Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Exam Questions Instant Access

Question 1

IT security at Unversal Containers (UC) us concerned about recent phishing scams targeting its users and wants to add additional layers of login protection. What should an Architect recommend to address the issue?

AUse the Salesforce Authenticator mobile app with two-step verification

BLock sessions to the IP address from which they originated.

CIncrease Password complexity requirements in Salesforce.

DImplement Single Sign-on using a corporate Identity store.

Answer : A

Question 2

customer service representatives at Universal containers (UC) are complaining that whenever they click on links to case records and are asked to login with SAML SSO, they are being redirected to the salesforce home tab and not the specific case record. What item should an architect advise the identity team at UC to investigate first?

AMy domain is configured and active within salesforce.

BThe salesforce SSO settings are using http post

CThe identity provider is correctly preserving the Relay state

DThe users have the correct Federation ID within salesforce.

Answer : C

Question 3

Universal Containers (UC) has Active Directory (AD) as their enterprise identity store and would like to use it for Salesforce user authentication. UC expects to synchronize user data between Salesforce and AD and Assign the appropriate Profile and Permission Sets based on AD group membership. What would be the optimal way to implement SSO?

AUse Active Directory with Reverse Proxy as the Identity Provider.

BUse Microsoft Access control Service as the Authentication provider.

CUse Active Directory Federation Service (ADFS) as the Identity Provider.

DUse Salesforce Identity Connect as the Identity Provider.

Answer : D

Question 4

Universal Containers (UC) has an e-commerce website where customers can buy products, make payments and manage their accounts. UC decides to build a Customer Community on Salesforce and wants to allow the customers to access the community from their accounts without logging in again. UC decides to implement an SP-initiated SSO using a SAML-compliant Idp. In this scenario where Salesforce is the Service Provider, which two activities must be performed in Salesforce to make SP-initiated SSO work? Choose 2 answers

AConfigure SAML SSO settings.

BCreate a Connected App.

CConfigure Delegated Authentication.

DSet up My Domain.

Answer : A, D

Question 5

Universal Containers (UC) is looking to build a Canvas app and wants to use the corresponding Connected App to control where the app is visible. Which two options are correct in regards to where the app can be made visible under the Connected App setting for the Canvas app? Choose 2 answers

AAs part of the body of a Salesforce Knowledge article.

BIn the mobile navigation menu on Salesforce for Android.

CThe sidebar of a Salesforce Console as a console component.

DIncluded in the Call Control Tool that's part of Open CTI.

Answer : A, C

Question 6

Universal Container's (UC) is using Salesforce Experience Cloud site for its container wholesale business. The identity architect wants to an authentication provider for the new site.

Which two options should be utilized in creating an authentication provider?

Choose 2 answers

AA custom registration handier can be set.

BA custom error URL can be set.

CThe default login user can be set.

DThe default authentication provider certificate can be set.

Answer : A, B

Question 7

A division of a Northern Trail Outfitters (NTO) purchased Salesforce. NTO uses a third party identity provider (IdP) to validate user credentials against Its corporate Lightweight Directory Access Protocol (LDAP) directory. NTO wants to help employees remember as passwords as possible.

What should an identity architect recommend?

ASetup Salesforce as a Service Provider to the existing IdP.

BSetup Salesforce as an IdP to authenticate against the LDAP directory.

CUse Salesforce connect to synchronize LDAP passwords to Salesforce.

DSetup Salesforce as an Authentication Provider to the existing IdP.

Answer : A