Free Access Salesforce.Identity-and-Access-Management-Designer.v2022-02-06.q103 Practice Test (Page 4)

Question 11

An architect needs to advise the team that manages the identity provider how to differentiate salesforce from other service providers. What SAML SSO setting in salesforce provides this capability?

A.Identity provider login URL

B.SAML identity location

C.Entity id

D.Issuer

Question 12

A Salesforce customer is implementing Sales Cloud and a custom pricing application for its call center agents. An Enterprise single sign-on solution is used to authenticate and sign-in users to all applications. The customer has the following requirements:
1. The development team has decided to use a Canvas app to expose the pricing application to agents.
2. Agents should be able to access the Canvas app without needing to log in to the pricing application.
Which two options should the identity architect consider to provide support for the Canvas app to initiate login for users?
Choose 2 answers

A.Enable OAuth settings in the connected app with required OAuth scopes for the pricing application.

B.Configure the Canvas app as a connected app and set Admin-approved users as pre-authorized.

C.Enable SAML in the connected app and Security Assertion Markup Language (SAML) Initiation Method as Service Provider Initiated.

D.Select "Enable as a Canvas Personal App" in the connected app settings.

Question 13

Universal Containers (UC) has a classified information system that its call center team uses only when they are working on a case with a record type "Classified". They are only allowed to access the system when they own an open "Classified" case, and their access to the system is removed at all other times. They would like to implement SAML SSO eith Salesforce as the Idp, and automatically allow or deny the staff's access to the classified information system based on whether they currently own an open "Classified" case record when they try to access the system using SSO. What is the recommended solution for automatically allowing or denying the access to the classified information system based on the open "classified" case record criteria?

A.Use a Common Connected App Handler using Apex to dynamically allow access to the system based on whether the staff owns any open "Classified" Cases.

B.Use Salesforce reports to identify users that currently owns open "Classified" cases and should be granted access to the Classified information system.

C.Use Apex trigger on case to dynamically assign permission Sets that Grant access when an user is assigned with an open "Classified" case, and remove it when the case is closed.

D.Use Custom SAML JIT Provisioning to dynamically query the user's open "Classified" cases when attempting to access the classified information system.

Question 14

Which two are valid choices for digital certificates when setting up two-way SSL between Salesforce and an external system. Choose 2 answers

A.Use a trusted CA-signed certificate for salesforce and a trusted CA-signed cert for the external system

B.Use a trusted CA-signed certificate for salesforce and a self-signed cert for the external system

C.Use a self-signed certificate for salesforce and a self-signed cert for the external system

D.Use a self-signed certificate for salesforce and a trusted CA-signed cert for the external system

Question 15

Northern Trail Outfitters (NTO) is launching a new sportswear brand on its existing consumer portal built on Salesforce Experience Cloud. As part of the launch, emails with promotional links will be sent to existing customers to log in and claim a discount. The marketing manager would like the portal dynamically branded so that users will be directed to the brand link they clicked on; otherwise, users will view a recognizable NTO-branded page.
The campaign is launching quickly, so there is no time to procure any additional licenses. However, the development team is available to apply any required changes to the portal.
Which approach should the identity architect recommend?

A.Configure an additional community site on the same org that is dedicated for the new brand.

B.Create a full sandbox to replicate the portal site and update the branding accordingly.

C.Implement Experience ID in the code and extend the URLs and endpomts, as required.

D.Use Heroku to build the new brand site and embedded login to reuse identities.

Other Version: 977Salesforce.Identity-and-Access-Management-Designer.v2024-05-12.q103; 1387Salesforce.Identity-and-Access-Management-Designer.v2023-12-04.q134; 2732Salesforce.Identity-and-Access-Management-Designer.v2023-05-15.q135; 3152Salesforce.Identity-and-Access-Management-Designer.v2022-09-12.q117; 2537Salesforce.Identity-and-Access-Management-Designer.v2022-08-26.q100; 101Salesforce.Exams4sures.Identity-and-Access-Management-Designer.v2022-01-16.by.jared.82q.pdf

Latest Upload: 103Google.Generative-AI-Leader.v2025-10-28.q15; 106EXIN.CDCP.v2025-10-28.q40; 152Huawei.H19-315-ENU.v2025-10-27.q108; 142Salesforce.CRT-550.v2025-10-27.q146; 136SAP.E-S4CPE-2405.v2025-10-27.q51; 130Microsoft.SC-200.v2025-10-27.q144; 271CompTIA.SY0-701.v2025-10-27.q603; 120MedicalTests.AAPC-CPC.v2025-10-27.q53; 112ICF.ICF-ACC.v2025-10-27.q28; 165Cisco.400-007.v2025-10-27.q275

Question 11

Question 12

Question 13

Question 14

Question 15

Download PDF File