2022 Latest Salesforce Identity-and-Access-Management-Designer Real Exam Dumps PDF
Identity-and-Access-Management-Designer Exam Dumps, Identity-and-Access-Management-Designer Practice Test Questions
NEW QUESTION 118
What are three capabilities of Delegated Authentication? Choose 3 answers
- A. It can be assigned by Custom Permissions.
- B. It can be assigned by Permission Sets.
- C. It can be assigned by Profiles.
- D. It can connect to SOAP services.
- E. It can connectto REST services.
Answer: B,D,E
NEW QUESTION 119
Universal Containers (UC) has a classified information system that its call center team uses only when they are working on a case with a record type "Classified". They are only allowed to access the system when they own an open "Classified" case, and their access to the system is removed at all other times. They would like to implement SAML SSO eith Salesforce as the Idp, and automatically allow or deny the staff's access to the classified information system based on whether they currently own an open "Classified" case record when they try to access the system using SSO. What is the recommended solution for automatically allowing or denying the access to the classified information system based on the open "classified" case record criteria?
- A. Use Custom SAML JIT Provisioning to dynamically query the user's open "Classified" cases when attempting to access the classified information system.
- B. Use Salesforce reports to identify users that currently owns open "Classified" cases and should be granted access to the Classified information system.
- C. Use a Common Connected App Handler using Apex to dynamically allow access to the system based on whether the staff owns any open "Classified" Cases.
- D. Use Apex trigger on case to dynamically assign permission Sets that Grant access when an user is assigned with an open "Classified" case, and remove it when the case is closed.
Answer: C
NEW QUESTION 120
Universal containers (UC) uses an internal company portal for their employees to collaborate. UC decides to use salesforce ideas and provide the ability for employees to post ideas from the company portal. They use SAML-BASED SSO to get into the company portal and would like to leverage it to access salesforce. Most of the users don't exist in salesforce and they would like the user records created in salesforce communities the first time they try to access salesforce. What recommendation should an architect make to meet this requirement?
- A. Use salesforce APIs to create users on the fly
- B. Use just-in-time provisioning
- C. Use Identity connect to sync users
- D. Use on-the-fly provisioning
Answer: B
NEW QUESTION 121
Ttie executive sponsor for an organization has asked if Salesforce supports the ability to embed a login widget into its service providers in order to create a more seamless user experience.
What should be used and considered before recommending it as a solution on the Salesforce Platform?
- A. OpenID Connect Web Server Flow. Determine if the service provider is secure enough to store the client secret on.
- B. Salesforce REST apis. Ensure that Secure Sockets Layer (SSL) connection for the integration is used.
- C. Embedded Login. Identify what level of UI customization will be required to make it match the service providers look and feel.
- D. Embedded Login. Consider whether or not it relies on third party cookies which can cause browser compatibility issues.
Answer: B
NEW QUESTION 122
Universal Containers (UC) is building an authenticated Customer Community for its customers. UC does not want customer credentials stored in Salesforce and is confident its customers would be willing to use their social media credentials to authenticate to the Community.
Which two actions should an Architect recommend UC to take? (Choose two.)
- A. Configure SSO settings for Facebook to serve as a SAML Identity Provider.
- B. Configure an Authentication Provider for LinkedIn social media accounts.
- C. Use Delegated Authentication to call the Twitter login API to authenticate users.
- D. Create a custom Apex Registration Handler to handle new and existing users.
Answer: B,D
NEW QUESTION 123
Which three are capabilities of SAML-based Federated authentication? Choose 3 answers
- A. SAML tokens can be in XML or JSON format and can be used interchangeably.
- B. Trust relationships between Identity Provider and Service Provider are required.
- C. Web applications with no passwords are more secure and stronger against attacks.
- D. Centralized federation provides single point of access, control and auditing.
- E. Access tokens are used to access resources on the server once the user is authenticated.
Answer: B,D,E
NEW QUESTION 124
Northern Trail Outfitters manages application functional permissions centrally as Active Directory groups. The CRM_Superllser and CRM_Reportmg_SuperUser groups should respectively give the user the SuperUser and Reportmg_SuperUser permission set in Salesforce. Salesforce is the service provider to a Security Assertion Markup Language (SAML) identity provider.
Mow should an identity architect ensure the Active Directory groups are reflected correctly when a user accesses Salesforce?
- A. Use a login flow to query standard SAML attributes and set permission sets.
- B. Use the Apex Just-in-Time handler to query standard SAML attributes and set permission sets.
- C. Use a login flow to query custom SAML attributes and set permission sets.
- D. Use the Apex Just-m-Time handler to query custom SAML attributes and set permission sets.
Answer: D
NEW QUESTION 125
Universal Containers is budding a web application that will connect with the Salesforce API using JWT OAuth Flow.
Which two settings need to be configured in the connect app to support this requirement?
Choose 2 answers
- A. The Use Digital Signature option in the connected app.
- B. The "web" OAuth scope in the connected app,
- C. The "edair_api" OAuth scope m the connected app.
- D. The "api" OAuth scope in the connected app.
Answer: A,D
NEW QUESTION 126
An Identity and Access Management (IAM) architect is tasked with unifying multiple B2C Commerce sites and an Experience Cloud community with a single identity. The solution needs to support more than 1,000 logins per minute.
What should the IAM do to fulfill this requirement?
- A. Configure both the community and the commerce sites as OAuth2 RPs (relying party) with an external identity provider.
- B. Create a default account for capturing all ecommerce contacts registered on the community because personAccount is not supported for this case.
- C. Confirm performance considerations with Salesforce Customer Support due to high peaks.
- D. Configure community as a Security Assertion Markup Language (SAML) identity provider and enable Just-in-Time Provisioning to B2C Commerce.
Answer: C
NEW QUESTION 127
Which three are features of federated Single Sign-on solutions? (Choose three.)
- A. It solves all identity and access management problems.
- B. It establishes trust between Identity Store and Service Provider.
- C. It improves affiliated applications adoption rates.
- D. It federates credentials control to authorized applications.
- E. It enables quick and easy provisioning and deactivating of users.
Answer: B,C,E
NEW QUESTION 128
Universal Containers (UC) has an e-commerce website where customers can buy products, make payments and manage their accounts. UC decides to build a Customer Community on Salesforce and wants to allow the customers to access the community from their accounts without logging in again. UC decides to implement an SP-initiated SSO using a SAML-compliant Idp. In this scenario where Salesforce is the Service Provider, which two activities must be performed in Salesforce to make SP-initiated SSO work? Choose 2 answers
- A. Configure Delegated Authentication.
- B. Configure SAML SSO settings.
- C. Set up My Domain.
- D. Create a Connected App.
Answer: B,C
NEW QUESTION 129
Universal Containers (UC) wants to build a few applications that leverage the Salesforce REST API. UC has asked its Architect to describe how the API calls will be authenticated to a specific user. Which two mechanisms can the Architect provide? Choose 2 Answers
- A. Session ID
- B. Refresh Token
- C. Access Token
- D. Authentication Token
Answer: C,D
NEW QUESTION 130
What item should an Architect consider when designing a Delegated Authentication implementation?
- A. The web service should use the Salesforce Federation ID to identify the user.
- B. The Web service should implement a custom password decryption method.
- C. The Web service should be able to accept one to four input method parameters.
- D. The Web service should be secured with TLS using Salesforce trusted certificates.
Answer: B
NEW QUESTION 131
How should an Architect automatically redirect users to the login page of the external Identity provider when using an SP-Initiated SAML flow with Salesforce as a Service Provider?
- A. Set the Identity Provider as default and enable the Redirect to the Identity Provider setting on the SAML Configuration.
- B. Use visualforce as the landing page for My Domain to redirect users to the Identity Provider login Page.
- C. Enable the Redirect to the Identity Provider setting under Authentication Services on the My domain Configuration.
- D. Remove the Login page from the list of Authentication Services on the My Domain configuration.
Answer: D
NEW QUESTION 132
In a typical SSL setup involving a trusted party and trusting party, what consideration should an Architect take into account when using digital certificates?
- A. Use of self-signed certificate leads to higher maintenance for trusted party because they have to act as the trusted CA
- B. Use of self-signed certificate leads to higher maintenance for trusting party because the cert needs to be added to their truststore.
- C. Use of self-signed certificate leads to lower maintenance for trusting party because there is no trusted CA cert to maintain.
- D. Use of self-signed certificate leads to lower maintenance for trusted party because multiple self-signed certs need to be maintained.
Answer: C
NEW QUESTION 133
Northern Trail Outfitters (NTO) wants to give customers the ability to submit and manage issues with their purchases. It is important for to give its customers the ability to login with their Facebook and Twitter credentials.
Which two actions should an identity architect recommend to meet these requirements?
Choose 2 answers
- A. Configure a predefined authentication provider for Facebook.
- B. Create a custom external authentication provider for Facebook.
- C. Configure a predefined authentication provider for Twitter.
- D. Create a custom external authentication provider for Twitter.
Answer: A,C
NEW QUESTION 134
A third-party app provider would like to have users provisioned via a service endpoint before users access their app from Salesforce.
What should an identity architect recommend to configure the requirement with limited changes to the third-party app?
- A. Redirect users to the third-party app for registration.
- B. Use Salesforce identity with Security Assertion Markup Language (SAML) for provisioning users.
- C. Create Canvas app in Salesforce for third-party app to provision users.
- D. Use a connected app with user provisioning flow.
Answer: D
NEW QUESTION 135
Universal Containers (UC) is looking to purchase a third-party application as an Identity Provider. UC is looking to develop a business case for the purchase in general and has enlisted an Architect for advice. Which twocapabilities of an Identity Provider should the Architect detail to help strengthen the business case? Choose
2 answers
- A. The Identity provider can store credentials for multiple applications.
- B. The Identity Provider can authenticate multiple applications.
- C. The Identity Provider can authenticate multiple social media accounts.
- D. The Identity Provider can centralize enterprise password policy.
Answer: B,D
NEW QUESTION 136
Universal Containers (UC) has built a custom time tracking app for its employee. UC wants to leverage Salesforce Identity to control access to the custom app.
At a minimum, which Salesforce license is required to support this requirement?
- A. External Identity
- B. Identity Verification
- C. Identity Only
- D. Identity Connect
Answer: C
NEW QUESTION 137
Universal Containers (UC) wants to use Salesforce for sales orders and a legacy of system for order fulfillment. The legacy system must update the status of orders in 65* Salesforce in real time as they are fulfilled. UC decides to use OAuth for connecting the legacy system to Salesforce. What OAuth flow should be considered that doesn't require storing credentials, client secret or refresh tokens?
- A. Username-Password flow
- B. Web Server flow
- C. JWT Bearer Token flow
- D. User Agent flow
Answer: C
NEW QUESTION 138
Universal Containers (UC) uses a home-grown Employee portal for their employees to collaborate. UC decides to use Salesforce Ideas to allow the employees to post ideas from the Employee portal. When clicking some links in the Employee portal, the users should be redirected to Salesforce, authenticated, and presented with relevant pages.
What scope should be requested when using the OAuth token to meet this requirement?
- A. api
- B. full
- C. Visualforce
- D. web
Answer: D
Explanation:
Explanation
NEW QUESTION 139
......
PDF (New 2022) Actual Salesforce Identity-and-Access-Management-Designer Exam Questions: https://www.dumpstillvalid.com/Identity-and-Access-Management-Designer-prep4sure-review.html
Dumps Moneyack Guarantee - Identity-and-Access-Management-Designer Dumps UpTo 90% Off: https://drive.google.com/open?id=1_M3mMk9i0-ssgcqLXLqfF4NKtQO0BvJB
