Question 1

Universal Containers (UC) wants its users to access Salesforce and other SSO-enabled applications from acustom web page that UC magnets. UC wants its users to use the same set of credentials to access each of theapplications. what SAML SSO flow should an Architect recommend for UC?

Options :

A : SP-Initiated with Deep Linking

B : SP-Initiated

C : IdP-Initiated

D : User-Agent

Answer: C

Question 2

Universal Containers (UC) is implementing Salesforce and would like to establish SAML SSO for its users tolog in. UC stores its corporate user identities in a Custom Database. The UC IT Manager has heard goodthings about Salesforce Identity Connect as an Idp, and would like to understand what limitations they mayface if they decided to use Identity Connect in their current environment. What limitation Should an Architectinform the IT Manager about?

Options :

A : Identity Connect will not support user provisioning in UC-s current environment.

B : Identity Connect will only support Idp-initiated SAML flows in UC-s current environment.

C : Identity Connect will only support SP-initiated SAML flows in UC-s current environment.

D : Identity connect is not compatible with UC-s current identity environment.

Answer: A

Question 3

Northern Trail Outfitters (NTO) has an off-boarding process where a terminated employee is first disabled inthe Lightweight Directory Act Protocol (LDAP) directory, then requests are sent to the various applicationsupport teams to finish user deactivations. A terminated employee recently was able to login to NTO'sSalesforce instance 24 hours after termination, even though the user was disabled in the corporate LDAPdirectory.What should an identity architect recommend to prevent this from happening in the future?

Options :

A : Create a Just-in-Time provisioning registration handler to ensure users are deactivated in Salesforce as they are disabled in LDAP.

B : Configure an authentication provider to delegate authentication to the LDAP directory.

C : use a login flow to make a callout to the LDAP directory before authenticating the user to Salesforce.

D : Setup an identity provider (IdP) to authenticate users using LDAP, set up single sign-on to Salesforce and disable Login Form authentication.

Answer: B

Question 4

Universal Containers (UC) uses Salesforce to allow customers to keep track of the order status. The customerscan log in to Salesforce using external authentication providers, such as Facebook and Google. UC is alsoleveraging the App Launcher to let customers access an of platform application for generating shipping labels.The label generator application uses OAuth to provide users access. What license type should an Architectrecommend for the customers?

Options :

A : Customer Community license

B : Identity license

C : Customer Community Plus license

D : External Identity license

Answer: B

Question 5

A service provider (SP) supports both Security Assertion Markup Language (SAML) and OpenID Connect(OIDC).When integrating this SP with Salesforce, which use case is the determining factor when choosing OIDC orSAML?

Options :

A : OIDC is more secure than SAML and therefore is the obvious choice.

B : The SP needs to perform API calls back to Salesforce on behalf of the user after the user logs in to the service provider.

C : If the user has a session on Salesforce, you do not want them to be prompted for a username and password when they login to the SP.

D : They are equivalent protocols and there is no real reason to choose one over the other.

Answer: B

Confidently Practice Online with Free Plat-Arch-203 Exam Cram

Buying Options: