Online Access Free Identity-and-Access-Management-Architect Practice Test

Universal Containers is implementing a new Experience Cloud site and the identity architect wants to use dynamic branding features as of the login process.
Which two options should the identity architect recommend to support dynamic branding for the site?
Choose 2 answers

• A.An experience ID (expid) or placeholder parameter must be used in the URL to represent the brand.
• B.To use dynamic branding, the community must be built with the Visuaiforce + Salesforce Tabs template.
• C.To use dynamic branding, the community must be built with the Customer Account Portal template.
• D.An external content management system (CMS) must be used for dynamic branding on Experience Cloud sites.

Universal containers (UC) has decided to use identity connect as it's identity provider. UC uses active directory(AD) and has a team that is very familiar and comfortable with managing ad groups. UC would like to use AD groups to help configure salesforce users. Which three actions can AD groups control through identity connect? Choose 3 answers

• A.Permission sets assignment
• B.Public Group Assignment
• C.Custom permission assignment
• D.Granting report folder access
• E.Role Assignment

architect is troubleshooting some SAML-based SSO errors during testing. The Architect confirmed that all of the Salesforce SSO settings are correct. Which two issues outside of the Salesforce SSO settings are most likely contributing to the SSO errors the Architect is encountering? Choose 2 Answers

• A.The Issuer Certificate from the Identity Provider expired two weeks ago.
• B.The Identity Provider is also used to SSO into five other applications.
• C.The default language for the Identity Provider and Salesforce are Different.
• D.The clock on the Identity Provider server is twenty minutes behind Salesforce.

The executive sponsor for an organization has asked if Salesforce supports the ability to embed a login widget into its service providers in order to create a more seamless user experience.
What should be used and considered before recommending it as a solution on the Salesforce Platform?

• A.Embedded Login. Consider whether or not it relies on third party cookies which can cause browser compatibility issues.
• B.OpenID Connect Web Server Flow. Determine if the service provider is secure enough to store the client secret on.
• C.Embedded Login. Identify what level of UI customization will be required to make it match the service providers look and feel.
• D.Salesforce REST apis. Ensure that Secure Sockets Layer (SSL) connection for the integration is used.

Universal Containers (UC) has a strict requirement to authenticate users to Salesforce using their mainframe credentials. The mainframe user store cannot be accessed from a SAML provider. UC would also like to have users in Salesforce created on the fly if they provide accurate mainframe credentials.
How can the Architect meet these requirements?

• A.Implement OAuth User-Agent Flow on the mainframe; use a Registration Handler to create the user on the fly.
• B.Implement Just-In-Time Provisioning on the mainframe to create the user on the fly.
• C.Use a Salesforce Login Flow to call out to a web service and create the user on the fly.
• D.Use the SOAP API to create the user when created on the mainframe; implement Delegated Authentication.