Free Access Salesforce.Identity-and-Access-Management-Designer.v2022-02-06.q103 Practice Test (Page 2)

Question 1

Universal Containers (UC) is both a Salesforce and Google Apps customer. The UC IT team would like to manage the users for both systems in a single place to reduce administrative burden.
Which two recommended ways can the IT team provision users and allow Single Sign-on between Salesforce and Google Apps? (Choose two.)

A.Use a third-party product as the Identity Provider for both Salesforce and Google Apps and manage the provisioning from there.

B.Build a custom app running on Heroku as the Identity Provider that can sync user information between Salesforce and Google Apps.

C.Use Identity Connect as the Identity Provider for both Salesforce and Google Apps and manage the provisioning from there.

D.Use Salesforce as the Identity Provider and Google Apps as a Service Provider and configure User Provisioning for Connected Apps.

Question 2

How should an Architect force users to authenticate with Two-factor Authentication (2FA) for Salesforce only when not connected to an internal company network?

A.Add the list of company's network IP addresses to the Login Range list under 2FA Setup.

B.Apply the "Two-factor Authentication for User Interface Logins" permission and Login IP Ranges for all Profiles.

C.Use an Apex Trigger on the UserLogin object to detect the user's IP address and prompt for 2FA if needed.

D.Use Custom Login Flows with Apex to detect the user's IP address and prompt for 2FA if needed.

Question 3

Universal Containers (UC) is building a customer community and will allow customers to authenticate using Facebook credentials. The First time the user authenticating using facebook, UC would like a customer account created automatically in their Accounting system. The accounting system has a web service accessible to Salesforce for the creation of accounts. How can the Architect meet these requirements?

A.Use JIT Provisioning to automatically create the account in the accounting system.

B.Use OAuth JWT flow to pass the data from Salesforce to the Accounting System.

C.Create a custom application on Heroku that manages the sign-on process from Facebook.

D.Add an Apex callout in the registration handler of the authorization provider.

Question 4

A security architect is rolling out a new multi-factor authentication (MFA) mandate, where all employees must go through a secure authentication process before accessing Salesforce. There are multiple Identity Providers (IdP) in place and the architect is considering how the "Authentication Method Reference" field (AMR) in the Login History can help.
Which two considerations should the architect keep in mind?
Choose 2 answers

A.AMR field shows the authentication methods used at IdP.

B.High-assurance sessions must be configured under Session Security Level Policies.

C.Both OIDC and Security Assertion Markup Language (SAML) are supported but AMR must be implemented at IdP.

D.Dependency on what is supported by OpenID Connect (OIDC) implementation at IdP.

Question 5

architect is troubleshooting some SAML-based SSO errors during testing. The Architect confirmed that all of the Salesforce SSO settings are correct. Which two issues outside of the Salesforce SSO settings are most likely contributing to the SSO errors the Architect is encountering? Choose 2 Answers

A.The Issuer Certificate from the Identity Provider expired two weeks ago.

B.The default language for the Identity Provider and Salesforce are Different.

C.The clock on the Identity Provider server is twenty minutes behind Salesforce.

D.The Identity Provider is also used to SSO into five other applications.

Premium Bundle

Newest Identity-and-Access-Management-Designer Exam PDF Dumps shared by BraindumpsPass.com for Helping Passing Identity-and-Access-Management-Designer Exam! BraindumpsPass.com now offer the updated Identity-and-Access-Management-Designer exam dumps, the BraindumpsPass.com Identity-and-Access-Management-Designer exam questions have been updated and answers have been corrected get the latest BraindumpsPass.com Identity-and-Access-Management-Designer pdf dumps with Exam Engine here:

Access Identity-and-Access-Management-Designer Premium Version

(245 Q&As Dumps, 40%OFF Special Discount: Exam-Tests)

Other Version: 913Salesforce.Identity-and-Access-Management-Designer.v2024-05-12.q103; 1366Salesforce.Identity-and-Access-Management-Designer.v2023-12-04.q134; 2620Salesforce.Identity-and-Access-Management-Designer.v2023-05-15.q135; 3108Salesforce.Identity-and-Access-Management-Designer.v2022-09-12.q117; 2510Salesforce.Identity-and-Access-Management-Designer.v2022-08-26.q100; 101Salesforce.Exams4sures.Identity-and-Access-Management-Designer.v2022-01-16.by.jared.82q.pdf

Latest Upload: 107Oracle.1z0-1196-25.v2025-09-12.q18; 106NetworkAppliance.NS0-162.v2025-09-12.q86; 146OCEG.GRCP.v2025-09-11.q211; 107HP.HPE0-V27.v2025-09-11.q78; 123Oracle.1Z0-1057-23.v2025-09-10.q47; 157Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 137SAP.C-S4EWM-2023.v2025-09-08.q83; 181TheSecOpsGroup.CNSP.v2025-09-08.q20; 262CFAInstitute.ESG-Investing.v2025-09-08.q173; 249PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132