Free Access Salesforce.Identity-and-Access-Management-Designer.v2022-02-06.q103 Practice Test (Page 20)

Question 91

Universal containers (UC) has implemented ansp-Initiated SAML flow between an external IDP and salesforce. A user at UC is attempting to login to salesforce1 for the first time and is being prompted for salesforce credentials instead of being shown the IDP login page. What is the likely cause of the issue?

A.The "Redirect to identity provider" option has not been selected the SAML configuration.

B.The user has notbeen granted the "Enable single Sign-on" permission

C.The user has not configured the salesforce1 mobile app to use my domain for login

D.The "Redirect to Identity Provider" option has been selected in the my domain configuration.

Question 92

How should an Architect force users to authenticate with Two-factor Authentication(2FA) for Salesforce only when not connected to an internal company network?

A.Use an Apex Trigger on the UserLogin object to detect the user's IP address and prompt for 2FA if needed.

B.Add the company's list of network IP addresses to the Login Range list under 2FA Setup.

C.Use Custom Login Flows with Apex to detect the user's IP address and prompt for 2FA in needed.

D.Apply the "Two-factor Authentication for User Interfae Logins" permission and Login IP Ranges for all Profiles.

Question 93

Universal Containers (UC) wants to build a few applications that leverage the Salesforce REST API. UC has asked its Architect to describe how the API calls will be authenticated to a specific user. Which two mechanisms can the Architect provide? Choose 2 Answers

A.Refresh Token

B.Session ID

C.Access Token

D.Authentication Token

Question 94

Universal Containers (UC) has a custom, internal-only, mobile billing application for users who are commonly out of the office. The app is configured as a Connected App in Salesforce. Due to the nature of this app, UC would like to take the appropriate measures to properly secure access to the app.
Which two solutions should be recommended? (Choose two.)

A.Disallow the use of Single Sign-on for any users of the mobile app.

B.Set Login IP Ranges to the internal network for all of the app users' Profiles.

C.Use Google Authenticator as an additional part of the login process.

D.Require High Assurance sessions in order to use the Connected App.

Question 95

Universal containers wants salesforce inbound Oauth-enabled integration clients to use SAML-BASED single Sign-on for authentication. What Oauth flow would be recommended in this scenario?

A.User-Token Oauth flow

B.SAML assertion Oauth flow

C.Web server Oauth flow

D.User-Agent Oauth flow

Other Version: 270Salesforce.Identity-and-Access-Management-Designer.v2026-08-31.q127; 1749Salesforce.Identity-and-Access-Management-Designer.v2024-05-12.q103; 2428Salesforce.Identity-and-Access-Management-Designer.v2023-12-04.q134; 3860Salesforce.Identity-and-Access-Management-Designer.v2023-05-15.q135; 3859Salesforce.Identity-and-Access-Management-Designer.v2022-09-12.q117; 3220Salesforce.Identity-and-Access-Management-Designer.v2022-08-26.q100; 101Salesforce.Exams4sures.Identity-and-Access-Management-Designer.v2022-01-16.by.jared.82q.pdf

Latest Upload: 114SAP.C_P2W10_2504.v2026-09-19.q30; 125Saviynt.SCAIP.v2026-09-18.q20; 163VMware.3V0-23.25.v2026-09-17.q73; 125Workday.Workday-Adaptive-Planning.v2026-09-17.q20; 131SAP.C_ACDET.v2026-09-17.q20; 133Appian.ACD-301.v2026-09-17.q16; 244Google.Professional-Cloud-DevOps-Engineer.v2026-09-16.q209; 192AAPC.CPC.v2026-09-16.q132; 131HP.HPE0-J82.v2026-09-16.q26; 243F5.303.v2026-09-16.q147

Question 91

Question 92

Question 93

Question 94

Question 95

Download PDF File