[Mar-2024] Identity-and-Access-Management-Architect Dumps Full Questions - Identity and Access Management Designer Exam Study Guide [Q25-Q41]

6 Mar, 2024 By admin Identity-and-Access-Management-Architect, Salesforce 0 Comments

[Mar-2024] Identity-and-Access-Management-Architect Dumps Full Questions – Identity and Access Management Designer Exam Study Guide [Q25-Q41]

4.7/5 - (3 votes)

[Mar-2024] Identity-and-Access-Management-Architect Dumps Full Questions – Identity and Access Management Designer Exam Study Guide

Exam Questions and Answers for Identity-and-Access-Management-Architect Study Guide

NO.25 Universal containers (UC) does my domain enable in the context of a SAML SSO configuration? Choose 2 answers

Resource deep linking

App launcher

SSO from salesforce1 mobile app.

NO.26 A leading fitness tracker company is getting ready to launch a customer community. The company wants its customers to login to the community and connect their fitness device to their profile. Customers should be able to obtain exercise details and fitness recommendation in the community.
Which should be used to satisfy this requirement?

Named Credentials

OAuth Device Flow

Single Sign-On Settings

NO.27 Universal Containers (UC) has a desktop application to collect leads for marketing campaigns. UC wants to extend this application to integrate with Salesforce to create leads. Integration between the desktop application and Salesforce should be seamless. What Authorization flow should the Architect recommend?

JWT Bearer Token Flow

Web Server Authentication Flow

User Agent Flow

Username and Password Flow

NO.28 Universal containers (UC) is building a mobile application that will make calls to the salesforce REST API.
Additionally, UC would like to provide the optimal experience for its mobile users. Which two OAuth scopes should UC configure in the connected App? Choose 2 answers

Refresh token

API

full

Web

NO.29 Northern Trail Outfitters manages application functional permissions centrally as Active Directory groups.
The CRM_Superllser and CRM_Reportmg_SuperUser groups should respectively give the user the SuperUser and Reportmg_SuperUser permission set in Salesforce. Salesforce is the service provider to a Security Assertion Markup Language (SAML) identity provider.
Mow should an identity architect ensure the Active Directory groups are reflected correctly when a user accesses Salesforce?

Use the Apex Just-in-Time handler to query standard SAML attributes and set permission sets.

Use the Apex Just-in-Time handler to query custom SAML attributes and set permission sets.

Use a login flow to query custom SAML attributes and set permission sets.

Use a login flow to query standard SAML attributes and set permission sets.

NO.30 Universal containers wants to set up SSO for a selected group of users to access external applications from salesforce through App launcher. Which three steps must be completed in salesforce to accomplish the goal?

Associate user profiles with the connected Apps.

Complete my domain and Identity provider setup.

Create connected apps for the external applications.

Complete single Sign-on settings in security controls.

Create named credentials for each external system.

NO.31 Universal Containers (UC) wants to implement SAML SSO for their internal of Salesforce users using a third-party IdP. After some evaluation, UC decides NOT to SSO set up My Domain for their Salesforce org.
How does that decision impact their SSO implementation?

IdP-initiated SSO will NOT work.

Neither SP- nor IdP-initiated SSO will work.

Either SP- or IdP-initiated SSO will work.

SP-initiated SSO will NOT work

NO.32 Universal Containers wants to implement SAML SSO for their internal Salesforce users using a third-party IdP. After some evaluation, UC decides not to set up My Domain for their Salesforce org. How does that decision impact their SSO implementation?

SP-initiated SSO will not work.

Neither SP- nor IdP-initiated SSO will work.

Either SP- or IdP-initiated SSO will work.

IdP-initiated SSO will not work.

NO.33 Northern Trail Outfitters would like to automatically create new employee users in Salesforce with an appropriate profile that maps to its Active Directory Department.
How should an identity architect implement this requirement?

Use the createUser method in the Just-in-Time (JIT) provisioning registration handler to assign the appropriate profile.

Use the updateUser method in the Just-in-Time (JIT) provisioning registration handler to assign the appropriate profile.

Use a login flow to collect Security Assertion Markup Language attributes and assign the appropriate profile during Just-In-Time (JIT) provisioning.

Make a callout during the login flow to query department from Active Directory to assign the appropriate profile.

NO.34 How should an identity architect automate provisioning and deprovisioning of users into Salesforce from an external system?

Call SOAP API upsertQ on user object.

Use Security Assertion Markup Language Just-in-Time (SAML JIT) on incoming SAML assertions.

Run registration handler on incoming OAuth responses.

Call OpenID Connect (OIDC)-userinfo endpoint with a valid access token.

NO.35 Universal containers(UC) has decided to build a new, highly sensitive application on Force.com platform. The security team at UC has decided that they want users to provide a fingerprint in addition to username/Password to authenticate to this application. How can an architect support fingerprints as a form of identification for salesforce Authentication?

Use salesforce Two-factor Authentication with callouts to a third-party fingerprint scanning application.

Use Delegated Authentication with callouts to a third-party fingerprint scanning application.

Use an appexchange product that does fingerprint scanning with native salesforce identity confirmation.

Use custom login flows with callouts to a third-party fingerprint scanning application.

NO.36 Universal containers (UC) has a mobile application that calls the salesforce REST API. In order to prevent users from having to enter their credentials everytime they use the app, UC has enabled the use of refresh Tokens as part of the salesforce connected App and updated their mobile app to take advantage of the refresh token. Even after enabling the refresh token, Users are still complaining that they have to enter their credentials once a day. What is the most likely cause of the issue?

The Oauth authorizations are being revoked by a nightly batch job.

The refresh token expiration policy is set incorrectly in salesforce

The app is requesting too many access Tokens in a 24-hour period

The users forget to check the box to remember their credentials.

NO.37 Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the OAuth 2.0 user-agent flow (this flow uses the OAuth 2.0 implicit grant type).
Which three OAuth concepts apply to this flow?
Choose 3 answers

Client ID

Refresh Token

Authorization Code

Verification Code

Scopes

NO.38 Which two security risks can be mitigated by enabling Two-Factor Authentication (2FA) in Salesforce?
Choose 2 answers

Users leaving laptops unattended and not logging out of Salesforce.

Users accessing Salesforce from a public Wi-Fi access point.

Users choosing passwords that are the same as their Facebook password.

Users creating simple-to-guess password reset questions.

NO.39 Northern Trail Outfitters mar ages functional group permissions in a custom security application supported by a relational database and a REST service layer. Group permissions are mapped as permission sets in Salesforce.
Which action should an identity architect use to ensure functional group permissions are reflected as permission set assignments?

Use a Login Flow to query SAML attributes and set permission sets.

Use a Login Flow with invocable Apex to callout to the security application and set permission sets.

Use the Apex Just-in-Time (JIT) handler to query the Security Assertion markup Language (SAML) attributes and set permission sets.

Use the Apex JIT handler to callout to the security application and set permission sets

NO.40 A public sector agency is setting up an identity solution for its citizens using a Community built on Experience Cloud and requires the new user registration functionality to capture first name, last name, and phone number.
The phone number will be used for identity verification.
Which feature should an identity architect recommend to meet the requirements?

Integrate with social websites (Facebook, Linkedin. Twitter)

Use an external Identity Provider

Create a custom Lightning Web Component

Use Login Discovery

NO.41 Universal Containers (UC) employees have Salesforce access from restricted IP ranges only, to protect against unauthorized access. UC wants to roll out the Salesforce1 mobile app and make it accessible from any location. Which two options should an Architect recommend? Choose 2 answers

Relax the IP restriction with a second factor in the Connect App settings for Salesforce1 mobile app.

Remove existing restrictions on IP ranges for all types of user access.

Relax the IP restrictions in the Connect App settings for the Salesforce1 mobile app.

Use Login Flow to bypass IP range restriction for the mobile app.

Salesforce Certified Identity and Access Management Architect Free Update With 100% Exam Passing Guarantee: https://www.premiumvcedump.com/Salesforce/valid-Identity-and-Access-Management-Architect-premium-vce-exam-dumps.html

Premium VCE Dumps

Premium VCE Dumps

[Mar-2024] Identity-and-Access-Management-Architect Dumps Full Questions – Identity and Access Management Designer Exam Study Guide [Q25-Q41]

Leave a Reply Cancel reply