ExamGecko
Login
Ask Question

Salesforce Certified Identity and Access Management Architect Practice Test - Questions Answers, Page 8

List of questions

Question 71

Report
Export
Collapse

Universal Containers (UC) has an existing web application that it would like to access from Salesforce without requiring users to re-authenticate. The web application is owned UC and the UC team that is responsible for it is willing to add new javascript code and/or libraries to the application. What implementation should an Architect recommend to UC?

Create a Canvas app and use Signed Requests to authenticate the users.
Create a Canvas app and use Signed Requests to authenticate the users.
Rewrite the web application as a set of Visualforce pages and Apex code.
Rewrite the web application as a set of Visualforce pages and Apex code.
Configure the web application as an item in the Salesforce App Launcher.
Configure the web application as an item in the Salesforce App Launcher.
Add the web application as a ConnectedApp using OAuth User-Agent flow.
Add the web application as a ConnectedApp using OAuth User-Agent flow.
Suggested answer: A
asked 23/09/2024
Arvee Natividad
38 questions

Question 72

Report
Export
Collapse

Universal containers wants to implement SAML SSO for their internal salesforce users using a thirdparty IDP. After some evaluation, UC decides not to set up my domain for their salesforce.org. How does that decision impact their SSO implementation?

Neithersp - nor IDP - initiated SSO will work
Neithersp - nor IDP - initiated SSO will work
Either sp - or IDP - initiated SSO will work
Either sp - or IDP - initiated SSO will work
IDP - initiated SSO will not work
IDP - initiated SSO will not work
Sp-Initiated SSO will not work
Sp-Initiated SSO will not work
Suggested answer: D
asked 23/09/2024
John Reynolds
30 questions

Question 73

Report
Export
Collapse

Universal containers wants salesforce inbound Oauth-enabled integration clients to use SAML-BASED single Sign-on for authentication. What Oauth flow would be recommended in this scenario?

User-Agent Oauth flow
User-Agent Oauth flow
SAML assertion Oauth flow
SAML assertion Oauth flow
User-Token Oauth flow
User-Token Oauth flow
Web server Oauth flow
Web server Oauth flow
Suggested answer: B
asked 23/09/2024
Chris Morris
39 questions

Question 74

Report
Export
Collapse

Universal containers (UC) would like to enable SSO between their existing Active Directory infrastructure and salesforce. The it team prefers to manage all users in Active Directory and would like to avoid doing any initial setup of users in salesforce directly, including the correct assignment of profiles, roles and groups. Which two optimal solutions should UC use to provision users in salesforce? Choose 2 answers

Use the salesforce REST API to sync users from active directory to salesforce
Use the salesforce REST API to sync users from active directory to salesforce
Use an app exchange product to sync users from Active Directory to salesforce.
Use an app exchange product to sync users from Active Directory to salesforce.
Use Active Directory Federation Services to sync users from active directory to salesforce.
Use Active Directory Federation Services to sync users from active directory to salesforce.
Use Identity connect to sync users from Active Directory to salesforce
Use Identity connect to sync users from Active Directory to salesforce
Suggested answer: B, D
asked 23/09/2024
Daniel Bucknor-Ankrah
41 questions

Question 75

Report
Export
Collapse

Which two roles of the systems are involved in an environment where salesforce users are enabled to access Google Apps from within salesforce through App launcher and connected App set up?

Choose 2 answers

Google is the identity provider
Google is the identity provider
Salesforce is the identity provider
Salesforce is the identity provider
Google is the service provider
Google is the service provider
Salesforce is the service provider
Salesforce is the service provider
Suggested answer: D
asked 23/09/2024
EDMARCIO S BRITO
26 questions

Question 76

Report
Export
Collapse

Universal containers (UC) is setting up Delegated Authentication to allow employees to log in using their corporate credentials. UC's security team is concerned about the risk of exposing the corporate login service on the Internet and has asked that a reliable trust mechanism be put in place between the login service and salesforce. What mechanism should an architect put in place to enable a trusted connection between the login services and salesforce?

Include client ID and client secret in the login header callout.
Include client ID and client secret in the login header callout.
Set up a proxy server for the login service in the DMZ.
Set up a proxy server for the login service in the DMZ.
Require the use of Salesforce security Tokens on password.
Require the use of Salesforce security Tokens on password.
Enforce mutual Authentication between systems using SSL.
Enforce mutual Authentication between systems using SSL.
Suggested answer: C
asked 23/09/2024
miquel martin leiva
42 questions

Question 77

Report
Export
Collapse

Universal containers (UC) has a mobile application that calls the salesforce REST API. In order to prevent users from having to enter their credentials everytime they use the app, UC has enabled the use of refresh Tokens as part of the salesforce connected App and updated their mobile app to take advantage of the refresh token. Even after enabling the refresh token, Users are still complaining that they have to enter their credentials once a day. What is the most likely cause of the issue?

The Oauth authorizations are being revoked by a nightly batch job.
The Oauth authorizations are being revoked by a nightly batch job.
The refresh token expiration policy is set incorrectly in salesforce
The refresh token expiration policy is set incorrectly in salesforce
The app is requesting too many access Tokens in a 24-hour period
The app is requesting too many access Tokens in a 24-hour period
The users forget to check the box to remember their credentials.
The users forget to check the box to remember their credentials.
Suggested answer: B
asked 23/09/2024
Steven Cantu
39 questions

Question 78

Report
Export
Collapse

Universal containers (UC) wants users to authenticate into their salesforce org using credentials stored in a custom identity store. UC does not want to purchase or use a third-party Identity provider.

Additionally, UC is extremely wary of social media and does not consider it to be trust worthy. Which two options should an architect recommend to UC? Choose 2 answers

Use a professional social media such as LinkedIn as an Authentication provider
Use a professional social media such as LinkedIn as an Authentication provider
Build a custom web page that uses the identity store and calls frontdoor.jsp
Build a custom web page that uses the identity store and calls frontdoor.jsp
Build a custom Web service that is supported by Delegated Authentication.
Build a custom Web service that is supported by Delegated Authentication.
Implement the Openid protocol and configure an Authentication provider
Implement the Openid protocol and configure an Authentication provider
Suggested answer: C, D
asked 23/09/2024
David Clark
39 questions

Question 79

Report
Export
Collapse

Universal containers uses an Employee portal for their employees to collaborate. employees access the portal from their company's internal website via SSO. It is set up to work with Active Directory.

What is the role of Active Directory in this scenario?

Identity store
Identity store
Authentication store
Authentication store
Identity provider
Identity provider
Service provider
Service provider
Suggested answer: C
asked 23/09/2024
gdgd gdgd
25 questions

Question 80

Report
Export
Collapse

Universal containers (UC) wants to implement a partner community. As part of their implementation, UC would like to modify both the Forgot password and change password experience with custom branding for their partner community users. Which 2 actions should an architect recommend to UC? Choose 2 answers

Build a community builder page for the change password experience and Custom Visualforce page for the Forgot password experience.
Build a community builder page for the change password experience and Custom Visualforce page for the Forgot password experience.
Build a custom visualforce page for both the change password and Forgot password experiences.
Build a custom visualforce page for both the change password and Forgot password experiences.
Build a custom visualforce page for the change password experience and a community builder page for the Forgot password experience.
Build a custom visualforce page for the change password experience and a community builder page for the Forgot password experience.
Build a community builder page for both the change password and Forgot password experiences.
Build a community builder page for both the change password and Forgot password experiences.
Suggested answer: B, C
asked 23/09/2024
N C
39 questions
Total 248 questions
Go to page: of 25
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Which three different attributes can be used to identify the user in a SAML 65> assertion when Salesforce is acting as a Service Provider? Choose 3 answers
Universal containers (UC) would like to enable SSO between their existing Active Directory infrastructure and salesforce. The it team prefers to manage all users in Active Directory and would like to avoid doing any initial setup of users in salesforce directly, including the correct assignment of profiles, roles and groups. Which two optimal solutions should UC use to provision users in salesforce? Choose 2 answers
Universal containers (UC) would like to enable SAML-BASED SSO for a salesforce partner community. UC has an existing ldap identity store and a third-party portal. They would like to use the existing portal as the primary site these users access, but also want to allow seamless access to the partner community. What SSO flow should an architect recommend?
Universal Containers (UC) wants to build a few applications that leverage the Salesforce REST API. UC has asked its Architect to describe how the API calls will be authenticated to a specific user. Which two mechanisms can the Architect provide? Choose 2 Answers
Universal Containers (UC) has five Salesforce orgs (UC1, UC2, UC3, UC4, UC5). of Every user that is in UC2, UC3, UC4, and UC5 is also in UC1, however not all users 65* have access to every org. Universal Containers would like to simplify the authentication process such that all Salesforce users need to remember one set of credentials. UC would like to achieve this with the least impact to cost and maintenance. What approach should an Architect recommend to UC?
Northern Trail Outfitters mar ages functional group permissions in a custom security application supported by a relational database and a REST service layer. Group permissions are mapped as permission sets in Salesforce. Which action should an identity architect use to ensure functional group permissions are reflected as permission set assignments?
Universal Containers (UC) is implementing Salesforce and would like to establish SAML SSO for its users to log in. UC stores its corporate user identities in a Custom Database. The UC IT Manager has heard good things about Salesforce Identity Connect as an Idp, and would like to understand what limitations they may face if they decided to use Identity Connect in their current environment. What limitation Should an Architect inform the IT Manager about?
The security team at Universal containers(UC) has identified exporting reports as a high-risk action and would like to require users to be logged into salesforce with their active directory (AD) credentials when doing so. For all other uses of Salesforce, Users should be allowed to use AD credentials or salesforce credentials. What solution should be recommended to prevent exporting reports except when logged in using AD credentials while maintaining the ability to view reports when logged in with salesforce credentials?
Universal Containers wants to secure its Salesforce APIs by using an existing Security Assertion Markup Language (SAML) configuration supports the company's single sign-on process to Salesforce, Which Salesforce OAuth authorization flow should be used?
An insurance company has a connected app in its Salesforce environment that is used to integrate with a Google Workspace (formerly knot as G Suite). An identity and access management (IAM) architect has been asked to implement automation to enable users, freeze/suspend users, disable users, and reactivate existing users in Google Workspace upon similar actions in Salesforce. Which solution is recommended to meet this requirement?