報名費並不便宜，沒有人想為 Plat-Arch-203 付第二次考試費。與其抱著僥倖上考場，不如先用 Fast2test 的 246 道練習題徹底檢驗實力，爭取一次就把 Salesforce Certified Platform Identity and Access Management Architect 考到手。

Salesforce Plat-Arch-203 考試概覽:

Salesforce Plat-Arch-203 考試大綱主題:

關於 Plat-Arch-203 考試，你可能想知道的事

最新的 Identity and Access Management Designer Plat-Arch-203 免費考試真題：

問題 #1

An Identity architect works for a multinational, multi-brand organization. As they work with the organization to understand their Customer Identity and Access Management requirements, the identity architect learns that the brand experience is different for each of the customer's sub-brands and each of these branded experiences must be carried through the login experience depending on which sub-brand the user is logging into.
Which solution should the architect recommend to support scalability and reduce maintenance costs, if the organization has more than 150 sub-brands?

A. Use Audiences to customize the login experience for each sub-brand and pass an audience ID to the community during the OAuth and Security Assertion Markup Language (SAML) flows.
B. Create a separate Salesforce org for each sub-brand so that each sub-brand has complete control over the user experience.
C. Create a community subdomain for each sub-brand and customize the look and feel of the Login page for each community subdomain to match the brand.
D. Assign each sub-brand a unique Experience ID and use the Experience ID to dynamically brand the login experience.

問題 #2

Universal Containers (UC) is looking to build a Canvas app and wants to use the corresponding Connected App to control where the app is visible. Which two options are correct in regards to where the app can be made visible under the Connected App setting for the Canvas app? Choose 2 answers

A. The sidebar of a Salesforce Console as a console component.
B. In the mobile navigation menu on Salesforce for Android.
C. Included in the Call Control Tool that's part of Open CTI.
D. As part of the body of a Salesforce Knowledge article.

問題 #3

Northern Trail Outfitters (NTO) employees use a custom on-premise helpdesk application to request, approve, notify, and track access granted to various on-premises and cloud applications, including Salesforce. Salesforce is currently used to authenticate users.
How should NTO provision Salesforce users as soon as they are approved in the helpdesk application with the approved profiles and permission sets?

A. Have the helpdesk initiate an IdP-initiated Just-m-Time provisioning Security Assertion Markup Language flow.
B. Build an integration that performs a remote call-in to the Salesforce SOAP or REST API.
C. Use Salesforce Connect to integrate with the helpdesk application.
D. Use a login flow to query the helpdesk to validate user status.

問題 #4

Northern Trail Outfitters (NTO) uses a Security Assertion Markup Language (SAML)-based Identity Provider (idP) to authenticate employees to all systems. The IdP authenticates users against a Lightweight Directory Access Protocol (LDAP) directory and has access to user information. NTO wants to minimize Salesforce license usage since only a small percentage of users need Salesforce.
What is recommended to ensure new employees have immediate access to Salesforce using their current IdP?

A. Build an integration that queries LDAP periodically and creates new active users in Salesforce.
B. Install Salesforce Identity Connect to automatically provision new users in Salesforce the first time they attempt to login.
C. Configure Just-in-Time provisioning using SAML attributes to create new Salesforce users as necessary when a new user attempts to login to Salesforce.
D. Build an integration that queries LDAP and creates new inactive users in Salesforce and use a login flow to activate the user at first login.

問題 #5

An organization has a central cloud-based Identity and Access Management (IAM) Service for authentication and user management, which must be utilized by all applications as follows:
1 - Change of a user status in the central IAM Service triggers provisioning or deprovisioining in the integrated cloud applications.
2 - Security Assertion Markup Language single sign-on (SSO) is used to facilitate access for users authenticated at identity provider (Central IAM Service).
Which approach should an IAM architect implement on Salesforce Sales Cloud to meet the requirements?

A. Configure Salesforce as a SAML service provider, and enable Just-in Time (JIT) provisioning and deprovisioning of users.
B. A Configure Salesforce as a SAML Service Provider, and enable SCIM (System for Cross-Domain Identity Management) for provisioning and deprovisioning of users.
C. Deploy Identity Connect component and set up automated provisioning and deprovisioning of users, as well as SAML-based SSO.
D. Configure central IAM Service as an authentication provider and extend registration handler to manage provisioning and deprovisioning of users.

問題與答案：