最新的Salesforce Plat-Arch-203免費考試真題

問題1

A global company has built an external application that uses data from its Salesforce org via an OAuth 2.0 authorization flow. Upon logout, the existing Salesforce OAuth token must be invalidated.
Which action will accomplish this?

A. Use a HTTP POST to the System for Cross-domain Identity Management (SCIM) endpoint, including the current OAuth token.

B. Use a HTTP POST to request the refresh token for the current user.

C. Use a HTTP POST to make a call to the revoke token endpoint.

D. Enable Single Logout with a secure logout URL.

正確答案: C

問題2

Universal Containers (UC) has a custom, internal-only, mobile billing application for users who are commonly out of the office. The app is configured as a connected App in Salesforce. Due to the nature of this app, UC would like to take the appropriate measures to properly secure access to the app. Which two are recommendations to make the UC? Choose 2 answers

A. Use Google Authenticator as an additional part of the login process

B. Disallow the use of Single Sign-on for any users of the mobile app.

C. Set Login IP Ranges to the internal network for all of the app users Profiles.

D. Require High Assurance sessions in order to use the Connected App.

正確答案: A,D

問題3

What item should an Architect consider when designing a Delegated Authentication implementation?

A. The Web service should implement a custom password decryption method.

B. The web service should use the Salesforce Federation ID to identify the user.

C. The Web service should be secured with TLS using Salesforce trusted certificates.

D. The Web service should be able to accept one to four input method parameters.

正確答案: C

問題4

Which three are capabilities of SAML-based Federated authentication? Choose 3 answers

A. Web applications with no passwords are more secure and stronger against attacks.

B. Centralized federation provides single point of access, control and auditing.

C. Access tokens are used to access resources on the server once the user is authenticated.

D. SAML tokens can be in XML or JSON format and can be used interchangeably.

E. Trust relationships between Identity Provider and Service Provider are required.

正確答案: B,C,E

問題5

Northern Trail Outfitters (NTO) has an off-boarding process where a terminated employee is first disabled in the Lightweight Directory Act Protocol (LDAP) directory, then requests are sent to the various application support teams to finish user deactivations. A terminated employee recently was able to login to NTO's Salesforce instance 24 hours after termination, even though the user was disabled in the corporate LDAP directory.
What should an identity architect recommend to prevent this from happening in the future?

A. use a login flow to make a callout to the LDAP directory before authenticating the user to Salesforce.

B. Setup an identity provider (IdP) to authenticate users using LDAP, set up single sign-on to Salesforce and disable Login Form authentication.

C. Configure an authentication provider to delegate authentication to the LDAP directory.

D. Create a Just-in-Time provisioning registration handler to ensure users are deactivated in Salesforce as they are disabled in LDAP.

正確答案: C

問題6

Universal Containers (UC) wants to build a few applications that leverage the Salesforce REST API. UC has asked its Architect to describe how the API calls will be authenticated to a specific user. Which two mechanisms can the Architect provide? Choose 2 Answers

A. Refresh Token

B. Session ID

C. Access Token

D. Authentication Token

正確答案: A,C

問題7

A multinational industrial products manufacturer is planning to implement Salesforce CRM to manage their business. They have the following requirements:
1. They plan to implement Partner communities to provide access to their partner network .
2. They have operations in multiple countries and are planning to implement multiple Salesforce orgs.
3. Some of their partners do business in multiple countries and will need information from multiple Salesforce communities.
4. They would like to provide a single login for their partners.
How should an Identity Architect solution this requirement with limited custom development?

A. Allow partners to choose the Salesforce org they need information from and use login flows to authenticate access.

B. Consolidate Partner related information in a single org and provide access through Salesforce community.

C. Register partners in one org and access information from other orgs using APIs.

D. Create a partner login for the country of their operation and use SAML federation to provide access to other orgs.

正確答案: D

問題8

An identity architect is setting up an integration between Salesforce and a third-party system. The third-party system needs to authenticate to Salesforce and then make API calls against the REST API.
One of the requirements is that the solution needs to ensure the third party service providers connected app in Salesforce mini need for end user interaction and maximizes security.
Which OAuth flow should be used to fulfill the requirement?

A. Username-Password Flow

B. Web Server Flow

C. User Agent Flow

D. JWT Bearer Flow

正確答案: D

問題9

Universal Containers (UC) wants its closed Won opportunities to be synced to a Data Warehouse in near real time. UC has implemented Outbound Message to enable near real-time data sync. UC wants to ensure that communication between Salesforce and Target System is Secure. What Certificate is sent along with the Outbound Message?

A. The default Client Certificate or a Certificate from Certificate and Key Management menu.

B. The default Client Certificate from the Develop--> API Menu.

C. The CA-Signed Certificate from the Certificate and Key Management menu.

D. The Self-Signed Certificates from the Certificate & Key Management menu.

正確答案: B

問題10

Universal Containers (UC) wants its closed Won opportunities to be synced to a Data warehouse in near real time. UC has implemented Outbound Message to enable near real-time data sync. UC wants to ensure that communication between Salesforce and Target System is secure. What certificate is sent along with the Outbound Message?

A. The default client Certificate from the Develop--> API menu.

B. The Self-signed Certificates from the Certificate & Key Management menu.

C. The default client Certificate or the Certificate and Key Management menu.

D. The CA-signed Certificate from the Certificate and Key Management Menu.

正確答案: A

最新的Salesforce Certified Platform Identity and Access Management Architect - Plat-Arch-203免費考試真題

聯系我們

站內鏈接

最新更新