[Q134-Q155] Identity-and-Access-Management-Designer 100% Guarantee Download Identity-and-Access-Management-Designer Exam PDF Q&A [Aug 03, 2023]

5/5 - (1 vote)

Identity-and-Access-Management-Designer 100% Guarantee Download Identity-and-Access-Management-Designer Exam PDF Q&A [Aug 03, 2023]

Get Identity-and-Access-Management-Designer Actual Free Exam Q&As to Prepare for Your Salesforce Certification

QUESTION 134
After a recent audit, universal containers was advised to implement Two-factor Authentication for all of their critical systems, including salesforce. Which two actions should UC consider to meet this requirement?
Choose 2 answers

Require users to provide their RSA token along with their credentials.

Require users to supply their email and phone number, which gets validated.

Require users to enter a second password after the first Authentication

Require users to use a biometric reader as well as their password

QUESTION 135
Universal Containers (UC) wants to provide single sign-on (SSO) for a business-to-consumer (B2C) application using Salesforce Identity.
Which Salesforce license should UC utilize to implement this use case?

Identity Only

Salesforce Platform

External Identity

Partner Community

QUESTION 136
Universal Containers (UC) is building a customer community and will allow customers to authenticate using Facebook credentials. The First time the user authenticating using facebook, UC would like a customer account created automatically in their Accounting system. The accounting system has a web service accessible to Salesforce for the creation of accounts. How can the Architect meet these requirements?

Create a custom application on Heroku that manages the sign-on process from Facebook.

Use JIT Provisioning to automatically create the account in the accounting system.

Add an Apex callout in the registration handler of the authorization provider.

Use OAuth JWT flow to pass the data from Salesforce to the Accounting System.

QUESTION 137
What information does the ‘Relaystate’ parameter contain in sp-Initiated Single Sign-on?

Reference to a URL redirect parameter at the identity provider.

Reference to a URL redirect parameter at the service provider.

Reference to the login address URL of the service provider.

Reference to the login address URL of the identity Provider.

QUESTION 138
Universal containers wants to implement SAML SSO for their internal salesforce users using a third-party IDP. After some evaluation, UC decides not to set up my domain for their salesforce.org. How does thatdecision impact their SSO implementation?

Neithersp – nor IDP – initiated SSO will work

Either sp – or IDP – initiated SSO will work

IDP – initiated SSO will not work

Sp-Initiated SSO will not work

QUESTION 139
An identity architect wants to secure Salesforce APIs using Security Assertion Markup Language (SAML). For secunty purposes, administrators will need to authorize the applications that will be consuming the APIs.
Which Salesforce OAuth authorization flow should be used7

OAuth 2-0 SAML Bearer Assertion Flow

OAuth 2.0 JWT Bearer Flow

SAML Assertion Flow

OAuth 2.0 User-Agent Flow

QUESTION 140
Universal Containers (UC) rolling out a new Customer Identity and Access Management Solution will be built on top of their existing Salesforce instance.
Several service providers have been setup and integrated with Salesforce using OpenlD Connect to allow for a seamless single sign-on experience. UC has a requirement to limit user access to only a subset of service providers per customer type.
Which two steps should be done on the platform to satisfy the requirement?
Choose 2 answers

Manage which connected apps a user has access to by assigning authentication providers to the users profile.

Assign the connected app to the customer community, and enable the users profile in the Community settings.

Use Profiles and Permission Sets to assign user access to Admin Pre-Approved Connected Apps.

Set each of the Connected App access settings to Admin Pre-Approved.

QUESTION 141
Universal Containers (UC) is building an integration between Salesforce and a legacy web applications using the canvas framework. The security for UC has determined that a signed request from Salesforce is not an adequate authentication solution for the Third-Party app. Which two options should the Architect consider for authenticating the third-party app using the canvas framework? Choose 2 Answers

Utilize the SAML Single Sign-on flow to allow the third-party to authenticate itself against UC’s IdP.

Utilize Authorization Providers to allow the third-party appliction to authenticate itself against Salesforce as the Idp.

Utilize Canvas OAuth flow to allow the third-party appliction to authenticate itself against Salesforce as the Idp.

Create a registration handler Apex class to allow the third-party appliction to authenticate itself against Salesforce as the Idp.

QUESTION 142
Universal Containers (UC) implemented SSO to a third-party system for their Salesforce users to access the App Launcher. UC enabled “User Provisioning” on the Connected App so that changes to user accounts can be synched between Salesforce and the third party system. However, UC quickly notices that changes to user roles in Salesforce are not getting synched to the third-party system. What is the most likely reason for this behaviour?

User Provisioning for Connected Apps does not support role sync.

Required operation(s) was not mapped in User Provisioning Settings.

The Approval queue for User Provisioning Requests is unmonitored.

Salesforce roles have more than three levels in the role hierarchy.

QUESTION 143
customer service representatives at Universal containers (UC) are complaining that whenever they click on links to case records and are asked to login with SAML SSO, they are being redirected to the salesforce home tab and not the specific case record. What item should an architect advise the identity team at UC to investigate first?

My domain is configured and active within salesforce.

The salesforce SSO settings are using http post

The identity provider is correctly preserving the Relay state

The users have the correct Federation ID within salesforce.

QUESTION 144
Universal Containers (UC) wants its closed Won opportunities to be synced to a Data warehouse in near real time. UC has implemented Outbound Message to enable near real-time data sync. UC wants to ensure that communication between Salesforce and Target System is secure. What certificate is sent along with the Outbound Message?

The Self-signed Certificates from the Certificate & Key Management menu.

The default client Certificate from the Develop–> API menu.

The default client Certificate or the Certificate and Key Management menu.

The CA-signed Certificate from the Certificate and Key Management Menu.

QUESTION 145
Universal Containers (UC) has a custom, internal-only, mobile billing application for users who are commonly out of the office. The app is configured as a connected App in Salesforce. Due to the nature of this app, UC would like to take the appropriate measures to properly secure access to the app. Which two are recommendations to make the UC? Choose 2 answers

Disallow the use of Single Sign-on for any users of the mobile app.

Require High Assurance sessions in order to use the Connected App.

Set Login IP Ranges to the internal network for all of the app users Profiles.

Use Google Authenticator as an additional part of the login process

QUESTION 146
Universal containers (UC) has implemented ansp-Initiated SAML flow between an external IDP and salesforce. A user at UC is attempting to login to salesforce1 for the first time and is being prompted for salesforce credentials instead of being shown the IDP login page. What is the likely cause of the issue?

The “Redirect to Identity Provider” option has been selected in the my domain configuration.

The user has not configured the salesforce1 mobile app to use my domain for login

The “Redirect to identity provider” option has not been selected the SAML configuration.

The user has notbeen granted the “Enable single Sign-on” permission

QUESTION 147
Which two capabilities does My Domain enable in the context of a SAML SSO configuration? Choose 2 answers

App Launcher

Resource deep linking

SSO from Salesforce Mobile App

QUESTION 148
Northern Trail Outfitters (NTO) has an existing custom business-to-consumer (B2C) website that does NOT support single sign-on standards, such as Security Assertion Markup Language (SAMi) or OAuth. NTO wants to use Salesforce Identity to register and authenticate new customers on the website.
Which two Salesforce features should an identity architect use in order to provide username/password authentication for the website?
Choose 2 answers

Identity Connect

Delegated Authentication

Connected Apps

Embedded Login

QUESTION 149
Universal Containers (UC) is building a custom Innovation platform on their Salesforce instance. The Innovation platform will be written completely in Apex and Visualforce and will use custom objects to store the Data. UC would like all users to be able to access the system without having to log in with Salesforce credentials. UC will utilize a third-party idp using SAML SSO. What is the optimal Salesforce licence type for all of the UC employees?

Identity Licence.

Salesforce Licence.

External Identity Licence.

Salesforce Platform Licence.

QUESTION 150
Ttie executive sponsor for an organization has asked if Salesforce supports the ability to embed a login widget into its service providers in order to create a more seamless user experience.
What should be used and considered before recommending it as a solution on the Salesforce Platform?

OpenID Connect Web Server Flow. Determine if the service provider is secure enough to store the client secret on.

Embedded Login. Identify what level of UI customization will be required to make it match the service providers look and feel.

Salesforce REST apis. Ensure that Secure Sockets Layer (SSL) connection for the integration is used.

Embedded Login. Consider whether or not it relies on third party cookies which can cause browser compatibility issues.

QUESTION 151
Universal containers wants to set up SSO for a selected group of users to access external applications from salesforce through App launcher. Which three steps must be completed in salesforce to accomplish the goal?

Associate user profiles with the connected Apps.

Complete my domain and Identity provider setup.

Create connected apps for the external applications.

Complete single Sign-on settings in security controls.

Create named credentials for each external system.

QUESTION 152
Universal containers wants to build a custom mobile app connecting to salesforce using Oauth, and would like to restrict the types of resources mobile users can access. What Oauth feature of Salesforce should be used to achieve the goal?

Access Tokens

Mobile pins

Refresh Tokens

Scopes

QUESTION 153
Universal Containers (UC) wants to integrate a third-party Reward Calculation system with Salesforce to calculate Rewards. Rewards will be calculated on a schedule basis and update back into Salesforce. The integration between Salesforce and the Reward Calculation System needs to be secure. Which are two recommended practices for using OAuth flow in this scenario. choose 2 answers

OAuth Refresh Token FLow

OAuth Username-Password Flow

OAuth SAML Bearer Assertion FLow

OAuth JWT Bearer Token FLow

QUESTION 154
Universal Containers (UC) employees have Salesforce access from restricted IP ranges only, to protect against unauthorised access. UC wants to roll out the Salesforce1 mobile app and make it accessible from any location. Which two options should an Architect recommend? Choose 2 answers

Relax the IP restriction with a second factor in the Connect App settings for Salesforce1 mobile app.

Remove existing restrictions on IP ranges for all types of user access.

Relax the IP restrictions in the Connect App settings for the Salesforce1 mobile app.

Use Login Flow to bypass IP range restriction for the mobile app.

QUESTION 155
Universal Containers (UC) uses Salesforce to allow customers to keep track of the order status. The customers can log in to Salesforce using external authentication providers, such as Facebook and Google. UC is also leveraging the App Launcher to let customers access an of platform application for generating shipping labels. The label generator application uses OAuth to provide users access. What license type should an Architect recommend for the customers?

Customer Community license

Identity license

Customer Community Plus license

External Identity license

Identity-and-Access-Management-Designer Questions Truly Valid For Your Salesforce Exam: https://www.testsimulate.com/Identity-and-Access-Management-Designer-study-materials.html

Leave a Reply Cancel reply