Question 1

An Identity architect works for a multinational, multi-brand organization. As they work with the organization

to understand their Customer Identity and Access Management requirements, the identity architect learns that

the brand experience is different for each of the customer's sub-brands and each of these branded experiences

must be carried through the login experience depending on which sub-brand the user is logging into.

Which solution should the architect recommend to support scalability and reduce maintenance costs, if the

organization has more than 150 sub-brands?

Options :

A : Assign each sub-brand a unique Experience ID and use the Experience ID to dynamically brand the login experience.

B : Use Audiences to customize the login experience for each sub-brand and pass an audience ID to the community during the OAuth and Security Assertion Markup Language (SAML) flows.

C : Create a community subdomain for each sub-brand and customize the look and feel of the Login page for each community subdomain to match the brand.

D :

Create a separate Salesforce org for each sub-brand so that each sub-brand has complete control over the

user experience.

Answer: A

Question 2

Universal Containers (UC) has a Customer Community that uses Facebook for Authentication. UC would like to ensure that Changes in the Facebook profile are reflected on the appropriate Customer Community user: How can this requirement be met?

Options :

A : Use the updateUser method on the registration Handler Class.

B : Develop a scheduled job that calls out to Facebook on a nightly basis.

C : Use information in the signed Request that is received from facebook.

D : Use SAML Just-In-Time Provisioning between Facebook and Salesforce.

Answer: A

Question 3

Universal Containers (UC) wants to implement SAML SSO for their internal of Salesforce users using a third-party IdP. After some evaluation, UC decides NOT to 65« set up My Domain for their Salesforce org. How does that decision impact their SSO implementation?

Options :

A : IdP-initiated SSO will NOT work.

B : Neither SP- nor IdP-initiated SSO will work.

C : Either SP- or IdP-initiated SSO will work.

D : SP-initiated SSO will NOT work

Answer: B

Question 4

Universal Containers (UC) operates in Asia, Europe and North America regions. There is one Salesforce org

for each region. UC is implementing Customer 360 in Salesforce and has procured External Identity and

Customer Community licenses in all orgs.

Customers of UC use Community to track orders and create inquiries. Customers also tend to move across

regions frequently.

What should an identity architect recommend to optimize license usage and reduce maintenance overhead?

Options :

A : Merge three orgs into one instance of Salesforce. This will no longer require maintaining three separate copies of the same customer.

B : Delete contact/ account records and deactivate user if user moves from a specific region; Sync will no longer be required.

C : Contacts are required since Community access needs to be enabled. Maintenance is a necessary overhead that must be handled via data integration.

D : Enable Contactless User in all orgs and downgrade users from Experience Cloud license to External Identity license once users have moved out of that region.

Answer: C

Question 5

Universal Containers (UC) has built a custom token-based Two-factor authentication (2FA) system for their existing on-premise applications. They are now implementing Salesforce and would like to enable a Two-factor login process for it, as well. What is the recommended solution as Architect should consider?

Options :

A : Use the custom 2FA system for on-premise applications and native 2FA for Salesforce.

B : Replace the custom 2FA system with an AppExchange App that supports on premise application and salesforce.

C : Use Custom Login Flows to connect to the existing custom 2FA system for use in Salesforce.

D : Replace the custom 2FA system with Salesforce 2FA for on-premise applications and Salesforce.

Answer: D

Confidently Practice Online with Free Identity-and-Access-Management-Architect Exam Cram

Buying Options: