Go to Identity-and-Access-Management-Architect Questions – Try Identity-and-Access-Management-Architect dumps pdf [Q139-Q155]

5/5 - (1 vote)

Go to Identity-and-Access-Management-Architect Questions – Try Identity-and-Access-Management-Architect dumps pdf

Dumps Practice Exam Questions Study Guide for the Identity-and-Access-Management-Architect Exam

Salesforce Certified Identity and Access Management Architect certification is designed to validate an individual’s expertise in designing and implementing IAM solutions using Salesforce. Salesforce Certified Identity and Access Management Architect certification is intended for experienced architects who have a deep understanding of the Salesforce platform and its IAM tools. Salesforce Certified Identity and Access Management Architect certification exam measures a candidate’s ability to develop and implement IAM solutions that meet business requirements, comply with industry regulations, and integrate with other systems.

Achieving the Salesforce Certified Identity and Access Management Architect certification is a significant accomplishment for professionals in the field of identity and access management. Salesforce Certified Identity and Access Management Architect certification demonstrates a candidate’s expertise in designing and implementing secure identity and access management solutions using Salesforce products, and can lead to new career opportunities and increased earning potential.

Q139. Universal containers (UC) has implemented ansp-Initiated SAML flow between an external IDP and salesforce. A user at UC is attempting to login to salesforce1 for the first time and is being prompted for salesforce credentials instead of being shown the IDP login page. What is the likely cause of the issue?

The “Redirect to Identity Provider” option has been selected in the my domain configuration.

The user has not configured the salesforce1 mobile app to use my domain for login

The “Redirect to identity provider” option has not been selected the SAML configuration.

The user has not been granted the “Enable single Sign-on” permission

Q140. Universal Containers (UC) has a desktop application to collect leads for marketing campaigns. UC wants to extend this application to integrate with Salesforce to create leads. Integration between the desktop application and Salesforce should be seamless. What Authorization flow should the Architect recommend?

JWT Bearer Token Flow

Web Server Authentication Flow

User Agent Flow

Username and Password Flow

Q141. A client is planning to rollout multi-factor authentication (MFA) to its internal employees and wants to understand which authentication and verification methods meet the Salesforce criteria for secure authentication.
Which three functions meet the Salesforce criteria for secure mfa?
Choose 3 answers

username and password + SMS passcode

Username and password + secunty key

Third-party single sign-on with Mobile Authenticator app

Certificate-based Authentication

Lightning Login

Q142. Universal Containers (UC) wants its closed Won opportunities to be synced to a Data warehouse in near real time. UC has implemented Outbound Message to enable near real-time data sync. UC wants to ensure that communication between Salesforce and Target System is secure. What certificate is sent along with the Outbound Message?

The Self-signed Certificates from the Certificate & Key Management menu.

The default client Certificate from the Develop–> API menu.

The default client Certificate or the Certificate and Key Management menu.

The CA-signed Certificate from the Certificate and Key Management Menu.

Q143. Universal Containers (UC) rolling out a new Customer Identity and Access Management Solution will be built on top of their existing Salesforce instance.
Several service providers have been setup and integrated with Salesforce using OpenlD Connect to allow for a seamless single sign-on experience. UC has a requirement to limit user access to only a subset of service providers per customer type.
Which two steps should be done on the platform to satisfy the requirement?
Choose 2 answers

Manage which connected apps a user has access to by assigning authentication providers to the user’s profile.

Assign the connected app to the customer community, and enable the users profile in the Community settings.

Use Profiles and Permission Sets to assign user access to Admin Pre-Approved Connected Apps.

Set each of the Connected App access settings to Admin Pre-Approved.

Q144. A large consumer company is planning to create a community and will requ.re login through the customers social identity. The following requirements must be met:
1. The customer should be able to login with any of their social identities, however salesforce should only have one user per customer.
2. Once the customer has been identified with a social identity, they should not be required to authonze Salesforce.
3. The customers personal details from the social sign on need to be captured when the customer logs into Salesforce using their social Identity.
3. If the customer modifies their personal details in the social site, the changes should be updated in Salesforce
.
Which two options allow the Identity Architect to fulfill the requirements?
Choose 2 answers

Use Login Flows to call an authentication registration handler to provision the user before logging the user into the community.

Use authentication providers for social sign-on and use the custom registration handler to insert or update personal details.

Redirect the user to a custom page that allows the user to select an existing social identity for login.

Use the custom registration handler to link social identities to Salesforce identities.

Q145. Northern Trail Outfitters (NTO) believes a specific user account may have been compromised. NTO inactivated the user account and needs U perform a forensic analysis and identify signals that could Indicate a breach has occurred.
What should NTO’s first step be in gathering signals that could indicate account compromise?

Review the User record and evaluate the login and transaction history.

Download the Setup Audit Trail and review all recent activities performed by the user.

Download the Identity Provider Event Log and evaluate the details of activities performed by the user.

Download the Login History and evaluate the details of logins performed by the user.

Q146. Northern Trail Outfitters (NTO) is planning to build a new customer service portal and wants to use passwordless login, allowing customers to login with a one-time passcode sent to them via email or SMS.
How should the quantity of required Identity Verification Credits be estimated?

Each community comes with 10,000 Identity Verification Credits per month and only customers with more than 10,000 logins a month should estimate additional SMS verifications needed.

Identity Verification Credits are consumed with each SMS (text message) sent and should be estimated based on the number of login verification challenges for SMS verification users.

Identity Verification Credits are consumed with each verification sent and should be estimated based on the number of logins that will incur a verification challenge.

Identity Verification Credits are a direct add-on license based on the number of existing member-based or login-based Community licenses.

Q147. A Salesforce customer is implementing Sales Cloud and a custom pricing application for its call center agents.
An Enterprise single sign-on solution is used to authenticate and sign-in users to all applications. The customer has the following requirements:
1. The development team has decided to use a Canvas app to expose the pricing application to agents.
2. Agents should be able to access the Canvas app without needing to log in to the pricing application.
Which two options should the identity architect consider to provide support for the Canvas app to initiate login for users?
Choose 2 answers

Select “Enable as a Canvas Personal App” in the connected app settings.

Enable OAuth settings in the connected app with required OAuth scopes for the pricing application.

Configure the Canvas app as a connected app and set Admin-approved users as pre-authorized.

Enable SAML in the connected app and Security Assertion Markup Language (SAML) Initiation Method as Service Provider Initiated.

Q148. A manufacturer wants to provide registration for an Internet of Things (IoT) device with limited display input or capabilities.
Which Salesforce OAuth authorization flow should be used?

OAuth 2.0 JWT Bearer How

OAuth 2.0 Device Flow

OAuth 2.0 User-Agent Flow

OAuth 2.0 Asset Token Flow

Q149. Northern Trail Outfitters (NTO) recently purchased Salesforce Identity Connect to streamline user provisioning across Microsoft Active Directory (AD) and Salesforce Sales Cloud.
NTO has asked an identity architect to identify which salesforce security configurations can map to AD permissions.
Which three Salesforce permissions are available to map to AD permissions?
Choose 3 answers

Public Groups

Field-Level Security

Roles

Sharing Rules

Profiles and Permission Sets

Q150. Universal Containers (UC) wants to build a custom mobile app for their field reps to create orders in salesforce. After the first time the users log in, they must be able to access salesforce upon opening the mobile app without being prompted to log in again. What Oauth flows should be considered to support this requirement?

Web Server flow with a Refresh Token.

Mobile Agent flow with a Bearer Token.

User Agent flow with a Refresh Token.

SAML Assertion flow with a Bearer Token.

Q151. Northern Trail Outfitters (NTO) is launching a new sportswear brand on its existing consumer portal built on Salesforce Experience Cloud. As part of the launch, emails with promotional links will be sent to existing customers to log in and claim a discount. The marketing manager would like the portal dynamically branded so that users will be directed to the brand link they clicked on; otherwise, users will view a recognizable NTO-branded page.
The campaign is launching quickly, so there is no time to procure any additional licenses. However, the development team is available to apply any required changes to the portal.
Which approach should the identity architect recommend?

Create a full sandbox to replicate the portal site and update the branding accordingly.

Implement Experience ID in the code and extend the URLs and endpoints, as required.

Use Heroku to build the new brand site and embedded login to reuse identities.

Configure an additional community site on the same org that is dedicated for the new brand.

Q152. Universal Containers (UC) wants to implement SAML SSO for their internal of Salesforce users using a third-party IdP. After some evaluation, UC decides NOT to SSO set up My Domain for their Salesforce org.
How does that decision impact their SSO implementation?

IdP-initiated SSO will NOT work.

Neither SP- nor IdP-initiated SSO will work.

Either SP- or IdP-initiated SSO will work.

SP-initiated SSO will NOT work

Q153. Sales users at Universal containers use salesforce for Opportunity management. Marketing uses a third-party application called Nest for Lead nurturing that is accessed using username/password. The VP of sales wants to open up access to nest for all sales uses to provide them access to lead history and would like SSO for better adoption. Salesforce is already setup for SSO and uses Delegated Authentication. Nest can accept username/Password or SAML-based Authentication. IT teams have received multiple password-related issues for nest and have decided to set up SSO access for Nest for Marketing users as well. The CIO does not want to invest in a new IDP solution and is considering using Salesforce for this purpose. Which are appropriate license type choices for sales and marketing users, giving salesforce is using Delegated Authentication?
Choose 2 answers

Salesforce license for sales users and Identity license for Marketing users

Salesforce license for sales users and External Identity license for Marketing users

Identity license for sales users and Identity connect license for Marketing users

Salesforce license for sales users and platform license for Marketing users.

Q154. Universal Containers (UC) has decided to use Salesforce as an Identity Provider for multiple external applications. UC wants to use the salesforce App Launcher to control the Apps that are available to individual users. Which three steps are required to make this happen?

Add each connected App to the App Launcher with a Start URL.

Set up an Auth Provider for each External Application.

Set up Salesforce as a SAML Idp with My Domain.

Set up Identity Connect to Synchronize user data.

Create a Connected App for each external application.

Q155. Universal Containers (UC) implemented SSO to a third-party system for their Salesforce users to access the App Launcher. UC enabled “User Provisioning” on the Connected App so that changes to user accounts can be synched between Salesforce and the third party system. However, UC quickly notices that changes to user roles in Salesforce are not getting synched to the third-party system. What is the most likely reason for this behaviour?

User Provisioning for Connected Apps does not support role sync.

Required operation(s) was not mapped in User Provisioning Settings.

The Approval queue for User Provisioning Requests is unmonitored.

Salesforce roles have more than three levels in the role hierarchy.

Free Identity and Access Management Designer Identity-and-Access-Management-Architect Exam Question: https://www.testbraindump.com/Identity-and-Access-Management-Architect-exam-prep.html

Go to Identity-and-Access-Management-Architect Questions – Try Identity-and-Access-Management-Architect dumps pdf [Q139-Q155]

Salesforce New 2023 ADX-211 Sample Questions Reliable ADX-211 Test Engine [Q91-Q109]

[Q14-Q33] Pass Data-Cloud-Consultant Exam in First Attempt Guaranteed 2025 Dumps!

Salesforce Identity-and-Access-Management-Designer Real Exam Questions and Answers FREE [Q111-Q131]

Leave a Reply Cancel reply

Related Posts

Leave a Reply Cancel reply