- Home
- Workday Certification
- Workday-Pro-Integrations Exam
- Workday.Workday-Pro-Integrations.v2026-06-16.q85 Dumps
Question 56
You have successfully configured an ISU and an ISSG with the correct security policies and have assigned them to an EIB.
What task do you need to run before you can launch the EIB?
Context of the Scenario
You've completed the following:
Created an ISU and configured it (e.g., with "Do Not Allow UI Sessions" checked for web service-only access).
Set up an ISSG and assigned the ISU to it.
Defined the necessary security policies (e.g., domain security policies with "Get" and/or "Put" access) for the ISSG to support the EIB's operations.
Assigned the ISU and ISSG to the EIB integration system.
The question now is what must be done before launching the EIB to ensure it functions as intended. In Workday, changes to security policies-such as adding permissions to an ISSG-do not take effect immediately. They remain in a "pending" state until activated, which is a key aspect of Workday's security administration process.
Evaluation of Options
Option A: Activate Pending Security Policy ChangesIn Workday, whenever you modify security policies (e.g., granting domain permissions like "Integration Build" or "Custom Report Creation" to an ISSG), these changes are staged as "pending." To apply them to the tenant and make them active, you must run the "Activate Pending Security Policy Changes" task. This task reviews all pending security updates, allows you to add a comment for audit purposes, and, upon confirmation, activates the changes. Without this step, the ISSG will not have the effective permissions required for the EIB to access data or execute its operations, potentially causing the launch to fail due to insufficient authorization. This aligns directly with the scenario, as security policies have been configured and assigned, but not yet activated.
Option B: View Security for Securable ItemThe "View Security for Securable Item" report is a diagnostic tool in Workday that allows you to inspect the security configuration for a specific object (e.g., a web service operation, report, or task). It shows which security groups have access and what permissions (e.g., "Get," "Put," "View," "Modify") are granted. While this is useful for verifying that the ISSG has the correct policies assigned, it is a passive report-it does not modify or activate anything. Running this task would not enable the EIB to launch, as it doesn't affect the pending security changes. Thus, it's not the required step before launching the EIB.
Option C: Assign the ISSG to only one security policyThis option suggests limiting the ISSG to a single security policy, but this is neither a standard Workday requirement nor a task that exists as a standalone action. ISSGs can and often do have multiple security policies assigned (e.g., permissions for various domains like "Integration Build," "Custom Report Access," etc.), depending on the integration's needs. Moreover, the question states that the ISSG has already been configured with the "correct security policies" and assigned to the EIB, implying this step is complete. Restricting the ISSG to one policy after the fact would require editing permissions again, triggering more pending changes, and still necessitate activation-making this option illogical and incorrect.
Option D: Maintain Integration Security PoliciesThere is no specific task in Workday called "Maintain Integration Security Policies." This option seems to be a misnomer or a conflation of other tasks, such as "Maintain Domain Permissions for Security Group" (used to assign permissions to an ISSG) or broader security maintenance activities. However, the question indicates that the security policies are already correctly configured and assigned. If this option intended to imply further configuration, it would still result in pending changes requiring activation via Option A. As a standalone action, it does not represent a valid or necessary task to enable the EIB launch.
Why Option A is Correct
The "Activate Pending Security Policy Changes" task is a mandatory step in Workday's security workflow after modifying security policies, such as those assigned to an ISSG for an EIB. Workday's security model uses a pending changes queue to ensure that updates are reviewed and deliberately applied, maintaining control and auditability. Without activating these changes:
The ISSG will lack the effective permissions needed for the EIB to access required domains or perform its operations (e.g., retrieving data from a custom report or delivering a file).
The EIB launch could fail with errors like "Insufficient Privileges" or "Access Denied." Running this task ensures that the security configuration is live, allowing the ISU (via the ISSG) to authenticate and execute the EIB successfully. This is a standard practice in Workday integration setup, as emphasized in the Workday Pro Integrations curriculum.
Practical Steps to Perform Option A
Log into the Workday tenant with a security administrator role.
Search for and select the "Activate Pending Security Policy Changes" task.
Review the list of pending changes (e.g., new permissions added to the ISSG).
Enter a comment (e.g., "Activating security for EIB launch - ISSG permissions").
Check the "Confirm" box and click "OK" to activate the changes.
Once completed, the security policies are live, and the EIB can be launched.
Verification with Workday Documentation
The Workday Pro Integrations Study Guide and related training materials confirm that activating pending security policy changes is a prerequisite after configuring security for integrations. This step ensures that all permissions are in effect, enabling the ISU and ISSG to support the EIB's functionality. Community resources and implementation guides also consistently highlight this task as the final step before launching integrations that rely on updated security settings.
Workday Pro Integrations Study Guide Reference
Section: Integration Security Configuration - Explains the process of assigning security policies to ISSGs and the need to activate changes to operationalize them.
Section: Enterprise Interface Builder (EIB) - Notes that security updates for EIBs must be activated before launching to ensure proper access.
Section: Security Administration - Details the "Activate Pending Security Policy Changes" task as the mechanism to apply pending security modifications across the tenant.
Question 57
Refer to the following scenario to answer the question below.
You have been asked to build an integration using the Core Connector: Worker template and should leverage the Data Initialization Service (DIS). The integration will be used to export a full file (no change detection) for employees only and will include personal data.
What configuration is required to ensure that when outputting phone number only the home phone number is included in the output?
Workday's " Phone Number " field is multi-instance, meaning a worker can have multiple phone types (e.g., Home, Work, Mobile). Let's determine the configuration:
* Requirement:Filter the multi-instance " Phone Number " field to include only the " Home " phone number in the output file. This involves specifying which instance of the phone data to extract.
* Integration Field Attributes:In Core Connectors, Integration Field Attributes allow you to refine how multi-instance fields are handled in the output. For the " Phone Number " field, you can set an attribute like " Phone Type " to " Home " to ensure only home phone numbers are included. This is a field-level configuration that filters instances without requiring a calculated field or override.
* Option Analysis:
* A. Configure an integration map to map the phone type: Incorrect. Integration Maps transform field values (e.g., " United States " to " USA " ), not filter multi-instance data like selecting a specific phone type.
* B. Include the phone type integration field attribute: Correct. This configures the " Phone Number " field to output only instances where the phone type is " Home, " directly meeting the requirement.
* C. Configure the phone type integration attribute: Incorrect. " Integration attribute " refers to integration-level settings (e.g., file format), not field-specific configurations. The correct term is " integration field attribute. "
* D. Configure an integration field override to include phone type: Incorrect. Integration Field Overrides are used to replace a field's value with a calculated field or custom value, not to filter multi-instance data like phone type.
* Implementation:
* Edit the Core Connector: Worker integration.
* Navigate to the Integration Field Attributes section for the " Phone Number " field.
* Set the " Phone Type " attribute to " Home " (or equivalent reference ID for Home phone).
* Test the output file to confirm only home phone numbers are included.
References from Workday Pro Integrations Study Guide:
* Core Connectors & Document Transformation: Section on " Integration Field Attributes " explains filtering multi-instance fields like phone numbers by type.
* Integration System Fundamentals: Notes how Core Connectors handle multi-instance data with field- level attributes.
Question 58
A calculated field used as a field override in a Connector is not appearing in the output. Assuming the field has a value, what could cause this to occur?
Understanding Calculated Fields and Connectors in Workday
Calculated Fields: In Workday, calculated fields are custom fields created using Workday's expression language to derive values based on other fields, conditions, or functions. They are often used in reports, integrations, and business processes to transform or aggregate data. Calculated fields can reference other fields (data sources) and require appropriate security permissions to access those underlying fields.
Field Override in Connectors: In a Core Connector or other integration system, a field override allows you to replace or supplement a default field with a custom value, such as a calculated field. This is configured in the integration's mapping or transformation steps, ensuring the output includes the desired data. However, for the calculated field to appear in the output, it must be accessible, have a valid value, and be properly configured in the integration.
Issue: Calculated Field Not Appearing in Output: If the calculated field has a value but doesn't appear in the Connector's output, the issue likely relates to security, configuration, or access restrictions. The question assumes the field has a value, so we focus on permissions or setup errors rather than data issues.
Evaluating Each Option
Let's assess each option based on Workday's integration and security model:
Option A: Access not provided to calculated field data source.
Analysis: This is partially related but incorrect as the primary cause. Calculated fields often rely on underlying data sources (e.g., worker data, organization data) to compute their values. If access to the data source is restricted, the calculated field might not compute correctly or appear in the output. However, the question specifies the field has a value, implying the data source is accessible. The more specific issue is likely access to the individual fields within the calculated field's expression, not just the broader data source.
Why It Doesn't Fit: While data source access is important, it's too general here. The calculated field's value exists, suggesting the data source is accessible, but the problem lies in finer-grained permissions for the fields used in the calculation.
Option B: Access not provided to all fields in the calculated field.
Analysis: This is correct. Calculated fields in Workday are expressions that reference one or more fields (e.g., Worker_ID + Position_Title). For the calculated field to be used in a Connector's output, the ISU (via its ISSG) must have access to all fields referenced in the calculation. If any field lacks "Get" or "View" permission in the relevant domain (e.g., Worker Data), the calculated field won't appear in the output, even if it has a value. This is a common security issue in integrations, as ISSGs must be configured with domain access for every field involved.
Why It Fits: Workday's security model requires granular permissions. For example, if a calculated field combines Worker_Name and Hire_Date, the ISU needs access to both fields' domains. If Hire_Date is restricted, the calculated field fails to output, even with a value. This aligns with the scenario and is a frequent troubleshooting point in Workday Pro Integrations.
Option C: Access not provided to Connector calculated field web service.
Analysis: This is incorrect. There isn't a specific "Connector calculated field web service" in Workday. Calculated fields are part of the integration's configuration, not a separate web service. The web service operation used by the Connector (e.g., Get_Workers) must have permissions, but this relates to the overall integration, not the calculated field specifically. The issue here is field-level access, not a web service restriction.
Why It Doesn't Fit: This option misinterprets Workday's architecture. Calculated fields are configured within the integration, not as standalone web services, making this irrelevant to the problem.
Option D: Access not provided to all instances of calculated field.
Analysis: This is incorrect. The concept of "instances" typically applies to data records (e.g., all worker records), not calculated fields themselves. Calculated fields are expressions, not data instances, so there's no need for "instance-level" access. The issue is about field-level permissions within the calculated field's expression, not instances of the field. This option misunderstands Workday's security model for calculated fields.
Why It Doesn't Fit: Calculated fields don't have "instances" requiring separate access; they depend on the fields they reference, making this option inaccurate.
Final Verification
The correct answer is Option B, as the calculated field's absence in the output is likely due to the ISU lacking access to all fields referenced in the calculated field's expression. For example, if the calculated field in a Core Connector: Worker Data combines Worker_ID and Department_Name, the ISSG must have "Get" access to both the Worker Data and Organization Data domains. If Department_Name is restricted, the calculated field won't output, even with a value. This is a common security configuration issue in Workday integrations, addressed by reviewing and adjusting ISSG domain permissions.
This aligns with Workday's security model, where granular permissions are required for all data elements, as seen in Questions 26 and 28. The assumption that the field has a value rules out data or configuration errors, focusing on security as the cause.
Supporting Documentation
The reasoning is based on:
Workday Community documentation on calculated fields, security domains, and integration mappings.
Tutorials on configuring Connectors and troubleshooting, such as Workday Advanced Studio Tutorial, highlighting field access issues.
Integration security guides from partners (e.g., NetIQ, Microsoft Learn, Reco.ai) detailing ISSG permissions for fields in calculated expressions.
Community discussions on Reddit and Workday forums on calculated field troubleshooting (r/workday on Reddit).
Question 59
Which components make up the three primary parts of an outbound Enterprise Interface Builder (EIB)?
The Transform section applies one transformation, such as an XSLT transformation, when formatting is required. The Deliver section sends the output to one delivery endpoint, such as SFTP, email, or another supported transport. Multiple data sources or multiple delivery endpoints are not the standard three-part model for a basic outbound EIB. A web service call and sequence generator may be used in some integration scenarios, but they are not the three primary EIB components. Therefore, option A matches the EIB architecture.
Question 60
What attribute(s) can go into the xsl:stylesheet element?
* XSLT Version - This defines the XSLT specification version being used (e.g., version="1.0" or version="2.0").
* Namespaces - XSLT operates within an XML namespace (xmlns:xsl="http://www.w3.org/1999/XSL
/Transform"), which is required to define the transformation rules.
Breakdown of Answer Choices:
* A. XSLT Version & Namespaces # (Correct)
* The <xsl:stylesheet> element requires both the XSLT version and the namespace declaration for proper execution.
* Example:
xml
CopyEdit
<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
* B. XSLT Version & Encoding # (Incorrect)
* Encoding (encoding="UTF-8") is a property of the XML declaration (<?xml version="1.0" encoding="UTF-8"?>), not an attribute of <xsl:stylesheet>.
* C. XML Version & Namespaces # (Incorrect)
* XML version (<?xml version="1.0"?>) is part of the XML prolog, not an attribute of <xsl:
stylesheet>.
* D. Namespaces & Encoding # (Incorrect)
* Encoding is not an attribute of <xsl:stylesheet>.
Final Correct Syntax:
<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> This ensures that the XSLT file is processed correctly.
Workday Pro Integrations Study Guide References:
* ReportWriterTraining.pdf - Chapter 9: Working With XML and XSLT covers XSLT basics, including the required attributes for <xsl:stylesheet> .
* Workday_Advanced_Business_Process_part_2.pdf - Chapter 5: Web Services and Integrations details how Workday uses XSLT for transformations .
Download PDF File
Enter your email address to download Workday.Workday-Pro-Integrations.v2026-06-16.q85 Dumps
