Question 1

Northern Trail Outfitters would like to automatically create new employee users in Salesforce with an

appropriate profile that maps to its Active Directory Department.

How should an identity architect implement this requirement?

Options :

A :

Use the createUser method in the Just-in-Time (JIT) provisioning registration handler to assign the

appropriate profile.

B :

Use the updateUser method in the Just-in-Time (JIT) provisioning registration handler to assign the

appropriate profile.

C :

Use a login flow to collect Security Assertion Markup Language attributes and assign the appropriate

profile during Just-In-Time

(JIT) provisioning.

D :

Make a callout during the login flow to query department from Active Directory to assign the

appropriate profile.

Answer: B

Question 2

Universal Containers (UC) has a Customer Community that uses Facebook for Authentication. UC would like to ensure that Changes in the Facebook profile are reflected on the appropriate Customer Community user: How can this requirement be met?

Options :

A : Use the updateUser method on the registration Handler Class.

B : Develop a scheduled job that calls out to Facebook on a nightly basis.

C : Use information in the signed Request that is received from facebook.

D : Use SAML Just-In-Time Provisioning between Facebook and Salesforce.

Answer: A

Question 3

Identity-and-Access-Management-Architect-page101-image4

An organization has a central cloud-based Identity and Access Management (IAM) Service for authentication

and user management, which must be utilized by all applications as follows:

1 - Change of a user status in the central IAM Service triggers provisioning or deprovisioining in the

integrated cloud applications.

2 - Security Assertion Markup Language single sign-on (SSO) is used to facilitate access for users

authenticated at identity provider (Central IAM Service).

Which approach should an IAM architect implement on Salesforce Sales Cloud to meet the requirements?

Options :

A :

A Configure Salesforce as a SAML Service Provider, and enable SCIM (System for Cross-Domain

Identity Management) for provisioning and deprovisioning of users.

B :

Configure Salesforce as a SAML service provider, and enable Just-in Time (JIT) provisioning and

deprovisioning of users

C :

Configure central IAM Service as an authentication provider and extend registration handler to manage

provisioning and deprovisioning of users.

D :

Deploy Identity Connect component and set up automated provisioning and deprovisioning of users, as

well as SAML-based SSO.

Answer: A

Question 4

Universal Containers (UC) has an existing e-commerce platform and is implementing a new customer community. They do not want to force customers to register on both applications due to concern over the customers experience. It is expected that 25% of the e-commerce customers will utilize the customer community . The e-commerce platform is capable of generating SAML responses and has an existing REST-ful API capable of managing users. How should UC create the identities of its e-commerce users with the customer community?

Options :

A : Use SAML JIT in the Customer Community to create users when a user tries to login to the community from the e-commerce site.

B : Use the e-commerce REST API to create users when a user self-register on the customer community and use SAML to allow SSO.

C : Use a nightly batch ETL job to sync users between the Customer Community and the e-commerce platform and use SAML to allow SSO.

D : Use the standard Salesforce API to create users in the Community When a User is Created in the e-Commerce platform and use SAML to allow SSO.

Answer: A

Question 5

Northern Trail Outfitters is implementing a busmess-to-business (B2B) collaboration site using Salesforce

Experience Cloud. The partners will authenticate with an existing identity provider and the solution will utilize

Security Assertion Markup Language (SAML) to provide single sign-on to Salesforce. Delegated

administration will be used in the Expenence Cloud site to allow the partners to administer their users' access.

How should a partner identity be provisioned in Salesforce for this solution?

Options :

A : Create only a contact.

B : Create a contactless user.

C : Create a user and a related contact.

D : Create a person account.

Answer: C

Confidently Practice Online with Free Identity-and-Access-Management-Architect Exam Cram

Buying Options: