Free Access Salesforce.Identity-and-Access-Management-Designer.v2022-08-26.q100 Practice Test (Page 18)

Question 81

Northern Trail Outfitters (NTO) uses a Security Assertion Markup Language (SAML)-based Identity Provider (idP) to authenticate employees to all systems. The IdP authenticates users against a Lightweight Directory Access Protocol (LDAP) directory and has access to user information. NTO wants to minimize Salesforce license usage since only a small percentage of users need Salesforce.
What is recommended to ensure new employees have immediate access to Salesforce using their current IdP?

A.Configure Just-in-Time provisioning using SAML attributes to create new Salesforce users as necessary when a new user attempts to login to Salesforce.

B.Install Salesforce Identity Connect to automatically provision new users in Salesforce the first time they attempt to login.

C.Build an integration that queries LDAP periodically and creates new active users in Salesforce.

D.Build an integration that queries LDAP and creates new inactive users in Salesforce and use a login flow to activate the user at first login.

Question 82

Universal containers (UC) wants to implement a partner community. As part of their implementation, UC would like to modify both the Forgot password and change password experience with custom branding for their partner community users. Which 2 actions should an architect recommend to UC? Choose 2 answers

A.Build a community builder page for both the change password and Forgot password experiences.

B.Build a custom visualforce page for the change password experience and a community builder page for the Forgot password experience.

C.Build a community builder page for the change password experience and Custom Visualforce page for the Forgot password experience.

D.Build a custom visualforce page for both the change password and Forgot password experiences.

Question 83

Universal containers (UC) has a classified information system that it's call centre team uses only when they are working on a case with a record type of "classified". They are only allowed to access the system when they own an open "classified" case, and their access to the system is removed at all other times. They would like to implement SAML SSO with salesforce as the IDP, and automatically allow or deny the staff's access to the classified information system based on whether they currently own an open "classified" case record when they try to access the system using SSO. What is the recommended solution for automatically allowing or denying access to the classified information system based on the open "classified" case record criteria?

A.Use custom SAML jit provisioning to dynamically query the user's open "classified" cases when attempting to access the classified information system

B.Use a custom connected App handler using apex to dynamically allow access to the system based on whether the staff owns any open "classified" cases.

C.Use apex trigger on case to dynamically assign permission sets that grant access when a user is assigned with an open "classified" case, and remove it when the case is closed.

D.Use salesforce reports to identify users that currently owns open "classified" cases and should be granted access to the classified information system.

Question 84

Universal Containers (UC) uses a legacy Employee portal for their employees to collaborate and post their ideas. UC decides to use Salesforce Ideas for voting and better tracking purposes. To avoid provisioning users on Salesforce, UC decides to push ideas posted on the Employee portal to Salesforce through API. UC decides to use an API user using OAuth Username-Password flow for the connection. How can the connection to Salesforce be restricted only to the Employee portal server?

A.Add the Employee portal's IP Address to the trusted IP range for the Connected App.

B.Use a dedicated profile for the user the Employee portal user.

C.Use a digital certificate signed by the Employee portal server.

D.Add the Employee portal's IP address to the Login IP range on the user profile.? May two answers

Question 85

Northern Trail Outfitters (NTO) wants to give customers the ability to submit and manage issues with their purchases. It is important for to give its customers the ability to login with their Facebook and Twitter credentials.
Which two actions should an identity architect recommend to meet these requirements?
Choose 2 answers

A.Configure a predefined authentication provider for Facebook.

B.Configure a predefined authentication provider for Twitter.

C.Create a custom external authentication provider for Facebook.

D.Create a custom external authentication provider for Twitter.

Other Version: 977Salesforce.Identity-and-Access-Management-Designer.v2024-05-12.q103; 1387Salesforce.Identity-and-Access-Management-Designer.v2023-12-04.q134; 2732Salesforce.Identity-and-Access-Management-Designer.v2023-05-15.q135; 3175Salesforce.Identity-and-Access-Management-Designer.v2022-09-12.q117; 3871Salesforce.Identity-and-Access-Management-Designer.v2022-02-06.q103; 101Salesforce.Exams4sures.Identity-and-Access-Management-Designer.v2022-01-16.by.jared.82q.pdf

Latest Upload: 108Google.Generative-AI-Leader.v2025-10-28.q15; 108EXIN.CDCP.v2025-10-28.q40; 152Huawei.H19-315-ENU.v2025-10-27.q108; 142Salesforce.CRT-550.v2025-10-27.q146; 136SAP.E-S4CPE-2405.v2025-10-27.q51; 133Microsoft.SC-200.v2025-10-27.q144; 274CompTIA.SY0-701.v2025-10-27.q603; 123MedicalTests.AAPC-CPC.v2025-10-27.q53; 115ICF.ICF-ACC.v2025-10-27.q28; 167Cisco.400-007.v2025-10-27.q275

Question 81

Question 82

Question 83

Question 84

Question 85

Download PDF File