20:00

PDF|

Guide for Salesforce Certified Identity and Access Management Architect

Quiz Salesforce Certified Identity and Access Management Architect

Free Test
/ 10

Quiz

1/10
A client is planning to rollout multi-factor authentication (MFA) to its internal employees and wants
to understand which authentication and verification methods meet the Salesforce criteria for secure
authentication.
Which three functions meet the Salesforce criteria for secure mfa?
Choose 3 answers
Select the answer
3 correct answers
A.
username and password + SMS passcode
B.
Username and password + secunty key
C.
Third-party single sign-on with Mobile Authenticator app
D.
Certificate-based Authentication
E.
Lightning Login

Quiz

2/10
Universal Containers (UC) has a classified information system that its call center team uses
only when they are working on a case with a record type "Classified". They are only allowed to access
the system when they own an open "Classified" case, and their access to the system is removed at all
other times. They would like to implement SAML SSO eith Salesforce as the Idp, and automatically
allow or deny the staff's access to the classified information system based on whether they currently
own an open "Classified" case record when they try to access the system using SSO. What is the
recommended solution for automatically allowing or denying the access to the classified information
system based on the open "classified" case record criteria?
Select the answer
1 correct answer
A.
Use Salesforce reports to identify users that currently owns open "Classified" cases and should be
granted access to the Classified information system.
B.
Use Apex trigger on case to dynamically assign permission Sets that Grant access when an user is
assigned with an open "Classified" case, and remove it when the case is closed.
C.
Use Custom SAML JIT Provisioning to dynamically query the user's open "Classified" cases when
attempting to access the classified information system.
D.
Use a Common Connected App Handler using Apex to dynamically allow access to the system
based on whether the staff owns any open "Classified" Cases.

Quiz

3/10
How should an Architect automatically redirect users to the login page of the external
Identity provider when using an SP-Initiated SAML flow with Salesforce as a Service Provider?
Select the answer
1 correct answer
A.
Use visualforce as the landing page for My Domain to redirect users to the Identity Provider login
Page.
B.
Enable the Redirect to the Identity Provider setting under Authentication Services on the My
domain Configuration.
C.
Remove the Login page from the list of Authentication Services on the My Domain configuration.
D.
Set the Identity Provider as default and enable the Redirect to the Identity Provider setting on the
SAML Configuration.

Quiz

4/10
Universal Containers (UC) has an e-commerce website where customers can buy products,
make payments and manage their accounts. UC decides to build a Customer Community on
Salesforce and wants to allow the customers to access the community from their accounts without
logging in again. UC decides to implement an SP-initiated SSO using a SAML-compliant Idp. In this
scenario where Salesforce is the Service Provider, which two activities must be performed in
Salesforce to make SP-initiated SSO work? Choose 2 answers
Select the answer
2 correct answers
A.
Configure SAML SSO settings.
B.
Create a Connected App.
C.
Configure Delegated Authentication.
D.
Set up My Domain.

Quiz

5/10
Universal Containers (UC) has a custom, internal-only, mobile billing application for users who
are commonly out of the office. The app is configured as a connected App in Salesforce. Due to the
nature of this app, UC would like to take the appropriate measures to properly secure access to the
app. Which two are recommendations to make the UC? Choose 2 answers
Select the answer
2 correct answers
A.
Disallow the use of Single Sign-on for any users of the mobile app.
B.
Require High Assurance sessions in order to use the Connected App.
C.
Set Login IP Ranges to the internal network for all of the app users Profiles.
D.
Use Google Authenticator as an additional part of the login process

Quiz

6/10
What information does the 'Relaystate' parameter contain in sp-Initiated Single Sign-on?
Select the answer
1 correct answer
A.
Reference to a URL redirect parameter at the identity provider.
B.
Reference to a URL redirect parameter at the service provider.
C.
Reference to the login address URL of the service provider.
D.
Reference to the login address URL of the identity Provider.

Quiz

7/10
Which three types of attacks would a 2-Factor Authentication solution help garden against?
Select the answer
3 correct answers
A.
Key logging attacks
B.
Network perimeter attacks
C.
Phishing attacks
D.
Dictionary attacks
E.
Man-in-the-middle attacks

Quiz

8/10
Universal Containers (UC) plans to use a SAML-based third-party IdP serving both of the
Salesforce Partner Community and the corporate portal. UC partners will log in 65* to the corporate
portal to access protected resources, including links to Salesforce resources. What would be the
recommended way to configure the IdP so that seamless access can be achieved in this scenario?
Select the answer
1 correct answer
A.
Set up the corporate portal as a Connected App in Salesforce and use the Web server OAuth flow.
B.
Configure SP-initiated SSO that passes the SAML token upon Salesforce resource access request.
C.
Set up the corporate portal as a Connected App in Salesforce and use the User Agent OAuth flow.
D.
Configure IdP-initiated SSO that passes the SAML token upon Salesforce resource access request.

Quiz

9/10
Universal Containers (UC) wants to use Salesforce for sales orders and a legacy of system for
order fulfillment. The legacy system must update the status of orders in 65* Salesforce in real time as
they are fulfilled. UC decides to use OAuth for connecting the legacy system to Salesforce. What
OAuth flow should be considered that doesn't require storing credentials, client secret or refresh
tokens?
Select the answer
1 correct answer
A.
Web Server flow
B.
JWT Bearer Token flow
C.
Username-Password flow
D.
User Agent flow

Quiz

10/10
Universal Containers (UC) has a Customer Community that uses Facebook for of
authentication. UC would like to ensure that changes in the Facebook profile are 65. reflected on the
appropriate Customer Community user. How can this requirement be met?
Select the answer
1 correct answer
A.
Use SAML Just-In-Time Provisioning between Facebook and Salesforce.
B.
Use information in the Signed Request that is received from Facebook.
C.
Develop a scheduled job that calls out to Facebook on a nightly basis.
D.
Use the updateUser() method on the Registration Handler class.
Looking for more questions?Buy now

Salesforce Certified Identity and Access Management Architect Practice test unlocks all online simulator questions

Thank you for choosing the free version of the Salesforce Certified Identity and Access Management Architect practice test! Further deepen your knowledge on Salesforce Simulator; by unlocking the full version of our Salesforce Certified Identity and Access Management Architect Simulator you will be able to take tests with over 247 constantly updated questions and easily pass your exam. 98% of people pass the exam in the first attempt after preparing with our 247 questions.

BUY NOW

What to expect from our Salesforce Certified Identity and Access Management Architect practice tests and how to prepare for any exam?

The Salesforce Certified Identity and Access Management Architect Simulator Practice Tests are part of the Salesforce Database and are the best way to prepare for any Salesforce Certified Identity and Access Management Architect exam. The Salesforce Certified Identity and Access Management Architect practice tests consist of 247 questions and are written by experts to help you and prepare you to pass the exam on the first attempt. The Salesforce Certified Identity and Access Management Architect database includes questions from previous and other exams, which means you will be able to practice simulating past and future questions. Preparation with Salesforce Certified Identity and Access Management Architect Simulator will also give you an idea of the time it will take to complete each section of the Salesforce Certified Identity and Access Management Architect practice test . It is important to note that the Salesforce Certified Identity and Access Management Architect Simulator does not replace the classic Salesforce Certified Identity and Access Management Architect study guides; however, the Simulator provides valuable insights into what to expect and how much work needs to be done to prepare for the Salesforce Certified Identity and Access Management Architect exam.

BUY NOW

Salesforce Certified Identity and Access Management Architect Practice test therefore represents an excellent tool to prepare for the actual exam together with our Salesforce practice test . Our Salesforce Certified Identity and Access Management Architect Simulator will help you assess your level of preparation and understand your strengths and weaknesses. Below you can read all the quizzes you will find in our Salesforce Certified Identity and Access Management Architect Simulator and how our unique Salesforce Certified Identity and Access Management Architect Database made up of real questions:

Info quiz:

  • Quiz name:Salesforce Certified Identity and Access Management Architect
  • Total number of questions:247
  • Number of questions for the test:50
  • Pass score:80%

You can prepare for the Salesforce Certified Identity and Access Management Architect exams with our mobile app. It is very easy to use and even works offline in case of network failure, with all the functions you need to study and practice with our Salesforce Certified Identity and Access Management Architect Simulator.

Use our Mobile App, available for both Android and iOS devices, with our Salesforce Certified Identity and Access Management Architect Simulator . You can use it anywhere and always remember that our mobile app is free and available on all stores.

Our Mobile App contains all Salesforce Certified Identity and Access Management Architect practice tests which consist of 247 questions and also provide study material to pass the final Salesforce Certified Identity and Access Management Architect exam with guaranteed success. Our Salesforce Certified Identity and Access Management Architect database contain hundreds of questions and Salesforce Tests related to Salesforce Certified Identity and Access Management Architect Exam. This way you can practice anywhere you want, even offline without the internet.

BUY NOW