Identity-and-Access-Management-Designer by Salesforce Actual Free Exam Q&As

Question 1

An Enterprise is using a Lightweight Directory Access Protocol (LDAP ) server as the only point for user authentication with a username/password. Salesforce delegated authentication is configured to integrate Salesforce under single sign-on (SSO).
Mow can end users change their password?

A. Users once logged In, can go to the Change Password screen in Salesforce. B. Users can change it on the enterprise LDAP authentication portal. C. Users can click on the "Forgot your Password" link on the Salesforce.com login page. D. Users can request the Salesforce Admin to reset their password.

Discussion 0

Correct Answer: D Vote an answer

Question 2

A company's external application is protected by Salesforce through OAuth. The identity architect for the project needs to limit the level of access to the data of the protected resource in a flexible way.
What should be done to improve security?

A. Create custom scopes and assign to the connected app. B. Leverage external objects and data classification policies. C. Define a permission set that grants access to the app and assign to authorized users. D. Select "Admin approved users are pre-authonzed" and assign specific profiles.

Discussion 0

Correct Answer: A Vote an answer

Question 3

An architect needs to advise the team that manages the identity provider how to differentiate salesforce from other service providers. What SAML SSO setting in salesforce provides this capability?

A. Identity provider login URL B. Issuer C. SAML identity location D. Entity id

Discussion 0

Correct Answer: D Vote an answer

Question 4

Universal containers wants to implement single Sign-on for a salesforce org using an external identity provider and corporate identity store. What type of Authentication flow is required to support deep linking?

A. Start URL on identity provider B. Web server Oauth SSO flow. C. Service-provider-initiated SSO D. Identity-provider-initiated SSO

Discussion 0

Correct Answer: C Vote an answer

Question 5

How should an Architect force users to authenticate with Two-factor Authentication (2FA) for Salesforce only when not connected to an internal company network?

A. Apply the "Two-factor Authentication for User Interface Logins" permission and Login IP Ranges for all Profiles. B. Use Custom Login Flows with Apex to detect the user's IP address and prompt for 2FA if needed. C. Add the list of company's network IP addresses to the Login Range list under 2FA Setup. D. Use an Apex Trigger on the UserLogin object to detect the user's IP address and prompt for 2FA if needed.

Discussion 0

Correct Answer: B Vote an answer

Question 6

Universal Containers would like its customers to register and log in to a portal built on Salesforce Experience Cloud. Customers should be able to use their Facebook or Linkedln credentials for ease of use.
Which three steps should an identity architect take to implement social sign-on?
Choose 3 answers

A. Enable "Federated Single Sign-On Using SAML". B. Update the default registration handlers to create and update users. C. Check "Facebook" and "Linkedln" under Login Page Setup. D. Create authentication providers for both Facebook and Linkedln. E. Register both Facebook and Linkedln as connected apps.

Discussion 0

Correct Answer: B,C,D Vote an answer

Question 7

A global fitness equipment manufacturer is planning to sell fitness tracking devices and has the following requirements:
1) Customer purchases the device.
2) Customer registers the device using their mobile app.
3) A case should automatically be created in Salesforce and associated with the customers account in cases where the device registers issues with tracking.
Which OAuth flow should be used to meet these requirements?

A. OAuth 2.0 Username-Password Flow B. OAuth 2.0 User-Agent Flow C. OAuth 2.0 Asset Token Flow D. OAuth 2.0 SAML Bearer Assertion Flow

Discussion 0

Correct Answer: C Vote an answer

Question 8

Northern Trail Outfitters (NTO) wants its customers to use phone numbers to log in to their new digital portal, which was designed and built using Salesforce Experience Cloud. In order to access the portal, the user will need to do the following:
1. Enter a phone number and/or email address
2. Enter a verification code that is to be sent via email or text.
What is the recommended approach to fulfill this requirement?

A. Create a custom login page with an Apex controller. The controller has logic to send and verify the identity. B. Create a Login Discovery page and provide a Login Discovery Handler Apex class. C. Create an Authentication provider and implement a self-registration handler class. D. Create a custom login flow that uses an Apex controller to verify the phone numbers with the company's verification service.

Discussion 0

Correct Answer: B Vote an answer

Question 9

Universal Containers is considering using Delegated Authentication as the sole means of Authenticating of Salesforce users. A Salesforce Architect has been brought in to assist with the implementation. What two risks Should the Architect point out? Choose 2 answers

A. UC will be required to develop and support a custom SOAP web service. B. The web service must reside on a public cloud service, such as Heroku. C. Salesforce users will be locked out of Salesforce if the web service goes down. D. Delegated Authentication is enabled or disabled for the entire Salesforce org.

Discussion 0

Correct Answer: A,C Vote an answer

Question 10

Universal Containers wants to secure its Salesforce APIs by using an existing Security Assertion Markup Language (SAML) configuration supports the company's single sign-on process to Salesforce, Which Salesforce OAuth authorization flow should be used?

A. OAuth 2.0 User-Agent Flow B. A SAML Assertion Row C. OAuth 2.0 JWT Bearer Flow D. OAuth 2.0 SAML Bearer Assertion Flow

Discussion 0

Correct Answer: B Vote an answer

Question 11

A company with 15,000 employees is using Salesforce and would like to take the necessary steps to highlight or curb fraudulent activity.
Which tool should be used to track login data, such as the average number of logins, who logged in more than the average number of times and who logged in during non-business hours?

A. Login History B. Login Inspector C. Login Forensics D. Login Report

Discussion 0

Correct Answer: C Vote an answer

Question 12

Universal containers (UC) has built a custom based Two-factor Authentication (2fa) system for their existing on-premise applications. Thru are now implementing salesforce and would like to enable a Two-factor login process for it, as well. What is the recommended solution an architect should consider?

A. Replace the custom 2fa system with an app exchange app that supports on-premise applications and salesforce. B. Use custom login flows to connect to the existing custom 2fa system for use in salesforce. C. Use the custom 2fa system for on-premise applications and native 2fa for salesforce. D. Replace the custom 2fa system with salesforce 2fa for on-premise application and salesforce.

Discussion 0

Correct Answer: B Vote an answer

Salesforce Certified Identity and Access Management Designer - Identity-and-Access-Management-Designer Exam Practice Test