Online Access Free Identity-and-Access-Management-Architect Practice Test

A multinational industrial products manufacturer is planning to implement Salesforce CRM to manage their business. They have the following requirements:
1. They plan to implement Partner communities to provide access to their partner network.
2. They have operations in multiple countries and are planning to implement multiple Salesforce orgs.
3. Some of their partners do business in multiple countries and will need information from multiple Salesforce communities.
4. They would like to provide a single login for their partners.
How should an Identity Architect solution this requirement with limited custom development?

• A.Create a partner login for the country of their operation and use SAML federation to provide access to other orgs.
• B.Register partners in one org and access information from other orgs using APIs.
• C.Allow partners to choose the Salesforce org they need information from and use login flows to authenticate access.
• D.Consolidate Partner related information in a single org and provide access through Salesforce community.

A financial services company uses Salesforce and has a compliance requirement to track information about devices from which users log in. Also, a Salesforce Security Administrator needs to have the ability to revoke the device from which users log in.
What should be used to fulfill this requirement?

• A.Use the Activations feature to meet the compliance requirement to track device information.
• B.Use the Login History object to track information about devices from which users log in.
• C.Use multi-factor authentication (MFA) to meet the compliance requirement to track device information.
• D.Use Login Flows to capture device from which users log in and store device and user information in a custom object.

When designing a multi-branded Customer Identity and Access Management solution on the Salesforce Platform, how should an identity architect ensure a specific brand experience in Salesforce is presented?

• A.Add a custom parameter to the service provider's OAuth/SAML call and implement logic on its login page to apply branding based on the parameters value.
• B.The Experience ID, which can be included in OAuth/Open ID flows and Security Assertion Markup Language (SAML) flows as a URL parameter.
• C.The Audience ID, which can be set in a shared cookie.
• D.Provide a brand picker that the end user can use to select its sub-brand when they arrive on Salesforce.

A technology enterprise is setting up an identity solution with an external vendors wellness application for its employees. The user attributes need to be returned to the wellness application in an ID token.
Which authentication mechanism should an identity architect recommend to meet the requirements?

• A.JWT Bearer Token Flow
• B.OpenID Connect
• C.Web Server Flow
• D.User Agent Flow

A multinational company using the Salesforce platform wants to implement robust user activity verification capabilities to detect unauthorized access and unusual login patterns.
They need real-time monitoring and alerting functionalities to respond promptly to security incidents.
Which Salesforce tool should be utilized to achieve these requirements?

• A.Salesforce Platform Encryption
• B.Salesforce Profiles
• C.Salesforce Data Loader
• D.Salesforce Event Monitoring and Event Log Files