SailPoint Identity Security Engineer Exam 2026: Format, Domains, Checklist

The SailPoint Certified Identity Security Engineer exam is up to 73 DOMC questions in up to 120 minutes, online and proctored, for $400 on Identity University. It covers ten domains and 70 objectives. You normally get Pass or Fail and a percentage per domain (the handbook reserves the right to class a result as indeterminate, neither pass nor fail); SailPoint publishes no pass mark, and the exam can end early once your result is decided. The enrollment includes two attempts. This guide goes through the blueprint domain by domain, with a checklist to tick off and a free question in the DOMC format. ProSyllabus is an independent study site, not affiliated with SailPoint. Every rule and price here is quoted or summarised from SailPoint’s own pages, read on 18 October 2026.

Identity Security Engineer prep guide and Identity University exam page, read 18 October 2026.

Prices in rupees and pounds, the retake arithmetic and the rest of SailPoint’s line-up are in our SailPoint certification path and cost guide; every SailPoint exam side by side is on the SailPoint certification hub.

SailPoint’s format page: “Instead of showing all the answer options at once, a series of options are randomly presented one at a time. For each option, the test taker chooses YES or NO”, and “To get the full question right, the candidate must correctly identify which options in the series are correct and which are incorrect.” The number of options you see varies. Three things follow for study, and they are our reading, not SailPoint’s advice: you cannot rule options out by comparing them, so you need to know whether each statement is true on its own; a half-remembered fact is more dangerous than in ordinary multiple choice, because a confident Yes to a near-miss costs you the question; and with no going back, time spent second-guessing is wasted. SailPoint recommends trying a DOMC test before the exam and links two Caveon samples from its format page.

Eight objectives about building identities: ordering the steps of an identity model from an HR source, how many identity profiles a mix of employees and contractors needs and in what priority, which attributes to map, lifecycle states for joiners and leavers, manager correlation and mapping rules into attributes. Most are scenarios, so read the identity profile and lifecycle state pages until you can design one, not just define it.

Nine objectives, many of them “predict the outcome” or “troubleshoot” items: what a provisioning transaction does given current access, accounts on a source with multiple accounts, provisioning policies and their types, attribute sync, and how role assignment types change provisioning and de-provisioning. Be clear on the building blocks: entitlements, access profiles and roles, and what each can contain.

Only three objectives: testing access management, reminders and escalation for requests, and when segments apply. Segments control which identities can see and request which access; know the use cases rather than the screens.

The largest domain, twelve objectives, and in our view the one that most needs study if you have worked only in the cloud console. It asks what the VA does, where to deploy it on premises, how to set it up, high-availability and disaster-recovery patterns, its networking options, its log files, common commands, the keys it holds, and whether a given piece of software may be installed on it. Read SailPoint’s VA documentation end to end; several objectives ask you to diagnose a problem from a scenario.

Seven objectives: service desk integrations, Active Directory and JDBC connection options, connector types, the flow of an aggregation, connectivity errors, and controlling what data reaches the cloud and where it is stored. Know what aggregation reads, what correlation does with what it reads, and what changes nothing on the source.

Questions on every domain, in the DOMC format and with every answer explained, are in our Identity Security Engineer practice exam.

Seven objectives on identity basics: IGA, compliance, authentication versus authorization, federation, authentication methods, the advantages of a microservice architecture and using REST APIs. This is the domain where general IAM knowledge carries furthest.

Ten objectives on the platform around the identity model: the API gateway and how to authenticate to it, identity search criteria, matching authentication methods, email configuration, monitoring, ordering workflow triggers and steps, granting the right admin access for a task, and where to find activity records. The developer documentation (authentication, search, workflows) is the reading list.

Five objectives: preparing for certification campaigns, choosing the campaign type for a requirement, approver options for access requests, separation of duties and data problems during campaigns. Know the campaign types and who reviews what in each.

Five objectives: encryption at rest and in transit, the platform’s components and redundancy, communication features for a client scenario, valid URLs and multi-tenant processing.

Four objectives: which transforms solve a data scenario, which rules and customizations exist, rule syntax, and when to choose a rule over a transform. Start from the difference between the two.

Because the exam ends early and publishes no pass mark, the score report is your only feedback, and you see it after spending an attempt. Our Identity Security Engineer practice exam gives you two full 73-question mocks in the DOMC format with a 120-minute clock and a score for each of the ten domains, so you can find a weak domain before the real exam does. The 75% readiness line we use is our own estimate, not SailPoint’s.

SailPoint’s guide: “The percentage displayed is the number of questions you answered correctly in that exam section.” If you are retaking, it says to “use this score report to guide you on which domains and objectives to focus on.” You can print or email it. The handbook gives each enrollment one free retake within 364 days of the original enrollment; after the second attempt you buy the exam again.