Free Access Salesforce.Identity-and-Access-Management-Designer.v2022-08-26.q100 Practice Test (Page 16)

Question 71

Universal containers (UC) would like to enable SSO between their existing Active Directory infrastructure and salesforce. The it team prefers to manage all users in Active Directory and would like to avoid doing any initial setup of users in salesforce directly, including the correct assignment of profiles, roles and groups.
Which two optimal solutions should UC use to provision users in salesforce? Choose 2 answers

A.Use Identity connect to sync users from Active Directory to salesforce

B.Use the salesforce REST API to sync users from active directory to salesforce

C.Use Active Directory Federation Services to sync users from active directory to salesforce.

D.Use an app exchange product to sync users from Active Directory to salesforce.

Question 72

An identity architect has built a native mobile application and plans to integrate it with a Salesforce Identity solution. The following are the requirements for the solution:
1. Users should not have to login every time they use the app.
2. The app should be able to make calls to the Salesforce REST API.
3. End users should NOT see the OAuth approval page.
How should the identity architect configure the Salesforce connected app to meet the requirements?

A.Enable the API Scope and Offline Access Scope on the connected app, and then set the connected app to access settings to 'Admin Pre-Approved".

B.Enable the Full Access Scope and then set the connected app access settings to "Admin Pre-Approved".

C.Enable the API Scope and Offline Access Scope, upload a certificate so JWT Bearer Flow can be used and then set the connected app access settings to "Admin Pre-Approved".

D.Enable the API Scope and Offline Access Scope on the connected app, and then set the Connected App access settings to "User may self authorize".

Question 73

A multinational company is looking to rollout Salesforce globally. The company has a Microsoft Active Directory Federation Services (ADFS) implementation for the Americas, Europe and APAC. The company plans to have a single org and they would like to have all of its users access Salesforce using the ADFS . The company would like to limit its investments and prefer not to procure additional applications to satisfy the requirements.
What is recommended to ensure these requirements are met ?

A.Implement Identity Connect to provide single sign-on to Salesforce and federated across multiple ADFS systems.

B.Configure Each ADFS system under single sign-on settings and allow users to choose the system to authenticate during sign on to Salesforce-

C.Use connected apps for each ADFS implementation and implement Salesforce site to authenticate users across the ADFS system applicable to their geo.

D.Add a central identity system that federates between the ADFS systems and integrate with Salesforce for single sign-on.

Question 74

Universal containers (UC) is concerned that having a self-registration page will provide a means for "bots" or unintended audiences to create user records, thereby consuming licences and adding dirty dat a. Which two actions should UC take to prevent unauthorised form submissions during the self-registration process? Choose 2 answers

A.Use open-ended security questions and complex password requirements

B.Use hidden fields populated via java script events in the self-registration page.

C.Primarily use lookup and picklist fields on the self registration page.

D.Require a captcha at the end of the self-registration process.

Question 75

Universal containers (UC) is successfully using Delegated Authentication for their salesforce users. The service supporting Delegated Authentication is written in Java. UC has a new CIO that is requiring all company Web services be RESR-ful and written in . NET. Which two considerations should the UC Architect provide to the new CIO? Choose 2 answers

A.Delegated Authentication will continue to work with a.net service.

B.Delegated Authentication will not work with a.net service.

C.Delegated Authentication will not work with rest services.

D.Delegated Authentication will continue to work with rest services.

Other Version: 977Salesforce.Identity-and-Access-Management-Designer.v2024-05-12.q103; 1387Salesforce.Identity-and-Access-Management-Designer.v2023-12-04.q134; 2732Salesforce.Identity-and-Access-Management-Designer.v2023-05-15.q135; 3175Salesforce.Identity-and-Access-Management-Designer.v2022-09-12.q117; 3871Salesforce.Identity-and-Access-Management-Designer.v2022-02-06.q103; 101Salesforce.Exams4sures.Identity-and-Access-Management-Designer.v2022-01-16.by.jared.82q.pdf

Latest Upload: 108Google.Generative-AI-Leader.v2025-10-28.q15; 108EXIN.CDCP.v2025-10-28.q40; 152Huawei.H19-315-ENU.v2025-10-27.q108; 142Salesforce.CRT-550.v2025-10-27.q146; 136SAP.E-S4CPE-2405.v2025-10-27.q51; 133Microsoft.SC-200.v2025-10-27.q144; 274CompTIA.SY0-701.v2025-10-27.q603; 123MedicalTests.AAPC-CPC.v2025-10-27.q53; 115ICF.ICF-ACC.v2025-10-27.q28; 167Cisco.400-007.v2025-10-27.q275

Question 71

Question 72

Question 73

Question 74

Question 75

Download PDF File