Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home Salesforce Certified Identity and Access Management Designer

Salesforce Certified Identity and Access Management Designer Exam Practice Questions (P. 3)

  • Full Access (60 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #11
Universal Containers has implemented a multi-org strategy and would like to centralize the management of their Salesforce user profiles.
What should the Architect recommend to allow Salesforce profiles to be managed from a central system of record?
  1. A
    Implement JIT provisioning on the SAML IdP that will pass the ProfileID in each assertion.
  2. B
    Implement Delegated Authentication that will update the user profiles as necessary.
  3. C
    Create an Apex scheduled job in one org that will synchronize the other org's profiles.
  4. D
    Implement an OAuth JWT flow to pass the profile credentials between systems.

Correct Answer:
A

Question #12
Universal Containers (UC) has implemented SAML-based Single Sign-on for their Salesforce application. UC is using PingFederate as the Identity Provider. To access Salesforce, users usually navigate to a bookmarked link to My Domain URL.
What type of Single Sign-on flow is this?
  1. A
    IdP-Initiated
  2. B
    IdP-Initiated with Deep Linking
  3. C
    SP-Initiated
  4. D
    Web Server Flow

Correct Answer:
C

Question #13
What item should an Architect consider when designing a Delegated Authentication implementation?
  1. A
    The web service should be secured with TLS using Salesforce trusted certificates.
  2. B
    The web service should be able to accept one to four input method parameters.
  3. C
    The web service should use the Salesforce Federation ID to identify the user.
  4. D
    The web service should implement a custom password decryption method.

Correct Answer:
A

Question #14
Universal Containers has built a custom token-based Two-Factor Authentication system for their existing on-premise applications. They are now implementing Salesforce and would like to enable a Two-Factor login process for it, as well.
What is the recommended solution an Architect should consider?
  1. A
    Replace the custom 2FA system with an AppExchange App that supports on-premise applications and Salesforce.
  2. B
    Use the custom 2FA system for on-premise applications and native 2FA for Salesforce.
  3. C
    Replace the custom 2FA system with Salesforce 2FA for on-premise applications and Salesforce.
  4. D
    Use Custom Login Flows to connect to the existing custom 2FA system for use in Salesforce.

Correct Answer:
D

Question #15
Universal Containers (UC) is looking to purchase a third-party application as an Identity Provider. UC is looking to develop a business case for the purchase in general and has enlisted an Architect for advice.
Which two capabilities of an Identity Provider should the Architect detail to help strengthen the business case? (Choose two.)
  1. A
    The Identity Provider can authenticate multiple applications.
  2. B
    The Identity Provider can authenticate multiple social media accounts.
  3. C
    The Identity Provider can store credentials for multiple applications.
  4. D
    The Identity Provider can centralize enterprise password policy.

Correct Answer:
CD

Previous Questions Next Questions

All Pages