Free Access Salesforce.Identity-and-Access-Management-Architect.v2024-03-01.q145 Practice Test (Page 26)

Question 121

Universal containers wants to set up SSO for a selected group of users to access external applications from salesforce through App launcher. Which three steps must be completed in salesforce to accomplish the goal?

A.Associate user profiles with the connected Apps.

B.Create named credentials for each external system.

C.Complete single Sign-on settings in security controls.

D.Complete my domain and Identity provider setup.

E.Create connected apps for the external applications.

Question 122

Northern Trail Outfitters mar ages functional group permissions in a custom security application supported by a relational database and a REST service layer. Group permissions are mapped as permission sets in Salesforce.
Which action should an identity architect use to ensure functional group permissions are reflected as permission set assignments?

A.Use a Login Flow with invocable Apex to callout to the security application and set permission sets.

B.Use the Apex Just-in-Time (JIT) handler to query the Security Assertion markup Language (SAML) attributes and set permission sets.

C.Use a Login Flow to query SAML attributes and set permission sets.

D.Use the Apex JIT handler to callout to the security application and set permission sets

Question 123

Which three are features of federated Single sign-on solutions? Choose 3 Answers

A.It enables quick and easy provisioning and deactivating of users.

B.It federates credentials control to authorized applications.

C.It solves all identity and access management problems.

D.It improves affiliated applications adoption rates.

E.It establishes trust between Identity Store and Service Provider.

Question 124

Universal Containers (UC) wants to build a custom mobile app for their field reps to create orders in salesforce. After the first time the users log in, they must be able to access salesforce upon opening the mobile app without being prompted to log in again. What Oauth flows should be considered to support this requirement?

A.SAML Assertion flow with a Bearer Token.

B.User Agent flow with a Refresh Token.

C.Mobile Agent flow with a Bearer Token.

D.Web Server flow with a Refresh Token.

Question 125

An identity architect wants to secure Salesforce APIs using Security Assertion Markup Language (SAML).
For secunty purposes, administrators will need to authorize the applications that will be consuming the APIs.
Which Salesforce OAuth authorization flow should be used?

A.OAuth 2.0 User-Agent Flow

B.OAuth 2.0 JWT Bearer Flow

C.OAuth 2-0 SAML Bearer Assertion Flow

D.SAML Assertion Flow

Premium Bundle

Newest Identity-and-Access-Management-Architect Exam PDF Dumps shared by BraindumpsPass.com for Helping Passing Identity-and-Access-Management-Architect Exam! BraindumpsPass.com now offer the updated Identity-and-Access-Management-Architect exam dumps, the BraindumpsPass.com Identity-and-Access-Management-Architect exam questions have been updated and answers have been corrected get the latest BraindumpsPass.com Identity-and-Access-Management-Architect pdf dumps with Exam Engine here:

Access Identity-and-Access-Management-Architect Premium Version

(112 Q&As Dumps, 40%OFF Special Discount: Exam-Tests)

Other Version: 4059Salesforce.Identity-and-Access-Management-Architect.v2023-02-25.q77

Latest Upload: 200PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43; 292Nokia.4A0-113.v2026-05-01.q69; 250EC-COUNCIL.312-49v11.v2026-04-30.q214; 227Microsoft.MB-820.v2026-04-30.q101; 207Salesforce.MC-202.v2026-04-30.q57; 203BICSI.INSTC_V8.v2026-04-29.q53; 332NMLS.MLO.v2026-04-28.q82; 241NCARB.Project-Management.v2026-04-28.q27; 457EMC.D-AV-DY-23.v2026-04-27.q184; 1107ServiceNow.CSA.v2026-04-27.q483