Online Access Free Identity-and-Access-Management-Architect Practice Test

A global fitness equipment manufacturer uses Salesforce to manage its sales cycle. The manufacturer has a custom order fulfillment app that needs to request order data from Salesforce. The order fulfillment app needs to integrate with the Salesforce API using OAuth 2.0 protocol.
What should an identity architect use to fulfill this requirement?

• A.Connected App and OAuth Scopes
• B.Authentication Providers
• C.Genre Age Integration
• D.OAuth Token

A large consumer company is planning to create a community and will require login through the customers social identity. The following requirements must be met:
1. The customer should be able to login with any of their social identities, however Salesforce should only have one user per customer.
2. Once the customer has been identified with a social identity, they should not be required to authorize Salesforce.
3. The customers personal details from the social sign on need to be captured when the customer logs into Salesforce using their social identity.
3. If the customer modifies their personal details in the social site, the changes should be updated in Salesforce .
Which two options allow the Identity Architect to fulfill the requirements?
Choose 2 answers

• A.Redirect the user to a custom page that allows the user to select an existing social identity for login.
• B.Use authentication providers for social sign-on and use the custom registration handler to insert or update personal details.
• C.Use the custom registration handler to link social identities to Salesforce identifies.
• D.Use Login Flows to call an authentication registration handler to provision the user before logging the user into the community.

Universal Containers uses Salesforce as an identity provider and Concur as the Employee Expense management system. The HR director wants to ensure Concur accounts for employees are created only after the appropriate approval in the Salesforce org.
Which three steps should the identity architect use to implement this requirement?
Choose 3 answers

• A.Enable User Provisioning for the connected app.
• B.Create a connected app for Concur in Salesforce.
• C.Create an approval process for UserProviderRequests object associated with the provisioning flow.
• D.Create an approval process for User object associated with the provisioning flow.
• E.Create an approval process for a custom object associated with the provisioning flow.

Universal Containers (UC) uses Salesforce as a CRM and identity provider (IdP) for their Sales Team to seamlessly login to internal portals.
The IT team at UC is now evaluating Salesforce to act as an IdP for its remaining employees.
Which Salesforce license is required to full fill this requirement?

• A.Identify Verification
• B.Identify Only
• C.External Identity
• D.Identify Connect

Which two things should be done to ensure end users can only use single sign-on (SSO) to login in to Salesforce?
Choose 2 answers

• A.Once SSO is enabled, users are only able to login using Salesforce credentials.
• B.Request Salesforce Support to enable delegated authentication.
• C.Assign user " Is Single Sign-On Enabled " permission via profile or permission set.
• D.Enable My Domain and select " Prevent login from https://login.salesforce.com " .