Salesforce Identity-and-Access-Management-designer Exam Questions Instant Access

Question 1

Universal Containers (UC) has a strict requirement to authenticate users to Salesforce using their mainframe credentials. The mainframe user store cannot be accessed from a SAML provider. UC would also like to have users in Salesforce created on the fly if they provide accurate mainframe credentials.

How can the Architect meet these requirements?

AUse a Salesforce Login Flow to call out to a web service and create the user on the fly.

BUse the SOAP API to create the user when created on the mainframe; implement Delegated Authentication.

CImplement Just-In-Time Provisioning on the mainframe to create the user on the fly.

DImplement OAuth User-Agent Flow on the mainframe; use a Registration Handler to create the user on the fly.

Answer : C

Question 2

Which two are valid choices for digital certificates when setting up two-way SSL between Salesforce and an external system. Choose 2 answers

AUse a trusted CA-signed certificate for salesforce and a trusted CA-signed cert for the external system

BUse a trusted CA-signed certificate for salesforce and a self-signed cert for the external system

CUse a self-signed certificate for salesforce and a self-signed cert for the external system

DUse a self-signed certificate for salesforce and a trusted CA-signed cert for the external system

Answer : C, D

Question 3

Which two statements are capable of Identity Connect? Choose 2 answers

ASynchronization of Salesforce Permission Set Licence Assignments.

BSupports both Identity-Provider-Initiated and Service-Provider-Initiated SSO.

CSupport multiple orgs connecting to multiple Active Directory servers.

DAutomated user synchronization and de-activation.

Answer : B, D

Question 4

Universal containers (UC) has decided to use identity connect as it's identity provider. UC uses active directory(AD) and has a team that is very familiar and comfortable with managing ad groups. UC would like to use AD groups to help configure salesforce users. Which three actions can AD groups control through identity connect? Choose 3 answers

APublic Group Assignment

BGranting report folder access

CRole Assignment

DCustom permission assignment

EPermission sets assignment

Answer : A, C, E

Question 5

Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the OAuth 2.0 user-agent flow. Application users will authenticate using username and password. They should not be forced to approve API access in the mobile app or reauthenticate for 3 months.

Which two connected app options need to be configured to fulfill this use case?

Choose 2 answers

ASet Permitted Users to 'Admin approved users are pre-authorized'.

BSet Permitted Users to 'All users may self-authorize'.

CSet the Session Timeout value to 3 months.

DSet the Refresh Token Policy to expire refresh token after 3 months.

Answer : B, D

Question 6

Northern Trail Outfitters would like to use a portal built on Salesforce Experience Cloud for customer self-service. Guests of the portal be able to self-register, but be unable to automatically be assigned to a contact record until verified. External Identity licenses have bee purchased for the project.

After registered guests complete an onboarding process, a flow will create the appropriate account and contact records for the user.

Which three steps should an identity architect follow to implement the outlined requirements?

Choose 3 answers

AEnable 'Allow customers and partners to self-register'.

BSelect the 'Configurable Self-Reg Page' option under Login & Registration.

CSet jp an external login page and call Salesforce APIs for user creation.

DCustomize the self-registration Apex handler to temporarily associate the user to a shared single contact record.

ECustomize me self-registration Apex handler to create only the user record.

Answer : A, B, E

Question 7

Universal containers (UC) is successfully using Delegated Authentication for their salesforce users. The service supporting Delegated Authentication is written in Jav

a. UC has a new CIO that is requiring all company Web services be RESR-ful and written in . NET. Which two considerations should the UC Architect provide to the new CIO? Choose 2 answers

ADelegated Authentication will not work with a.net service.

BDelegated Authentication will continue to work with rest services.

CDelegated Authentication will continue to work with a.net service.

DDelegated Authentication will not work with rest services.

Answer : C, D

Salesforce Identity and Access Management Designer Identity-and-Access-Management-designer Exam Questions