Saviynt SAVIGA-C01 Saviynt Certified IGA Professional Exam (L100) Online Training

Question #11

Which of the following must be linked to the Active Directory Security System to automatically reconcile Accounts from AD into Saviynt?

A . AD Control
B . AD Rule
C . AD Connection
D . AD Role

Reveal Solution Hide Solution

Question #12

Which of the following Connections is used for integrating Saviynt with a ticketing system?

A . Service Ticket Connection
B . Ticket Connection
C . Service Desk Connection
D . Provisioning Connection

Reveal Solution Hide Solution

Question #13

Which of the following options is part of the Saviynt Identity Repository?

A . Users, Identity Rules, Workflows, Roles
B . Users, User Groups, Workflows, SAV Roles
C . Users, Accounts, Entitlements, Roles
D . Users, Accounts, Entitlements, Workflows

Reveal Solution Hide Solution

Question #14

Marty, an Administrator, reconciled Oracle Accounts into Saviynt. During the import, the incoming accounts were required to be mapped to the existing users in Saviynt.

Which of the following Rules should be used to successfully associate Accounts to the correct users?

A . Account to User Rule
B . Account Name Rule
C . Technical Rule
D . User Account Correlation Rule

Reveal Solution Hide Solution

Question #15

If you want an application to be available for requesting access (self or other), which of the following should be configured?

A . Proposed Accounts Workflow
B . Access Remove Workflow
C . Access Add Workflow
D . Emergency Access ID Request Workflow

Reveal Solution Hide Solution

Correct Answer: C
C

Explanation:

To make an application available for access requests (either self-service or requests for others), the Access Add Workflow needs to be configured within Saviynt. This workflow defines the process that governs how access to the application is granted. Here’s a breakdown with Saviynt IGA references: Saviynt’s Access Request System (ARS): This is the module within Saviynt that handles access requests. The ARS relies on defined workflows to manage the approval and provisioning process. Access Add Workflow: This specific type of workflow within Saviynt’s ARS is triggered when a user requests access to an application or entitlement. It dictates the steps involved, such as: Requester Details: Capturing information about who is requesting access.

Application/Entitlement Selection: The user selects the application (and potentially specific roles or entitlements within that application) for which they are requesting access.

Approval Routing: Defining the approval chain (e.g., manager approval, application owner approval, etc.). This is configured within the workflow using various approval activities.

Provisioning: Upon approval, the workflow can trigger automated provisioning of access to the target system (if connected integration is set up).

Saviynt’s Application Onboarding: For an application to be available in the ARS, it needs to be onboarded into Saviynt. During this process, you would typically define the relevant entitlements (access rights) associated with the application.

Workflow Configuration in Saviynt: Saviynt’s admin interface allows administrators to create and customize workflows using a visual designer. This includes setting up conditions, defining approval steps, and configuring actions to be taken at each stage of the workflow.

Other options:

Proposed Accounts Workflow: This is less common, often used to suggest potential accounts during the request or account creation process. It’s not the primary mechanism for making an application available for access requests.

Access Remove Workflow: This workflow is used when access needs to be revoked, not granted. Emergency Access ID Request Workflow: This workflow is specific to requesting temporary, elevated access in emergency situations. It’s not the workflow for general access requests to applications.

Question #16

Which of the following statuses is applicable for the "Add Access" task type when the task is successfully completed?

A . Provisioned
B . Success
C . Manually Provisioned
D . Active

Reveal Solution Hide Solution

Correct Answer: A
A

Explanation:

When an "Add Access" task is successfully completed in Saviynt, the applicable status is typically "Provisioned." Here’s a detailed explanation with Saviynt references:

Saviynt’s Task Management: Saviynt uses tasks to track the progress of various operations, including access provisioning. These tasks are generated as part of workflows, such as the "Access Add Workflow."

"Add Access" Task Type: This specific task type is created when the access request is approved and the system is ready to grant the requested access to the target application.

Task Statuses in Saviynt: Saviynt uses different statuses to indicate the current state of a task.

Common statuses include:

Pending: The task is waiting to be processed.

In Progress: The task is currently being executed.

Provisioned: This status signifies that the requested access has been successfully granted to the user in the target system.

Failed: The task encountered an error and could not be completed.

Manually Provisioned: The task was completed manually by an administrator, rather than through automated provisioning.

Success: While sometimes used, this status is less specific than "Provisioned" in the context of "Add

Access" tasks, since it does not specify that the action completed was a provisioning action.

Active: Typically applies to accounts or users, not tasks.

Saviynt’s Workflow Engine: The workflow engine in Saviynt updates the task status as it progresses through the defined steps. For connected applications, the workflow engine might directly interact

with the target system’s API to provision the access. Once the provisioning is successful, the status is updated to "Provisioned."

Saviynt’s Audit Trails: Saviynt maintains detailed audit trails, and the task status changes are logged.

This provides a clear record of when access was provisioned for a user.

Other Options:

Success: As mentioned above, this is a general status. While technically correct (the task succeeded), "Provisioned" provides more context.

Manually Provisioned: This status is only applicable if an administrator intervened and manually granted the access outside of the automated workflow.

Active: This status typically pertains to a user or account’s overall status, not specifically to the completion of an "Add Access" task.

Question #17

________ filters the requestable applications under "Request New Access."

A . Access Add Workflow
B . Access Query
C . Provisioning Connection
D . Whom to Request

Reveal Solution Hide Solution

Correct Answer: B
B

Explanation:

The component that filters the requestable applications under "Request New Access" in Saviynt is the Access Query.

Here’s a detailed explanation:

Saviynt’s Access Request System (ARS): As the front end for requesting access, the ARS needs a mechanism to determine which applications (and entitlements) should be displayed to a user as requestable.

Access Query: This is a powerful feature within Saviynt that allows administrators to define specific criteria to control the visibility of applications and entitlements in the ARS. Think of it as a filter that determines what a user can see and request.

How Access Queries Work:

Defined on Applications/Entitlements: Access Queries are configured on individual applications or entitlements within Saviynt.

Based on User Attributes: They use user attributes (e.g., department, location, job title, group memberships) and other criteria (e.g., risk level) to determine if a user should see a particular application or entitlement.

Dynamic Filtering: When a user accesses the "Request New Access" section, Saviynt evaluates the Access Queries associated with each application and entitlement in real-time. Based on the user’s attributes, the system dynamically filters the list, showing only the applications and entitlements that match the query conditions.

Saviynt’s Security Model: Access Queries are a fundamental part of Saviynt’s security model. They ensure that users are only presented with access options that are relevant and appropriate for their role and context, preventing accidental over-provisioning and reducing the attack surface.

Other Options:

Access Add Workflow: While essential for processing access requests, the workflow itself doesn’t filter which applications are initially displayed.

Provisioning Connection: This relates to how Saviynt connects to target systems for automated provisioning. It doesn’t control the initial visibility of applications in the ARS.

Whom to Request: This setting might determine the available approvers, but it doesn’t filter the list of requestable applications.

In essence: Access Queries act as a dynamic filter, leveraging user attributes and defined criteria to determine which applications and entitlements are presented to a user within Saviynt’s "Request New Access" interface, ensuring a personalized and secure access request experience.

Question #18

Which of the following Access Request configurations can be set up as either optional or mandatory, based on business requirements?