Free Salesforce Identity-and-Access-Management-Architect Exam Questions

Become Salesforce Certified with updated Identity-and-Access-Management-Architect exam questions and correct answers

Page: 1 / 50

Total 250 Questions | Updated On: Nov 12, 2024

Add To Cart

Question 1

An Architect has configured a SAML-based SSO integration between Salesforce and an external Identity provider and is ready to test it. When the Architect attempts to log in to Salesforce using SSO, the Architect receives a SAML error. Which two optimal actions should the Architect take to troubleshoot the issue?

A : ure the Callback URL is correctly set in the Connected Apps settings.

B : a browser that has an add-on/extension that can inspect SAML.

C : te the SAML Assertion Validator in Salesforce.

D : the browser's Development tools to view the Salesforce page's markup.

Answer: B,C

Question 2

Universal Containers (UC) has built a custom token-based Two-factor authentication (2FA) system for their existing on-premise applications. They are now implementing Salesforce and would like to enable a Two-factor login process for it, as well. What is the recommended solution as Architect should consider?

A : the custom 2FA system for on-premise applications and native 2FA for Salesforce.

B : place the custom 2FA system with an AppExchange App that supports on premise application and salesforce.

C : Custom Login Flows to connect to the existing custom 2FA system for use in Salesforce.

D : place the custom 2FA system with Salesforce 2FA for on-premise applications and Salesforce.

Answer: D

Question 3

Universal containers wants to build a custom mobile app connecting to salesforce using Oauth, and would like

to restrict the types of resources mobile users can access. What Oauth feature of Salesforce should be used to

achieve the goal?

A : Access Tokens

B : Mobile pins

C : fresh Tokens

D : opes

Answer: D

Question 4

Universal containers (UC) would like to enable self - registration for their salesforce partner community users.

UC wants to capture some custom data elements from the partner user, and based on these data elements,

wants to assign the appropriate profile and account values. Which two actions should the architect recommend

to UC? Choose 2 answers

A : dify the communitiesselfregcontroller to assign the profile and account.

B : dify the selfregistration trigger to assign profile and account.

C : nfigure registration for communities to use a custom visualforce page.

D : nfigure registration for communities to use a custom apex controller.

Answer: A,C

Question 5

Universal containers (UC) uses a legacy Employee portal for their employees to collaborate and post their

ideas. UC decides to use salesforce ideas for voting and better tracking purposes. To avoid provisioning users

on Salesforce, UC decides to push ideas posted on the Employee portal to salesforce through API. UC decides

to use an API user using Oauth Username - password flow for the connection. How can the connection to

salesforce be restricted only to the employee portal server?

A : the Employee portals IP address to the Trusted IP range for the connected App

B : a digital certificate signed by the employee portal Server.

C : the employee portals IP address to the login IP range on the user profile.

D : a dedicated profile for the user the Employee portal uses.

Answer: A

Page: 1 / 50

Total 250 Questions | Updated On: Nov 12, 2024

Add To Cart