Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-ARCHITECT Online Practice Questions and Exam Preparation

Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-ARCHITECT Online Questions & Answers

• Question 11:

  Under which scenario Web Server flow will be used?

  A. Used for web applications when server-side code needs to interact with APIS.
  B. Used for server-side components when page needs to be rendered.
  C. Used for mobile applications and testing legacy Integrations.
  D. Used for verifying Access protected resources.
  A. Used for web applications when server-side code needs to interact with APIS.

• Question 12:

  What is one of the roles of an Identity Provider in a Single Sign-on setup using SAML?

  A. Validate token
  B. Create token
  C. Consume token
  D. Revoke token
  B. Create token

• Question 13:

  Universal Containers (UC) built an integration for their employees to post, view, and vote for ideas in Salesforce from an internal Company portal. When ideas are posted in Salesforce, links to the ideas are created in the company portal pages as part of the integration process. The Company portal connects to Salesforce using OAuth. Everything is working fine, except when users click on links to existing ideas, they are always taken to the Ideas home page rather than the specific idea, after authorization.

  Which OAuth URL parameter can be used to retain the original requested page so that a user can be redirected correctly after OAuth authorization?

  A. Redirect_uri
  B. State
  C. Scope
  D. Callback_uri
  A. Redirect_uri

• Question 14:

  A company with 15,000 employees is using Salesforce and would like to take the necessary steps to highlight or curb fraudulent activity.

  Which tool should be used to track login data, such as the average number of logins, who logged in more than the average number of times and who logged in during non-business hours?

  A. Login Forensics
  B. Login Report
  C. Login Inspector
  D. Login History
  A. Login Forensics

• Question 15:

  Universal Containers (UC) plans to use a SAML-based third-party IdP serving both of the Salesforce Partner Community and the corporate portal. UC partners will log in 65* to the corporate portal to access protected resources, including links to Salesforce resources.

  What would be the recommended way to configure the IdP so that seamless access can be achieved in this scenario?

  A. Set up the corporate portal as a Connected App in Salesforce and use the Web server OAuth flow.
  B. Configure SP-initiated SSO that passes the SAML token upon Salesforce resource access request.
  C. Set up the corporate portal as a Connected App in Salesforce and use the User Agent OAuth flow.
  D. Configure IdP-initiated SSO that passes the SAML token upon Salesforce resource access request.
  D. Configure IdP-initiated SSO that passes the SAML token upon Salesforce resource access request.

• Question 16:

  Universal Containers (UC) has built a custom time tracking app for its employee. UC wants to leverage Salesforce Identity to control access to the custom app.

  At a minimum, which Salesforce license is required to support this requirement?

  A. Identity Verification
  B. Identity Connect
  C. Identity Only
  D. External Identity
  C. Identity Only

• Question 17:

  How should an identity architect automate provisioning and deprovisioning of users into Salesforce from an external system?

  A. Call SOAP API upsertQ on user object.
  B. Use Security Assertion Markup Language Just-in-Time (SAML JIT) on incoming SAML assertions.
  C. Run registration handler on incoming OAuth responses.
  D. Call OpenID Connect (OIDC)-userinfo endpoint with a valid access token.
  C. Run registration handler on incoming OAuth responses.

• Question 18:

  When designing a multi-branded Customer Identity and Access Management solution on the Salesforce Platform, how should an identity architect ensure a specific brand experience in Salesforce is presented?

  A. The Experience ID, which can be included in OAuth/Open ID flows and Security Assertion Markup Language (SAML) flows as a URL parameter.
  B. Provide a brand picker that the end user can use to select its sub-brand when they arrive on salesforce.
  C. Add a custom parameter to the service provider's OAuth/SAML call and implement logic on its login page to apply branding based on the parameters value.
  D. The Audience ID, which can be set in a shared cookie.
  A. The Experience ID, which can be included in OAuth/Open ID flows and Security Assertion Markup Language (SAML) flows as a URL parameter.

• Question 19:

  Northern Trail Outfitters (NTO) wants its customers to use phone numbers to log in to their new digital portal, which was designed and built using Salesforce Experience Cloud. In order to access the portal, the user will need to do the following:

  1. Enter a phone number and/or email address

  2. Enter a verification code that is to be sent via email or text.

  What is the recommended approach to fulfill this requirement?

  A. Create a Login Discovery page and provide a Login Discovery Handler Apex class.
  B. Create a custom login page with an Apex controller. The controller has logic to send and verify the identity.
  C. Create an Authentication provider and implement a self-registration handler class.
  D. Create a custom login flow that uses an Apex controller to verify the phone numbers with the company's verification service.
  A. Create a Login Discovery page and provide a Login Discovery Handler Apex class.

• Question 20:

  Universal Containers is budding a web application that will connect with the Salesforce API using JWT OAuth Flow.

  Which two settings need to be configured in the connect app to support this requirement? Choose 2 answers

  A. The Use Digital Signature option in the connected app.
  B. The "web" OAuth scope in the connected app,
  C. The "api" OAuth scope in the connected app.
  D. The "edair_api" OAuth scope m the connected app.
  A. The Use Digital Signature option in the connected app.
  C. The "api" OAuth scope in the connected app.