Online Access Free Identity-and-Access-Management-Designer Practice Test

Universal Containers has multiple Salesforce instances where users receive emails from different instances. Users should be logged into the correct Salesforce instance authenticated by their IdP when clicking on an email link to a Salesforce record.
What should be enabled in Salesforce as a prerequisite?

• A.My Domain
• B.External Identity
• C.Multi-Factor Authentication
• D.Identity Provider

Universal Containers (UC) wants to build a few applications that leverage the Salesforce REST API. UC has asked its Architect to describe how the API calls will be authenticated to a specific user. Which two mechanisms can the Architect provide? Choose 2 Answers

• A.Refresh Token
• B.Authentication Token
• C.Access Token
• D.Session ID

Universal containers (UC) has implemented SAML SSO to enable seamless access across multiple applications. UC has regional salesforce orgs and wants it's users to be able to access them from their main Salesforce org seamless. Which action should an architect recommend?

• A.Configure the regional salesforce orgs as Identity Providers.
• B.Configure the main salesforce org as the Identity provider.
• C.Configure the main Salesforce org as a service provider.
• D.Configure the main salesforce org as an Authentication provider.

Universal Containers wants to secure its Salesforce APIs by using an existing Security Assertion Markup Language (SAML) configuration supports the company's single sign-on process to Salesforce, Which Salesforce OAuth authorization flow should be used?

• A.OAuth 2.0 JWT Bearer Flow
• B.OAuth 2.0 User-Agent Flow
• C.OAuth 2.0 SAML Bearer Assertion Flow
• D.A SAML Assertion Row

An identity architect has built a native mobile application and plans to integrate it with a Salesforce Identity solution. The following are the requirements for the solution:
1. Users should not have to login every time they use the app.
2. The app should be able to make calls to the Salesforce REST API.
3. End users should NOT see the OAuth approval page.
How should the identity architect configure the Salesforce connected app to meet the requirements?

• A.Enable the API Scope and Offline Access Scope on the connected app, and then set the Connected App access settings to "User may self authorize".
• B.Enable the Full Access Scope and then set the connected app access settings to "Admin Pre-Approved".
• C.Enable the API Scope and Offline Access Scope, upload a certificate so JWT Bearer Flow can be used and then set the connected app access settings to "Admin Pre-Approved".
• D.Enable the API Scope and Offline Access Scope on the connected app, and then set the connected app to access settings to 'Admin Pre-Approved".