Question 1

Universal Containers (UC) has a Customer Community that uses Facebook for Authentication. UC would like to ensure that Changes in the Facebook profile are reflected on the appropriate Customer Community user: How can this requirement be met?

Options :

A : Use the updateUser method on the registration Handler Class.

B : Develop a scheduled job that calls out to Facebook on a nightly basis.

C : Use information in the signed Request that is received from facebook.

D : Use SAML Just-In-Time Provisioning between Facebook and Salesforce.

Answer: A

Question 2

A technology enterprise is setting up an identity solution with an external vendors wellness application for itsemployees. The user attributes need to be returned to the wellness application in an ID token.Which authentication mechanism should an identity architect recommend to meet the requirements?

Options :

A : OpenID Connect

B : User Agent Flow

C : JWT Bearer Token Flow

D : Web Server Flow

Answer: D

Question 3

A consumer products company uses Salesforce to maintain consumer information, including orders. Thecompany implemented a portal solution using Salesforce Experience Cloud for its consumers where theconsumers can log in using their credentials. The company is considering allowing users to login with theirFacebook or Linkedln credentials.Once enabled, what role will Salesforce play?

Options :

A : Facebook and Linkedln will be the SPs.

B : Salesforce will be the service provider (SP).

C : Salesforce will be the identity provider (IdP).

D : Facebook and Linkedln will act as the IdPs and SPs.

Answer: B

Question 4

A service provider (SP) supports both Security Assertion Markup Language (SAML) and OpenID Connect(OIDC).When integrating this SP with Salesforce, which use case is the determining factor when choosing OIDC orSAML?

Options :

A : OIDC is more secure than SAML and therefore is the obvious choice.

B : The SP needs to perform API calls back to Salesforce on behalf of the user after the user logs in to the service provider.

C : If the user has a session on Salesforce, you do not want them to be prompted for a username and password when they login to the SP.

D : They are equivalent protocols and there is no real reason to choose one over the other.

Answer: B

Question 5

Identity-and-Access-Management-Architect-page101-image4 An organization has a central cloud-based Identity and Access Management (IAM) Service for authenticationand user management, which must be utilized by all applications as follows:1 - Change of a user status in the central IAM Service triggers provisioning or deprovisioining in theintegrated cloud applications.2 - Security Assertion Markup Language single sign-on (SSO) is used to facilitate access for usersauthenticated at identity provider (Central IAM Service).Which approach should an IAM architect implement on Salesforce Sales Cloud to meet the requirements?

Options :

A : A Configure Salesforce as a SAML Service Provider, and enable SCIM (System for Cross-DomainIdentity Management) for provisioning and deprovisioning of users.

B : Configure Salesforce as a SAML service provider, and enable Just-in Time (JIT) provisioning anddeprovisioning of users

C : Configure central IAM Service as an authentication provider and extend registration handler to manageprovisioning and deprovisioning of users.

D : Deploy Identity Connect component and set up automated provisioning and deprovisioning of users, aswell as SAML-based SSO.

Answer: A

Confidently Practice Online with Free Plat-Arch-203 Exam Cram

Buying Options: