Free Access Salesforce.Identity-and-Access-Management-Architect.v2023-02-25.q77 Practice Test (Page 9)

Question 36

Universal Containers (UC) has implemented SAML-based Single Sign-On to provide seamless access to its Salesforce Orgs, financial system, and CPQ system. Below is the SSO implementation landscape.

What role combination is represented by the systems in this scenario''

A.Salesforce Org1 and Salesforce Org2 are acting as Identity Providers.

B.Salesforce Org1 and PingFederate are acting as Identity Providers.

C.Salesforce Org1 and Salesforce Org2 are the only Service Providers.

D.Financial System and CPQ System are the only Service Providers.

Question 37

Which two considerations should be made when implementing Delegated Authentication?
Choose 2 answers

A.Salesforce servers receive but do not validate a user's credentials.

B.It can be used to authenticate API clients and mobile apps.

C.Just-in-time Provisioning can be configured for new users.

D.It requires trusted IP ranges at the User Profile level.

E.The authentication web service can include custom attributes.

Question 38

Universal Containers (UC) wants its closed Won opportunities to be synced to a Data Warehouse in near real time. UC has implemented Outbound Message to enable near real-time data sync. UC wants to ensure that communication between Salesforce and Target System is Secure. What Certificate is sent along with the Outbound Message?

A.The Self-Signed Certificates from the Certificate & Key Management menu.

B.The default Client Certificate or a Certificate from Certificate and Key Management menu.

C.The default Client Certificate from the Develop--> API Menu.

D.The CA-Signed Certificate from the Certificate and Key Management menu.

Question 39

When designing a multi-branded Customer Identity and Access Management solution on the Salesforce Platform, how should an identity architect ensure a specific brand experience in Salesforce is presented?

A.Add a custom parameter to the service provider's OAuth/SAML call and implement logic on its login page to apply branding based on the parameters value.

B.Provide a brand picker that the end user can use to select its sub-brand when they arrive on salesforce.

C.The Audience ID, which can be set in a shared cookie.

D.The Experience ID, which can be included in OAuth/Open ID flows and Security Assertion Markup Language (SAML) flows as a URL parameter.

Question 40

Universal containers (UC) has implemented a multi-org strategy and would like to centralize the management of their salesforce user profiles. What should the architect recommend to allow salesforce profiles to be managed from a central system of record?

A.Implement Delegated Authentication that will update the user profiles as necessary.

B.Implement jit provisioning on the SAML IDP that will pass the profile id in each assertion.

C.Implement an Oauthjwt flow to pass the profile credentials between systems.

D.Create an apex scheduled job in one org that will synchronize the other orgs profile.

Other Version: 1239Salesforce.Identity-and-Access-Management-Architect.v2024-03-01.q145

Latest Upload: 107Oracle.1z0-1196-25.v2025-09-12.q18; 106NetworkAppliance.NS0-162.v2025-09-12.q86; 145OCEG.GRCP.v2025-09-11.q211; 107HP.HPE0-V27.v2025-09-11.q78; 123Oracle.1Z0-1057-23.v2025-09-10.q47; 157Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 137SAP.C-S4EWM-2023.v2025-09-08.q83; 181TheSecOpsGroup.CNSP.v2025-09-08.q20; 260CFAInstitute.ESG-Investing.v2025-09-08.q173; 248PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132

Question 36

Question 37

Question 38

Question 39

Question 40

Download PDF File