Home / Salesforce / Certified Identity and Access Management Architect

Salesforce Certified Identity and Access Management Architect Practice Test - Questions Answers, Page 19

Question list

List of questions

Question 181

(0)

Uwversal Containers (UC) is building a custom employee hut) application on Amazon Web Services (AWS) and would like to store their users' credentials there. Users will also need access to Salesforc

Question 182

(0)

Universal Containers is implementing Salesforce Identity to broker authentication from its enterprise single sign-on (SSO) solution through Salesforce to third party applications using SAML. What r

Question 183

(0)

Refer to the exhibit. A multinational company is looking to rollout Salesforce globally. The company has a Microsoft Active Directory Federation Services (ADFS) implementation for the Americas, E

Question 184

(0)

Northern Trail Outfitters (NTO) wants its customers to use phone numbers to log in to their new digital portal, which was designed and built using Salesforce Experience Cloud. In order to access the

Question 185

(0)

A financial services company uses Salesforce and has a compliance requirement to track information about devices from which users log in. Also, a Salesforce Security Administrator needs to have the

Question 186

(0)

Users logging into Salesforce are frequently prompted to verify their identity. The identity architect is required to provide recommendations so that frequency of prompt verification can be reduced

Question 187

(0)

An Identity and Access Management (IAM) Architect is recommending Identity Connect to integrate Microsoft Active Directory (AD) with Salesforce for user provisioning, deprovisioning and single signo

Question 188

(0)

Northern Trail Outfitters (NTO) is planning to roll out a partner portal for its distributors using Experience Cloud. NTO would like to use an external identity provider (idP) and for partners to re

Question 189

(0)

A third-party app provider would like to have users provisioned via a service endpoint before users access their app from Salesforce. What should an identity architect recommend to configure the re

Question 190

(0)

Northern Trail Outfitters (NTO) wants to give customers the ability to submit and manage issues with their purchases. It is important for to give its customers the ability to login with their Facebo

Question 181

Uwversal Containers (UC) is building a custom employee hut) application on Amazon Web Services

(AWS) and would like to store their users' credentials there. Users will also need access to Salesforce for internal operations. UC has tasked an identity architect with evaluating Afferent solutions for authentication and authorization between AWS and Salesforce.

How should an identity architect configure AWS to authenticate and authorize Salesforce users?

Configure the custom employee app as a connected app.

Configure AWS as an OpenID Connect Provider.

Create a custom external authentication provider.

Develop a custom Auth server in AWS.

Show Answer Comment (0)

Question 182

Universal Containers is implementing Salesforce Identity to broker authentication from its enterprise single sign-on (SSO) solution through Salesforce to third party applications using SAML.

What rote does Salesforce Identity play in its relationship with the enterprise SSO system?

Identity Provider (IdP)

Resource Server

Service Provider (SP)

Client Application

Show Answer Comment (0)

Question 183

Refer to the exhibit.

A multinational company is looking to rollout Salesforce globally. The company has a Microsoft Active Directory Federation Services (ADFS) implementation for the Americas, Europe and APAC. The company plans to have a single org and they would like to have all of its users access Salesforce using the ADFS . The company would like to limit its investments and prefer not to procure additional applications to satisfy the requirements.

What is recommended to ensure these requirements are met ?

Use connected apps for each ADFS implementation and implement Salesforce site to authenticate users across the ADFS system applicable to their geo.

Implement Identity Connect to provide single sign-on to Salesforce and federated across multiple ADFS systems.

Add a central identity system that federates between the ADFS systems and integrate with Salesforce for single sign-on.

Configure Each ADFS system under single sign-on settings and allow users to choose the system to authenticate during sign on to Salesforce-

Show Answer Comment (0)

Question 184

Northern Trail Outfitters (NTO) wants its customers to use phone numbers to log in to their new digital portal, which was designed and built using Salesforce Experience Cloud. In order to access the portal, the user will need to do the following:

Enter a phone number and/or email address

Enter a verification code that is to be sent via email or text.What is the recommended approach to fulfill this requirement?

Create a Login Discovery page and provide a Login Discovery Handler Apex class.

Create a custom login page with an Apex controller. The controller has logic to send and verify the identity.

Create an Authentication provider and implement a self-registration handler class.

Create a custom login flow that uses an Apex controller to verify the phone numbers with the company's verification service.

Show Answer Comment (0)

Question 185

A financial services company uses Salesforce and has a compliance requirement to track information about devices from which users log in. Also, a Salesforce Security Administrator needs to have the ability to revoke the device from which users log in.

What should be used to fulfill this requirement?

Use multi-factor authentication (MFA) to meet the compliance requirement to track device information.

Use the Activations feature to meet the compliance requirement to track device information.

Use the Login History object to track information about devices from which users log in.

Use Login Flows to capture device from which users log in and store device and user information in a custom object.

Show Answer Comment (0)

Question 186

Users logging into Salesforce are frequently prompted to verify their identity.

The identity architect is required to provide recommendations so that frequency of prompt verification can be reduced.

What should the identity architect recommend to meet the requirement?

Implement 2FA authentication for the Salesforce org.

Set trusted IP ranges for the organization.

Implement an single sign-on for Salesforce using an external identity provider.

Implement multi-factor authentication for the Salesforce org.

Show Answer Comment (0)

Question 187

An Identity and Access Management (IAM) Architect is recommending Identity Connect to integrate Microsoft Active Directory (AD) with Salesforce for user provisioning, deprovisioning and single signon (SSO).

Which feature of Identity Connect is applicable for this scenano?

When Identity Connect is in place, if a user is deprovisioned in an on-premise AD, the user's Salesforce session Is revoked Immediately.

If the number of provisioned users exceeds Salesforce licence allowances, identity Connect will start disabling the existing Salesforce users in First-in, First-out (FIFO) fashion.

Identity Connect can be deployed as a managed package on salesforce org, leveraging High Availability of Salesforce Platform out-of-the-box.

When configured, Identity Connect acts as an identity provider to both Active Directory and Salesforce, thus providing SSO as a default feature.

Show Answer Comment (0)

Question 188

Northern Trail Outfitters (NTO) is planning to roll out a partner portal for its distributors using Experience Cloud. NTO would like to use an external identity provider (idP) and for partners to register for access to the portal. Each partner should be allowed to register only once to avoid duplicate accounts with Salesforce.

What should a identity architect recommend to create partners?

On successful creation of Partners using Self Registration page in Experience Cloud, create identity in Ping.

Create a custom page m Experience Cloud to self register partner with Experience Cloud and Ping identity store.

Create a custom web page in the Portal and create users in the IdP and Experience Cloud using published APIs.

Allow partners to register through the IdP and create partner users in Salesforce through an API.

Show Answer Comment (0)

Question 189

A third-party app provider would like to have users provisioned via a service endpoint before users access their app from Salesforce.

What should an identity architect recommend to configure the requirement with limited changes to the third-party app?

Use a connected app with user provisioning flow.

Create Canvas app in Salesforce for third-party app to provision users.

Redirect users to the third-party app for registration.

Use Salesforce identity with Security Assertion Markup Language (SAML) for provisioning users.

Show Answer Comment (0)

Question 190

Northern Trail Outfitters (NTO) wants to give customers the ability to submit and manage issues with their purchases. It is important for to give its customers the ability to login with their Facebook and Twitter credentials.

Which two actions should an identity architect recommend to meet these requirements?

Choose 2 answers

Create a custom external authentication provider for Facebook.

Configure a predefined authentication provider for Facebook.

Create a custom external authentication provider for Twitter.

Configure a predefined authentication provider for Twitter.

Show Answer Comment (0)

Total 248 questions