Steps Necessary To Pass The Identity-and-Access-Management-Architect Exam from Training Expert Actualtests4sure [Q37-Q53] : Actual Test Materials : http://blog.actualtests4sure.com

This page was exported from Actual Test Materials [ http://blog.actualtests4sure.com ]
Export date: Tue Dec 24 3:33:12 2024 / +0000 GMT

Steps Necessary To Pass The Identity-and-Access-Management-Architect Exam from Training Expert Actualtests4sure [Q37-Q53]

Steps Necessary To Pass The Identity-and-Access-Management-Architect Exam from Training Expert Actualtests4sure

Valid Way To Pass Identity and Access Management Designer's Identity-and-Access-Management-Architect Exam

Salesforce Certified Identity and Access Management Architect certification exam is a comprehensive exam that evaluates a candidate's ability to design and implement complex identity and access management solutions. Identity-and-Access-Management-Architect exam consists of 60 multiple-choice questions and lasts for 105 minutes. Identity-and-Access-Management-Architect exam is proctored, and candidates can take it online or in-person at a testing center. Identity-and-Access-Management-Architect exam fee is $400, and candidates must achieve a passing score of 68% to earn the certification.

Salesforce Certified Identity and Access Management Architect is a certification program that focuses on the advanced knowledge and skills required to design and implement secure identity and access management solutions in Salesforce. Salesforce Certified Identity and Access Management Architect certification is designed for professionals who have experience in implementing and managing Salesforce solutions and are looking to expand their knowledge and expertise in identity and access management.

QUESTION 37
A global fitness equipment manufacturer is planning to sell fitness tracking devices and has the following requirements:
1) Customer purchases the device.
2) Customer registers the device using their mobile app.
3) A case should automatically be created in Salesforce and associated with the customer’s account in cases where the device registers issues with tracking.
Which OAuth flow should be used to meet these requirements?

OAuth 2.0 Asset Token Flow

OAuth 2.0 Username-Password Flow

OAuth 2.0 User-Agent Flow

OAuth 2.0 SAML Bearer Assertion Flow

QUESTION 38
Universal Containers (UC) is both a Salesforce and Google Apps customer. The UC IT team would like to manage the users for both systems in a single place to reduce administrative burden. Which two optimal ways can the IT team provision users and allow Single Sign-on between Salesforce and Google Apps ? Choose 2 answers

Build a custom app running on Heroku as the Identity Provider that can sync user information between Salesforce and Google Apps.

Use a third-party product as the Identity Provider for both Salesforce and Google Apps and manage the provisioning from there.

Use Identity Connect as the Identity Provider for both Salesforce and Google Apps and manage the provisioning from there.

Use Salesforce as the Identity Provider and Google Apps as a Service Provider and configure User Provisioning for Connected Apps.

QUESTION 39
Universal Containers (UC) has built a custom time tracking app for its employee. UC wants to leverage Salesforce Identity to control access to the custom app.
At a minimum, which Salesforce license is required to support this requirement?

Identity Verification

Identity Connect

Identity Only

External Identity

QUESTION 40
Universal Container’s (UC) is using Salesforce Experience Cloud site for its container wholesale business. The identity architect wants to an authentication provider for the new site.
Which two options should be utilized in creating an authentication provider?
Choose 2 answers

A custom registration handier can be set.

A custom error URL can be set.

The default login user can be set.

The default authentication provider certificate can be set.

QUESTION 41
A leading fitness tracker company is getting ready to launch a customer community. The company wants its customers to login to the community and connect their fitness device to their profile. Customers should be able to obtain exercise details and fitness recommendation in the community.
Which should be used to satisfy this requirement?

Named Credentials

OAuth Device Flow

Single Sign-On Settings

QUESTION 42
Northern Trail Outfitters (NTO) wants to improve its engagement with existing customers to boost customer loyalty. To get a better understanding of its customers, NTO establishes a single customer view including their buying behaviors, channel preferences and purchasing history. All of this information exists but is spread across different systems and formats.
NTO has decided to use Salesforce as the platform to build a 360 degree view. The company already uses Microsoft Active Directory (AD) to manage its users and company assets.
What should an Identity Architect do to provision, deprovision and authenticate users?

Salesforce Identity is not needed since NTO uses Microsoft AD.

Salesforce Identity can be included but NTO will be required to build a custom integration with Microsoft AD.

Salesforce Identity is included in the Salesforce licenses so it does not need to be considered separately.

A Salesforce Identity can be included but NTO will require Identity Connect.

QUESTION 43
Universal containers wants to implement single Sign-on for a salesforce org using an external identity provider and corporate identity store. What type of Authentication flow is required to support deep linking?

Web server Oauth SSO flow.

Identity-provider-initiated SSO

Service-provider-initiated SSO

Start URL on identity provider

QUESTION 44
Universal Containers (UC) plans to use a SAML-based third-party IdP serving both of the Salesforce Partner Community and the corporate portal. UC partners will log in 65* to the corporate portal to access protected resources, including links to Salesforce resources. What would be the recommended way to configure the IdP so that seamless access can be achieved in this scenario?

Set up the corporate portal as a Connected App in Salesforce and use the Web server OAuth flow.

Configure SP-initiated SSO that passes the SAML token upon Salesforce resource access request.

Set up the corporate portal as a Connected App in Salesforce and use the User Agent OAuth flow.

Configure IdP-initiated SSO that passes the SAML token upon Salesforce resource access request.

QUESTION 45
A financial services company uses Salesforce and has a compliance requirement to track information about devices from which users log in. Also, a Salesforce Security Administrator needs to have the ability to revoke the device from which users log in.
What should be used to fulfill this requirement?

Use multi-factor authentication (MFA) to meet the compliance requirement to track device information.

Use the Activations feature to meet the compliance requirement to track device information.

Use the Login History object to track information about devices from which users log in.

Use Login Flows to capture device from which users log in and store device and user information in a custom object.

QUESTION 46
Northern Trail Outfitters (NTO) has a number of employees who do NOT need access Salesforce objects. Trie employees should sign in to a custom Benefits web app using their Salesforce credentials.
Which license should the identity architect recommend to fulfill this requirement?

Identity Only License

External Identity License

Identity Verification Credits Add-on License

Identity Connect License

QUESTION 47
Universal containers (UC) has a custom, internal-only, mobile billing application for users who are commonly out of the office. The app is configured as a connected App in salesforce. Due to the nature of this app, UC would like to take the appropriate measures to properly secure access to the app. Which two are recommendations to make the UC? Choose 2 answers

Disallow the use of single Sign-on for any users of the mobile app.

Require high assurance sessions in order to use the connected App

Use Google Authenticator as an additional part of the logical processes.

Set login IP ranges to the internal network for all of the app users profiles.

QUESTION 48
Universal Containers wants to allow its customers to log in to its Experience Cloud via a third party authentication provider that supports only the OAuth protocol.
What should an identity architect do to fulfill this requirement?

Contact Salesforce Support and enable delegate single sign-on.

Create a custom external authentication provider.

Use certificate-based authentication.

Configure OpenID Connect authentication provider.

QUESTION 49
Universal Containers (UC) has implemented a multi-org architecture in their company. Many users have licences across multiple orgs, and they are complaining about remembering which org and credentials are tied to which business process. Which two recommendations should the Architect make to address the Complaints?
Choose 2 answers

Activate My Domain to Brand each org to the specific business use case.

Implement SP-Initiated Single Sign-on flows to allow deep linking.

Implement IdP-Initiated Single Sign-on flows to allow deep linking.

Implement Delegated Authentication from each org to the LDAP provider.

QUESTION 50

A multinational company is looking to rollout Salesforce globally. The company has a Microsoft Active Directory Federation Services (ADFS) implementation for the Americas, Europe and APAC. The company plans to have a single org and they would like to have all of its users access Salesforce using the ADFS . The company would like to limit its investments and prefer not to procure additional applications to satisfy the requirements.
What is recommended to ensure these requirements are met ?

Use connected apps for each ADFS implementation and implement Salesforce site to authenticate users across the ADFS system applicable to their geo.

Implement Identity Connect to provide single sign-on to Salesforce and federated across multiple ADFS systems.

Add a central identity system that federates between the ADFS systems and integrate with Salesforce for single sign-on.

Configure Each ADFS system under single sign-on settings and allow users to choose the system to authenticate during sign on to Salesforce-

QUESTION 51
Northern Trail Outfitters (NTO) wants to improve its engagement with existing customers to boost customer loyalty. To get a better understanding of its customers, NTO establishes a single customer view including their buying behaviors, channel preferences and purchasing history. All of this information exists but is spread across different systems and formats.
NTO has decided to use Salesforce as the platform to build a 360 degree view. The company already uses Microsoft Active Directory (AD) to manage its users and company assets.
What should an Identity Architect do to provision, deprovision and authenticate users?

Salesforce Identity is not needed since NTO uses Microsoft AD.

Salesforce Identity can be included but NTO will be required to build a custom integration with Microsoft AD.

Salesforce Identity is included in the Salesforce licenses so it does not need to be considered separately.

A Salesforce Identity can be included but NTO will require Identity Connect.

QUESTION 52
Universal Containers (UC) wants its closed Won opportunities to be synced to a Data warehouse in near real time. UC has implemented Outbound Message to enable near real-time data sync. UC wants to ensure that communication between Salesforce and Target System is secure. What certificate is sent along with the Outbound Message?

The Self-signed Certificates from the Certificate & Key Management menu.

The default client Certificate from the Develop–> API menu.

The default client Certificate or the Certificate and Key Management menu.

The CA-signed Certificate from the Certificate and Key Management Menu.

QUESTION 53
Universal containers uses an Employee portal for their employees to collaborate. employees access the portal from their company’s internal website via SSO. It is set up to work with Active Directory. What is the role of Active Directory in this scenario?

Identity store

Authentication store

Identity provider

Service provider

All Identity-and-Access-Management-Architect Dumps and Salesforce Certified Identity and Access Management Architect Training Courses: https://www.actualtests4sure.com/Identity-and-Access-Management-Architect-test-questions.html

Post date: 2024-02-07 09:49:57
Post date GMT: 2024-02-07 09:49:57
Post modified date: 2024-02-07 09:49:57
Post modified date GMT: 2024-02-07 09:49:57