Pass Salesforce Identity-and-Access-Management-Architect PDF Dumps Recently Updated 245 Questions [Q82-Q100]

Rate this post

Pass Salesforce Identity-and-Access-Management-Architect PDF Dumps | Recently Updated 245 Questions

Updated Test Engine to Practice Identity-and-Access-Management-Architect Dumps & Practice Exam

The Salesforce Identity-and-Access-Management-Architect Certification Exam is a professional certification designed for individuals who specialize in managing identity and access management solutions on the Salesforce platform. The certification exam is intended to validate the skills and knowledge of professionals in designing and implementing secure and scalable identity and access management solutions that meet the unique needs of their organizations.

NO.82 Universal Containers (UC) has a strict requirement to authenticate users to Salesforce using their mainframe credentials. The mainframe user store cannot be accessed from a SAML provider. UC would also like to have users in Salesforce created on the fly if they provide accurate mainframe credentials.
How can the Architect meet these requirements?

Use a Salesforce Login Flow to call out to a web service and create the user on the fly.

Use the SOAP API to create the user when created on the mainframe; implement Delegated Authentication.

Implement Just-In-Time Provisioning on the mainframe to create the user on the fly.

Implement OAuth User-Agent Flow on the mainframe; use a Registration Handler to create the user on the fly.

NO.83 Which three types of attacks would a 2-Factor Authentication solution help garden against?

Key logging attacks

Network perimeter attacks

Phishing attacks

Dictionary attacks

Man-in-the-middle attacks

NO.84 Universal containers (UC) wants to integrate a Web application with salesforce. The UC team has implemented the Oauth web-server Authentication flow for authentication process. Which two considerations should an architect point out to UC? Choose 2 answers

The web application should be hosted on a secure server.

The web server must be able to protect consumer privacy

The flow involves passing the user credentials back and forth.

The flow will not provide an Oauth refresh token back to the server.

NO.85 Universal Containers (UC) is implementing Salesforce and would like to establish SAML SSO for its users to log in. UC stores its corporate user identities in a Custom Database. The UC IT Manager has heard good things about Salesforce Identity Connect as an Idp, and would like to understand what limitations they may face if they decided to use Identity Connect in their current environment. What limitation Should an Architect inform the IT Manager about?

Identity Connect will not support user provisioning in UC’s current environment.

Identity Connect will only support Idp-initiated SAML flows in UC’s current environment.

Identity Connect will only support SP-initiated SAML flows in UC’s current environment.

Identity connect is not compatible with UC’s current identity environment.

NO.86 Under which scenario Web Server flow will be used?

Used for web applications when server-side code needs to interact with APIS.

Used for server-side components when page needs to be rendered.

Used for mobile applications and testing legacy Integrations.

Used for verifying Access protected resources.

NO.87 An Architect has configured a SAML-based SSO integration between Salesforce and an external Identity provider and is ready to test it. When the Architect attempts to log in to Salesforce using SSO, the Architect receives a SAML error. Which two optimal actions should the Architect take to troubleshoot the issue?

Ensure the Callback URL is correctly set in the Connected Apps settings.

Use a browser that has an add-on/extension that can inspect SAML.

Paste the SAML Assertion Validator in Salesforce.

Use the browser’s Development tools to view the Salesforce page’s markup.

NO.88 The executive sponsor for an organization has asked if Salesforce supports the ability to embed a login widget into its service providers in order to create a more seamless user experience.
What should be used and considered before recommending it as a solution on the Salesforce Platform?

OpenID Connect Web Server Flow. Determine if the service provider is secure enough to store the client secret on.

Embedded Login. Identify what level of UI customization will be required to make it match the service providers look and feel.

Salesforce REST apis. Ensure that Secure Sockets Layer (SSL) connection for the integration is used.

Embedded Login. Consider whether or not it relies on third party cookies which can cause browser compatibility issues.

NO.89 A division of a Northern Trail Outfitters (NTO) purchased Salesforce. NTO uses a third party identity provider (IdP) to validate user credentials against Its corporate Lightweight Directory Access Protocol (LDAP) directory. NTO wants to help employees remember as passwords as possible.
What should an identity architect recommend?

Setup Salesforce as a Service Provider to the existing IdP.

Setup Salesforce as an IdP to authenticate against the LDAP directory.

Use Salesforce connect to synchronize LDAP passwords to Salesforce.

Setup Salesforce as an Authentication Provider to the existing IdP.

NO.90 Containers (UC) uses an internal system for recruiting and would like to have the candidates’ info available in the Salesforce automatically when they are selected. UC decides to use OAuth to connect to Salesforce from the recruiting system and would like to do the authentication using digital certificates. Which two OAuth flows should be considered to meet the requirement? Choose 2 answers

JWT Bearer Token flow

Refresh Token flow

SAML Bearer Assertion flow

Web Service flow

NO.91 An identity architect’s client has a homegrown identity provider (IdP). Salesforce is used as the service provider (SP). The head of IT is worried that during a SP initiated single sign-on (SSO), the Security Assertion Markup Language (SAML) request content will be altered.
What should the identity architect recommend to make sure that there is additional trust between the SP and the IdP?

Ensure that there is an HTTPS connection between IDP and SP.

Ensure that on the SSO settings page, the “Request Signing Certificate” field has a self-signed certificate.

Ensure that the Issuer and Assertion Consumer service (ACS) URL is property configured between SP and IDP.

Encrypt the SAML Request using certification authority (CA) signed certificate and decrypt on IdP.

NO.92 Which three different attributes can be used to identify the user in a SAML 65> assertion when Salesforce is acting as a Service Provider? Choose 3 answers

Federation ID

Salesforce User ID

User Full Name

User Email Address

Salesforce Username

NO.93 Universal Containers wants to secure its Salesforce APIs by using an existing Security Assertion Markup Language (SAML) configuration supports the company’s single sign-on process to Salesforce, Which Salesforce OAuth authorization flow should be used?

OAuth 2.0 SAML Bearer Assertion Flow

A SAML Assertion Row

OAuth 2.0 User-Agent Flow

OAuth 2.0 JWT Bearer Flow

NO.94 Universal Containers (UC) has an e-commerce website where customers can buy products, make payments and manage their accounts. UC decides to build a Customer Community on Salesforce and wants to allow the customers to access the community from their accounts without logging in again. UC decides to implement an SP-initiated SSO using a SAML-compliant Idp. In this scenario where Salesforce is the Service Provider, which two activities must be performed in Salesforce to make SP-initiated SSO work? Choose 2 answers

Configure SAML SSO settings.

Create a Connected App.

Configure Delegated Authentication.

Set up My Domain.

NO.95 An identity architect has been asked to recommend a solution that allows administrators to configure personalized alert messages to users before they land on the Experience Cloud site (formerly known as Community) homepage.
What is recommended to fulfill this requirement with the least amount of customization?

Customize the registration handler Apex class to create a routing logic navigating to different home pages based on the user profile.

Use Login Flows to add a screen that shows personalized alerts.

Build a Lightning web Component (LWC) for a homepage that shows custom alerts.

Create custom metadata that stores user alerts and use a LWC to display alerts.

NO.96 Universal containers (UC) has a custom, internal-only, mobile billing application for users who are commonly out of the office. The app is configured as a connected App in salesforce. Due to the nature of this app, UC would like to take the appropriate measures to properly secure access to the app. Which two are recommendations to make the UC? Choose 2 answers

Disallow the use of single Sign-on for any users of the mobile app.

Require high assurance sessions in order to use the connected App

Use Google Authenticator as an additional part of the logical processes.

Set login IP ranges to the internal network for all of the app users profiles.

NO.97 A technology enterprise is setting up an identity solution with an external vendors wellness application for its employees. The user attributes need to be returned to the wellness application in an ID token.
Which authentication mechanism should an identity architect recommend to meet the requirements?

OpenID Connect

User Agent Flow

JWT Bearer Token Flow

Web Server Flow

NO.98 Universal Containers is implementing Salesforce Identity to broker authentication from its enterprise single sign-on (SSO) solution through Salesforce to third party applications using SAML.
What rote does Salesforce Identity play in its relationship with the enterprise SSO system?

Identity Provider (IdP)

Resource Server

Service Provider (SP)

Client Application

NO.99 Containers (UC) has decided to implement a federated single Sign-on solution using a third-party Idp. In reviewing the third-party products, they would like to ensure the product supports the automated provisioning and deprovisioning of users. What are the underlining mechanisms that the UC Architect must ensure are part of the product?

SOAP API for provisioning; Just-in-Time (JIT) for Deprovisioning.

Just-In-time (JIT) for Provisioning; SOAP API for Deprovisioning.

Provisioning API for both Provisioning and Deprovisioning.

Just-in-Time (JIT) for both Provisioning and Deprovisioning.

NO.100 Universal containers wants to build a custom mobile app connecting to salesforce using Oauth, and would like to restrict the types of resources mobile users can access. What Oauth feature of Salesforce should be used to achieve the goal?

Access Tokens

Mobile pins

Refresh Tokens

Scopes

Loading …

The Salesforce Identity-and-Access-Management-Architect exam is designed to test the knowledge and skills of professionals in various areas of identity and access management, including authentication, authorization, and user management. The exam also covers topics such as data security, compliance, and governance. Candidates will be required to demonstrate their ability to design, implement, and manage secure and scalable IAM solutions on the Salesforce platform.

Salesforce Identity-and-Access-Management-Architect Dumps Cover Real Exam Questions: https://www.real4exams.com/Identity-and-Access-Management-Architect_braindumps.html