最新的Salesforce Identity-and-Access-Management-Designer免費考試真題

問題1

An Identity and Access Management (IAM) Architect is recommending Identity Connect to integrate Microsoft Active Directory (AD) with Salesforce for user provisioning, deprovisioning and single sign-on (SSO).
Which feature of Identity Connect is applicable for this scenano?

A. If the number of provisioned users exceeds Salesforce licence allowances, identity Connect will start disabling the existing Salesforce users in First-in, First-out (FIFO) fashion.

B. When Identity Connect is in place, if a user is deprovisioned in an on-premise AD, the user's Salesforce session Is revoked Immediately.

C. When configured, Identity Connect acts as an identity provider to both Active Directory and Salesforce, thus providing SSO as a default feature.

D. Identity Connect can be deployed as a managed package on salesforce org, leveraging High Availability of Salesforce Platform out-of-the-box.

正確答案: B

問題2

Universal containers (UC) employees have salesforce access from restricted ip ranges only, to protect against unauthorised access. UC wants to rollout the salesforce1 mobile app and make it accessible from any location. Which two options should an architect recommend? Choose 2 answers

A. Use login flow to bypass ip range restriction for the mobile app.

B. Relax the ip restriction with a second factor in the connect app settings for salesforce1 mobile app

C. Relax the ip restriction in the connect app settings for the salesforce1 mobile app

D. Remove existing restrictions on ip ranges for all types of user access.

正確答案: A,C

問題3

Universal containers (UC) wants to implement a partner community. As part of their implementation, UC would like to modify both the Forgot password and change password experience with custom branding for their partner community users. Which 2 actions should an architect recommend to UC? Choose 2 answers

A. Build a custom visualforce page for the change password experience and a community builder page for the Forgot password experience.

B. Build a custom visualforce page for both the change password and Forgot password experiences.

C. Build a community builder page for the change password experience and Custom Visualforce page for the Forgot password experience.

D. Build a community builder page for both the change password and Forgot password experiences.

正確答案: A,B

問題4

Which two capabilities does My Domain enable in the context of a SAML SSO configuration? Choose 2 answers

A. Resource deep linking

B. App Launcher

C. Login Forensics

D. SSO from Salesforce Mobile App

正確答案: A,D

問題5

Universal containers (UC) wants to integrate a Web application with salesforce. The UC team has implemented the Oauth web-server Authentication flow for authentication process. Which two considerations should an architect point out to UC? Choose 2 answers

A. The flow will not provide an Oauth refresh token back to the server.

B. The flow involves passing the user credentials back and forth.

C. The web server must be able to protect consumer privacy

D. The web application should be hosted on a secure server.

正確答案: C,D

問題6

Universal Containers would like its customers to register and log in to a portal built on Salesforce Experience Cloud. Customers should be able to use their Facebook or Linkedln credentials for ease of use.
Which three steps should an identity architect take to implement social sign-on?
Choose 3 answers

A. Check "Facebook" and "Linkedln" under Login Page Setup.

B. Register both Facebook and Linkedln as connected apps.

C. Enable "Federated Single Sign-On Using SAML".

D. Create authentication providers for both Facebook and Linkedln.

E. Update the default registration handlers to create and update users.

正確答案: A,D,E

問題7

Universal Containers (UC) implemented SSO to a third-party system for their Salesforce users to access the App Launcher. UC enabled "User Provisioning" on the Connected App so that changes to user accounts can be synched between Salesforce and the third party system. However, UC quickly notices that changes to user roles in Salesforce are not getting synched to the third-party system. What is the most likely reason for this behaviour?

A. Required operation(s) was not mapped in User Provisioning Settings.

B. User Provisioning for Connected Apps does not support role sync.

C. Salesforce roles have more than three levels in the role hierarchy.

D. The Approval queue for User Provisioning Requests is unmonitored.

正確答案: B

問題8

A real estate company wants to provide its customers a digital space to design their interior decoration options. To simplify the registration to gain access to the community site (built in Experience Cloud), the CTO has requested that the IT/Development team provide the option for customers to use their existing social-media credentials to register and access.
The IT lead has approached the Salesforce Identity and Access Management (IAM) architect for technical direction on implementing the social sign-on (for Facebook, Twitter, and a new provider that supports standard OpenID Connect (OIDC)).
Which two recommendations should the Salesforce IAM architect make to the IT Lead?
Choose 2 answers

A. Use declarative registration handler process builder/flow to create, update users and contacts.

B. Apex coding skills are needed for registration handler to create and update users.

C. Authentication provider configuration is required each social sign-on providers; and enable Authentication providers in community.

D. For supporting OIDC it is necessary to enable Security Assertion Markup Language (SAML) with Just-in-Time provisioning (JIT) and OAuth 2.0.

正確答案: B,C

問題9

Northern Trail Outfitters (NTO) uses the Customer 360 Platform implemented on Salesforce Experience Cloud. The development team in charge has learned of a contactless user feature, which can reduce the overhead of managing customers and partners by creating users without contact information.
What is the potential impact to the architecture if NTO decides to implement this feature?

A. Custom registration handler is needed to correctly assign External Identity or Community license for the newly registered contactless user.

B. Passwordless authentication can not be supported because the mobile phone receiving one-time password (OTP) needs to match the number on the contact record.

C. If contactless user is upgraded to Community license, the contact record is automatically created and linked to the user record, but not associated with an Account.

D. Contactless user feature is available only with the External Identity license, which can restrict the Experience Cloud functionality available to the user.

正確答案: D

問題10

Universal Containers (UC) wants to integrate a third-party Reward Calculation system with Salesforce to calculate Rewards. Rewards will be calculated on a schedule basis and update back into Salesforce. The integration between Salesforce and the Reward Calculation System needs to be secure. Which are two recommended practices for using OAuth flow in this scenario. choose 2 answers

A. OAuth SAML Bearer Assertion FLow

B. OAuth JWT Bearer Token FLow

C. OAuth Username-Password Flow

D. OAuth Refresh Token FLow

正確答案: A,B

最新的Salesforce Certified Identity and Access Management Designer - Identity-and-Access-Management-Designer免費考試真題

聯系我們

站內鏈接

最新更新