a) Confirmation that the payroll system supports more than one identity provider b) A list of the users who should hold access to it c) An account on the payroll system whose privileges are sufficient for the connector to read the accounts and groups it must aggregate d) A federation trust between the payroll system and the identity provider IdentityIQ uses Answer key Q1 Q2 Q3 Q4 Q5 Q6 Q7 Q8 Q9 Q10 a d d b d b a c c c Read the pattern rather than the answers. Three habits decide most of these. First, read the evidence you were given before reaching for a fix - a connector that authenticated and then was refused is telling you about authorisation on the far side, not about its own configuration. Second, know which record answers which question: audit records for governance decisions, task results for what a task did, the application server log for the platform itself. Third, prefer the answer that respects how IdentityIQ actually works - groups come from a group aggregation, nodes coordinate through the shared database, the connector comes before the schedule - over the answer that assumes the product will sort it out. The distractors are written to sound like the optimistic reading, and the correct option is usually the one that names a boundary. www.certfun.com SailPoint IdentityIQ Engineer SailPoint Certified IdentityIQ Engineer 13 SECTION 07 Where to Go Next Start on the official Identity University exam page, because it is where you buy the exam and where the enrolment terms - the fee, the 364-day window, the two attempts - are stated by SailPoint rather than summarised by anybody else. From there follow its link to the IdentityIQ Engineer Exam Prep Guide and read it end to end; it is short, it is SailPoint’s own, and it is where the DOMC rules and the early-finish behaviour are spelled out. Read the certification and credentialing programme page next so you know which of SailPoint’s four certifications and three knowledge credentials you are actually aiming at, and enrol in the Identity Security Engineer (IdentityIQ) training path if you have not already. Keep CertFun’s IdentityIQ Engineer syllabus page open while you work, since it is the one place all fifty objectives sit on a single screen, and use the sample questions as a style calibration before you commit to a booking. When a behaviour will not settle from reading, ask in the SailPoint Developer Community, where the people who have sat this exam answer. Quick reference Buy the exam and read the enrolment terms - university.sailpoint.com The official prep guide and blueprint - community.sailpoint.com/knowledge All fifty objectives on one screen - certfun.com/sailpoint Engineers who have sat it - developer.sailpoint.com/discuss Before you book — the guide in one card Questions Up to 66; the exam can end early Seat time Up to 90 min, one sitting Scoring Pass / Fail, no score published Pace needed About 82 seconds each Exam fee $400 (USD) Prerequisites None; 1-3 years recommended Product IdentityIQ (on-premise), not ISC Delivery Online and proctored Objectives 50 published, under 7 sections Weightings None published Question format DOMC - options shown one at a time Prep guide community.sailpoint.com Biggest section IdentityIQ Development, 10 of 50 Smallest Onboarding, Debugging: 6 After registering 364 days to schedule and sit it Attempts Two; valid 2 years Good luck - and as you revise, keep one question in front of every scenario you meet: what is the evidence here actually telling me, and which record would prove it? The IdentityIQ Engineer exam is not testing whether you can recite what a lifecycle event is. It is testing whether, handed an installation that is behaving oddly, you would know where to look first and what the answer would prove.