Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-ARCHITECT Online Practice Questions and Exam Preparation

Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-ARCHITECT Online Questions & Answers

• Question 131:

  Universal Containers (UC) wants its closed Won opportunities to be synced to a Data Warehouse in near real time. UC has implemented Outbound Message to enable near real- time data sync. UC wants to ensure that communication between Salesforce and Target System is Secure. What Certificate is sent along with the Outbound Message?

  A. The CA-Signed Certificate from the Certificate and Key Management menu.
  B. The default Client Certificate from the Develop--> API Menu.
  C. The default Client Certificate or a Certificate from Certificate and Key Management menu.
  D. The Self-Signed Certificates from the Certificate and Key Management menu.
  B. The default Client Certificate from the Develop--> API Menu.

• Question 132:

  An architect needs to advise the team that manages the identity provider how to differentiate salesforce from other service providers. What SAML SSO setting in salesforce provides this capability?

  A. Entity id
  B. Issuer
  C. Identity provider login URL
  D. SAML identity location
  A. Entity id

• Question 133:

  Universal Containers (UC) wants to integrate a third-party Reward Calculation system with Salesforce to calculate Rewards. Rewards will be calculated on a schedule basis and update back into Salesforce. The integration between Salesforce and the Reward Calculation System needs to be secure. Which are two recommended practices for using OAuth flow in this scenario. choose 2 answers

  A. OAuth Refresh Token FLow
  B. OAuth Username-Password Flow
  C. OAuth SAML Bearer Assertion FLow
  D. OAuth JWT Bearer Token FLow
  C. OAuth SAML Bearer Assertion FLow
  D. OAuth JWT Bearer Token FLow

• Question 134:

  Universal containers(UC) has a customer Community that uses Facebook for authentication. UC would like to ensure that changes in the Facebook profile are reflected on the appropriate customer Community user. How can this requirement be met?

  A. Use the updateuser() method on the registration handler class.
  B. Use SAML just-in-time provisioning between Facebook and Salesforce
  C. Use information in the signed request that is received from Facebook.
  D. Develop a schedule job that calls out to Facebook on a nightly basis.
  A. Use the updateuser() method on the registration handler class.

• Question 135:

  A Salesforce customer is implementing Sales Cloud and a custom pricing application for its call center agents. An Enterprise single sign-on solution is used to authenticate and sign-in users to all applications. The customer has the following requirements:

  1.

  The development team has decided to use a Canvas app to expose the pricing application to agents.

  2.

  Agents should be able to access the Canvas app without needing to log in to the pricing application.

  Which two options should the identity architect consider to provide support for the Canvas app to initiate login for users?

  Choose 2 answers

  A. Select "Enable as a Canvas Personal App" in the connected app settings.
  B. Enable OAuth settings in the connected app with required OAuth scopes for the pricing application.
  C. Configure the Canvas app as a connected app and set Admin-approved users as pre- authorized.
  D. Enable SAML in the connected app and Security Assertion Markup Language (SAML) Initiation Method as Service Provider Initiated.
  C. Configure the Canvas app as a connected app and set Admin-approved users as pre- authorized.
  D. Enable SAML in the connected app and Security Assertion Markup Language (SAML) Initiation Method as Service Provider Initiated.

• Question 136:

  Universal Containers (UC) wants to provide single sign-on (SSO) for a business-to- consumer (B2C) application using Salesforce Identity.

  Which Salesforce license should UC utilize to implement this use case?

  A. Identity Only
  B. Salesforce Platform
  C. External Identity
  D. Partner Community
  C. External Identity

• Question 137:

  Universal Containers (UC) has an existing Salesforce org configured for SP-Initiated SAML SSO with their Idp. A second Salesforce org is being introduced into the environment and the IT team would like to ensure they can use the same Idp for new org. What action should the IT team take while implementing the second org?

  A. Use the same SAML Identity location as the first org.
  B. Use a different Entity ID than the first org.
  C. Use the same request bindings as the first org.
  D. Use the Salesforce Username as the SAML Identity Type.
  B. Use a different Entity ID than the first org.

• Question 138:

  Universal Containers (UC) uses Salesforce as a CRM and identity provider (IdP) for their Sales Team to seamlessly login to intemaJ portals. The IT team at UC is now evaluating Salesforce to act as an IdP for its remaining employees.

  Which Salesforce license is required to fulfill this requirement?

  A. External Identity
  B. Identity Verification
  C. Identity Connect
  D. Identity Only
  D. Identity Only

• Question 139:

  Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the OAuth 2.0 user-agent flow (this flow uses the OAuth 2.0 implicit grant type).

  Which three OAuth concepts apply to this flow?

  Choose 3 answers

  A. Client ID
  B. Refresh Token
  C. Authorization Code
  D. Verification Code
  E. Scopes
  A. Client ID
  B. Refresh Token
  E. Scopes

• Question 140:

  Universal containers wants to implement single Sign-on for a salesforce org using an external identity provider and corporate identity store. What type of Authentication flow is required to support deep linking?

  A. Web server Oauth SSO flow.
  B. Identity-provider-initiated SSO
  C. Service-provider-initiated SSO
  D. Start URL on identity provider
  C. Service-provider-initiated SSO