Identity-and-Access-Management-Architect Exam Dumps – Try Best Identity-and-Access-Management-Architect Exam Questions from Training Expert ExamsTorrent [Q36-Q59]

Rate this post

Identity-and-Access-Management-Architect Exam Dumps – Try Best Identity-and-Access-Management-Architect Exam Questions from Training Expert ExamsTorrent

Practice Examples and Dumps & Tips for 2024 Latest Identity-and-Access-Management-Architect Valid Tests Dumps

Passing the Salesforce Identity-and-Access-Management-Architect Certification Exam is a significant achievement for professionals in the identity and access management field. It demonstrates their expertise in the Salesforce platform’s identity and access management capabilities and their ability to design and implement complex solutions that meet their clients’ needs. Certified professionals can leverage their certification to advance their careers and take on more challenging projects, which can lead to higher salaries, more opportunities, and greater job satisfaction.

Salesforce Identity-and-Access-Management-Architect (Salesforce Certified Identity and Access Management Architect) Certification Exam is designed for professionals who want to demonstrate their expertise in the field of identity and access management within the Salesforce platform. Salesforce Certified Identity and Access Management Architect certification exam is aimed at individuals who have experience in designing and implementing complex identity and access management solutions in Salesforce.

Q36. Universal Containers (UC) uses middleware to integrate multiple systems with Salesforce. UC has a strict, new requirement that usernames and passwords cannot be stored in any UC system. How can UC’s middleware authenticate to Salesforce while adhering to this requirement?

Create a Connected App that supports the JWT Bearer Token OAuth Flow.

Create a Connected App that supports the Refresh Token OAuth Flow

Create a Connected App that supports the Web Server OAuth Flow.

Create a Connected App that supports the User-Agent OAuth Flow.

Q37. Universal containers(UC) has implemented SAML-BASED single Sign-on for their salesforce application and is planning to provide access to salesforce on mobile devices using the salesforce1 mobile app. UC wants to ensure that single Sign-on is used for accessing the salesforce1 mobile app. Which two recommendations should the architect make? Choose 2 answers

Use the existing SAML SSO flow along with user agent flow.

Configure the embedded Web browser to use my domain URL.

Use the existing SAML SSO flow along with Web server flow

Configure the salesforce1 app to use the my domain URL

Q38. Universal Containers (UC) uses Salesforce as a CRM and identity provider (IdP) for their Sales Team to seamlessly login to intemaJ portals. The IT team at UC is now evaluating Salesforce to act as an IdP for its remaining employees.
Which Salesforce license is required to fulfill this requirement?

External Identity

Identity Verification

Identity Connect

Identity Only

Q39. An identity architect has built a native mobile application and plans to integrate it with a Salesforce Identity solution. The following are the requirements for the solution:
1. Users should not have to login every time they use the app.
2. The app should be able to make calls to the Salesforce REST API.
3. End users should NOT see the OAuth approval page.
How should the identity architect configure the Salesforce connected app to meet the requirements?

Enable the API Scope and Offline Access Scope, upload a certificate so JWT Bearer Flow can be used and then set the connected app access settings to “Admin Pre-Approved”.

Enable the API Scope and Offline Access Scope on the connected app, and then set the connected app to access settings to ‘Admin Pre-Approved”.

Enable the Full Access Scope and then set the connected app access settings to “Admin Pre-Approved”.

Enable the API Scope and Offline Access Scope on the connected app, and then set the Connected App access settings to “User may self authorize”.

Q40. Northern Trail Outfitters would like to use a portal built on Salesforce Experience Cloud for customer self-service. Guests of the portal be able to self-register, but be unable to automatically be assigned to a contact record until verified. External Identity licenses have been purchased for the project.
After registered guests complete an onboarding process, a flow will create the appropriate account and contact records for the user.
Which three steps should an identity architect follow to implement the outlined requirements?
Choose 3 answers

Enable “Allow customers and partners to self-register”.

Select the “Configurable Self-Reg Page” option under Login & Registration.

Set jp an external login page and call Salesforce APIs for user creation.

Customize the self-registration Apex handler to temporarily associate the user to a shared single contact record.

Customize me self-registration Apex handler to create only the user record.

Q41. Northern Trail Outfitters (NTO) uses Salesforce for Sales Opportunity Management. Okta was recently brought in to Just-in-Time (JIT) provision and authenticate NTO users to applications. Salesforce users also use Okta to authorize a Forecasting web application to access Salesforce records on their behalf.
Which two roles are being performed by Salesforce?
Choose 2 answers

SAML Identity Provider

OAuth Client

OAuth Resource Server

SAML Service Provider

Q42. Northern Trail Outfitters (NTO) wants to give customers the ability to submit and manage issues with their purchases. It is important for NTO to give its customers the ability to login with their Amazon credentials.
What should an identity architect recommend to meet these requirements?

Configure a predefined authentication provider for Amazon.

Create a custom external authentication provider for Amazon.

Configure an OpenID Connect Authentication Provider for Amazon.

Configure Amazon as a connected app.

Q43. Northern Trail Outfitters (NTO) leverages Microsoft Active Directory (AD) for management of employee usernames, passwords, permissions, and asset access. NTO also owns a third-party single sign-on (SSO) solution. The third-party party SSO solution is used for all corporate applications, including Salesforce.
NTO has asked an architect to explore Salesforce Identity Connect for automatic provisioning and deprovisioning of users in Salesforce.
What role does identity Connect play in the outlined requirements?

Service Provider

Single Sign-On

Identity Provider

User Management

Q44. Universal Containers (UC) is building a customer community and will allow customers to authenticate using Facebook credentials. The First time the user authenticating using Facebook, UC would like a customer account created automatically in their accounting system. The accounting system has a web service accessible to Salesforce for the creation of accounts. How can the Architect meet these requirements?

Create a custom application on Heroku that manages the sign-on process from Facebook.

Use JIT Provisioning to automatically create the account in the accounting system.

Add an Apex callout in the registration handler of the authorization provider.

Use OAuth JWT flow to pass the data from Salesforce to the Accounting System.

Q45. Northern Trail Outfitters (NTO) has an off-boarding process where a terminated employee is first disabled in the Lightweight Directory Act Protocol (LDAP) directory, then requests are sent to the various application support teams to finish user deactivations. A terminated employee recently was able to login to NTO’s Salesforce instance 24 hours after termination, even though the user was disabled in the corporate LDAP directory.
What should an identity architect recommend to prevent this from happening in the future?

Create a Just-in-Time provisioning registration handler to ensure users are deactivated in Salesforce as they are disabled in LDAP.

Configure an authentication provider to delegate authentication to the LDAP directory.

use a login flow to make a callout to the LDAP directory before authenticating the user to Salesforce.

Setup an identity provider (IdP) to authenticate users using LDAP, set up single sign-on to Salesforce and disable Login Form authentication.

Q46. A Salesforce customer is implementing Sales Cloud and a custom pricing application for its call center agents.
An Enterprise single sign-on solution is used to authenticate and sign-in users to all applications. The customer has the following requirements:
1. The development team has decided to use a Canvas app to expose the pricing application to agents.
2. Agents should be able to access the Canvas app without needing to log in to the pricing application.
Which two options should the identity architect consider to provide support for the Canvas app to initiate login for users?
Choose 2 answers

Select “Enable as a Canvas Personal App” in the connected app settings.

Enable OAuth settings in the connected app with required OAuth scopes for the pricing application.

Configure the Canvas app as a connected app and set Admin-approved users as pre-authorized.

Enable SAML in the connected app and Security Assertion Markup Language (SAML) Initiation Method as Service Provider Initiated.

Q47. What is one of the roles of an Identity Provider in a Single Sign-on setup using SAML?

Validate token

Create token

Consume token

Revoke token

Q48. A global company is using the Salesforce Platform as an Identity Provider and needs to integrate a third-party application with its Experience Cloud customer portal.
Which two features should be utilized to provide users with login and identity services for the third-party application?
Choose 2 answers

Use the App Launcher with single sign-on (SSO).

External a Data source with Named Principal identity type.

Use a connected app.

Use Delegated Authentication.

Q49. Northern Trail Outfitters (NTO) utilizes a third-party cloud solution for an employee portal. NTO also owns Salesforce Service Cloud and would like employees to be able to login to Salesforce with their third-party portal credentials for a seamless expenence. The third-party employee portal only supports OAuth.
What should an identity architect recommend to enable single sign-on (SSO) between the portal and Salesforce?

Configure SSO to use the third party portal as an identity provider.

Create a custom external authentication provider.

Add the third-party portal as a connected app.

Configure Salesforce for Delegated Authentication.

Q50. Northern Trail Outfitters (NTO) uses Salesforce for Sales Opportunity Management. Okta was recently brought in to Just-in-Time (JIT) provision and authenticate NTO users to applications. Salesforce users also use Okta to authorize a Forecasting web application to access Salesforce records on their behalf.
Which two roles are being performed by Salesforce?
Choose 2 answers

SAML Identity Provider

OAuth Client

OAuth Resource Server

SAML Service Provider

Q51. A global fitness equipment manufacturer is planning to sell fitness tracking devices and has the following requirements:
1) Customer purchases the device.
2) Customer registers the device using their mobile app.
3) A case should automatically be created in Salesforce and associated with the customer’s account in cases where the device registers issues with tracking.
Which OAuth flow should be used to meet these requirements?

OAuth 2.0 Asset Token Flow

OAuth 2.0 Username-Password Flow

OAuth 2.0 User-Agent Flow

OAuth 2.0 SAML Bearer Assertion Flow

Q52. Universal Containers (UC) wants to provide single sign-on (SSO) for a business-to-consumer (B2C) application using Salesforce Identity.
Which Salesforce license should UC utilize to implement this use case?

Identity Only

Salesforce Platform

External Identity

Partner Community

Q53. Universal Containers has multiple Salesforce instances where users receive emails from different instances.
Users should be logged into the correct Salesforce instance authenticated by their IdP when clicking on an email link to a Salesforce record.
What should be enabled in Salesforce as a prerequisite?

My Domain

External Identity

Identity Provider

Multi-Factor Authentication

Q54. Universal Containers (UC) wants to integrate a third-party Reward Calculation system with Salesforce to calculate Rewards. Rewards will be calculated on a schedule basis and update back into Salesforce. The integration between Salesforce and the Reward Calculation System needs to be secure. Which are two recommended practices for using OAuth flow in this scenario. choose 2 answers

OAuth Refresh Token FLow

OAuth Username-Password Flow

OAuth SAML Bearer Assertion FLow

OAuth JWT Bearer Token FLow

Q55. A division of a Northern Trail Outfitters (NTO) purchased Salesforce. NTO uses a third party identity provider (IdP) to validate user credentials against Its corporate Lightweight Directory Access Protocol (LDAP) directory. NTO wants to help employees remember as passwords as possible.
What should an identity architect recommend?

Setup Salesforce as a Service Provider to the existing IdP.

Setup Salesforce as an IdP to authenticate against the LDAP directory.

Use Salesforce connect to synchronize LDAP passwords to Salesforce.

Setup Salesforce as an Authentication Provider to the existing IdP.

Q56. Universal Containers is implementing a new Experience Cloud site and the identity architect wants to use dynamic branding features as of the login process.
Which two options should the identity architect recommend to support dynamic branding for the site?
Choose 2 answers

To use dynamic branding, the community must be built with the Visuaiforce + Salesforce Tabs template.

To use dynamic branding, the community must be built with the Customer Account Portal template.

An experience ID (expid) or placeholder parameter must be used in the URL to represent the brand.

An external content management system (CMS) must be used for dynamic branding on Experience Cloud sites.

Q57. Northern Trail Outfitters recently acquired a company. Each company will retain its Identity Provider (IdP).
Both companies rely extensively on Salesforce processes that send emails to users to take specific actions in Salesforce.
How should the combined companys’ employees collaborate in a single Salesforce org, yet authenticate to the appropriate IdP?

Configure unique MyDomains for each company and have generated links use the appropriate MyDomam in the URL.

Have generated links append a querystnng parameter indicating the IdP. The login service will redirect to the appropriate IdP.

Have generated links be prefixed with the appropriate IdP URL to invoke an IdP-initiated Security Assertion Markup Language flow when clicked.

Enable each IdP as a login option in the MyDomain Authentication Service settings. Users will then click on the appropriate IdP button.

Q58. Universal containers (UC) uses a legacy Employee portal for their employees to collaborate and post their ideas. UC decides to use salesforce ideas for voting and better tracking purposes. To avoid provisioning users on Salesforce, UC decides to push ideas posted on the Employee portal to salesforce through API. UC decides to use an API user using Oauth Username – password flow for the connection. How can the connection to salesforce be restricted only to the employee portal server?

Add the Employee portals IP address to the Trusted IP range for the connected App

Use a digital certificate signed by the employee portal Server.

Add the employee portals IP address to the login IP range on the user profile.

Use a dedicated profile for the user the Employee portal uses.

Q59. The executive sponsor for an organization has asked if Salesforce supports the ability to embed a login widget into its service providers in order to create a more seamless user experience.
What should be used and considered before recommending it as a solution on the Salesforce Platform?

OpenID Connect Web Server Flow. Determine if the service provider is secure enough to store the client secret on.

Embedded Login. Identify what level of UI customization will be required to make it match the service providers look and feel.

Salesforce REST apis. Ensure that Secure Sockets Layer (SSL) connection for the integration is used.

Embedded Login. Consider whether or not it relies on third party cookies which can cause browser compatibility issues.