Free Salesforce Identity-and-Access-Management-Architect Exam Questions

Become Salesforce Certified with updated Identity-and-Access-Management-Architect exam questions and correct answers

Page: 1 / 50

Total 250 Questions | Updated On: Mar 25, 2025

Add To Cart

Question 1

Universal Containers (UC) uses Salesforce to allow customers to keep track of the order status. The customers

can log in to Salesforce using external authentication providers, such as Facebook and Google. UC is also

leveraging the App Launcher to let customers access an of platform application for generating shipping labels.

The label generator application uses OAuth to provide users access. What license type should an Architect

recommend for the customers?

A : tomer Community license

B : entity license

C : tomer Community Plus license

D : ternal Identity license

Answer: B

Question 2

Northern Trail Outfitters (NTO) has an off-boarding process where a terminated employee is first disabled in

the Lightweight Directory Act Protocol (LDAP) directory, then requests are sent to the various application

support teams to finish user deactivations. A terminated employee recently was able to login to NTO's

Salesforce instance 24 hours after termination, even though the user was disabled in the corporate LDAP

directory.

What should an identity architect recommend to prevent this from happening in the future?

A : eate a Just-in-Time provisioning registration handler to ensure users are deactivated in Salesforce as they are disabled in LDAP.

B : nfigure an authentication provider to delegate authentication to the LDAP directory.

C : a login flow to make a callout to the LDAP directory before authenticating the user to Salesforce.

D : tup an identity provider (IdP) to authenticate users using LDAP, set up single sign-on to Salesforce and disable Login Form authentication.

Answer: B

Question 3

What information does the 'Relaystate' parameter contain in sp-Initiated Single Sign-on?

A : ference to a URL redirect parameter at the identity provider.

B : ference to a URL redirect parameter at the service provider.

C : ference to the login address URL of the service provider.

D : ference to the login address URL of the identity Provider.

Answer: B

Question 4

A large consumer company is planning to create a community and will requ.re login through the customers

social identity. The following requirements must be met:

1. The customer should be able to login with any of their social identities, however salesforce should only

have one user per customer.

2. Once the customer has been identified with a social identity, they should not be required to authonze

Salesforce.

3. The customers personal details from the social sign on need to be captured when the customer logs into

Salesforce using their social Identity.

3. If the customer modifies their personal details in the social site, the changes should be updated in Salesforce

Which two options allow the Identity Architect to fulfill the requirements?

Choose 2 answers

A : Use Login Flows to call an authentication registration handler to provision the user before logging theuser into the community.

B : Use authentication providers for social sign-on and use the custom registration handler to insert orupdate personal details.

C : direct the user to a custom page that allows the user to select an existing social identity for login

D : the custom registration handler to link social identities to Salesforce identities.

Answer: B,D

Question 5

Universal Containers (UC) uses Active Directory (AD) as their identity store for employees and must continue to do so for network access. UC is undergoing a major transformation program and moving all of their enterprise applications to cloud platforms including Salesforct, Workday, and SAP HANA. UC needs to implement an SSO solution for accessing all of the third-party cloud applications and the CIO is inclined to use Salesforce for all of their identity and access management needs. Which two Salesforce license types does UC need for its employees' Choose 2 answers

A : mpany Community and Identity licenses

B : entity and Identity Connect licenses

C : atter Only and Identity licenses

D : lesforce and Identity Connect licenses

Answer: B,D

Page: 1 / 50

Total 250 Questions | Updated On: Mar 25, 2025

Add To Cart