Free Access Salesforce.Identity-and-Access-Management-Designer.v2022-09-12.q117 Practice Test (Page 17)

Question 76

A global company's Salesforce Identity Architect is reviewing its Salesforce production org login history and is seeing some intermittent Security Assertion Markup Language (SAML SSO) 'Replay Detected and Assertion Invalid' login errors.
Which two issues would cause these errors?
Choose 2 answers

A.The subject element is missing from the assertion sent to salesforce.

B.The current time setting of the company's identity provider (IdP) and Salesforce platform is out of sync by more than eight minutes.

C.The assertion sent to 5alesforce contains an assertion ID previously used.

D.The certificate loaded into SSO configuration does not match the certificate used by the IdP.

Question 77

The security team at Universal containers(UC) has identified exporting reports as a high-risk action and would like to require users to be logged into salesforce with their active directory (AD) credentials when doing so.
For all other uses of Salesforce, Users should be allowed to use AD credentials or salesforce credentials. What solution should be recommended to prevent exporting reports except when logged in using AD credentials while maintaining the ability to view reports when logged in with salesforce credentials?

A.Use SAML Federated Authentication with a login flow to dynamically add or remove a permission set that grants the export reports permission.

B.Use SAML Federated Authentication and Custom SAML jit provisioning to dynamically add or remove a permission set that grants the Export Reports permission.

C.Use SAML Federated Authentication, treat SAML sessions as high assurance, and raise the session level required for exporting reports.

D.Use SAML Federated Authentication and block access to reports when accesses through a standard assurance session.

Question 78

Which three are capabilities of SAML-based Federated authentication? Choose 3 answers

A.Centralized federation provides single point of access, control and auditing.

B.Trust relationships between Identity Provider and Service Provider are required.

C.SAML tokens can be in XML or JSON format and can be used interchangeably.

D.Web applications with no passwords are more secure and stronger against attacks.

E.Access tokens are used to access resources on the server once the user is authenticated.

Question 79

Universal Containers (UC) is building an integration between Salesforce and a legacy web applications using the canvas framework. The security for UC has determined that a signed request from Salesforce is not an adequate authentication solution for the Third-Party app. Which two options should the Architect consider for authenticating the third-party app using the canvas framework? Choose 2 Answers

A.Create a registration handler Apex class to allow the third-party appliction to authenticate itself against Salesforce as the Idp.

B.Utilize Canvas OAuth flow to allow the third-party appliction to authenticate itself against Salesforce as the Idp.

C.Utilize Authorization Providers to allow the third-party appliction to authenticate itself against Salesforce as the Idp.

D.Utilize the SAML Single Sign-on flow to allow the third-party to authenticate itself against UC's IdP.

Question 80

Universal Container's (UC) is using Salesforce Experience Cloud site for its container wholesale business. The identity architect wants to an authentication provider for the new site.
Which two options should be utilized in creating an authentication provider?
Choose 2 answers

A.A custom registration handier can be set.

B.The default authentication provider certificate can be set.

C.A custom error URL can be set.

D.The default login user can be set.

Other Version: 977Salesforce.Identity-and-Access-Management-Designer.v2024-05-12.q103; 1387Salesforce.Identity-and-Access-Management-Designer.v2023-12-04.q134; 2732Salesforce.Identity-and-Access-Management-Designer.v2023-05-15.q135; 2550Salesforce.Identity-and-Access-Management-Designer.v2022-08-26.q100; 3871Salesforce.Identity-and-Access-Management-Designer.v2022-02-06.q103; 101Salesforce.Exams4sures.Identity-and-Access-Management-Designer.v2022-01-16.by.jared.82q.pdf

Latest Upload: 108Google.Generative-AI-Leader.v2025-10-28.q15; 108EXIN.CDCP.v2025-10-28.q40; 152Huawei.H19-315-ENU.v2025-10-27.q108; 142Salesforce.CRT-550.v2025-10-27.q146; 136SAP.E-S4CPE-2405.v2025-10-27.q51; 133Microsoft.SC-200.v2025-10-27.q144; 274CompTIA.SY0-701.v2025-10-27.q603; 123MedicalTests.AAPC-CPC.v2025-10-27.q53; 115ICF.ICF-ACC.v2025-10-27.q28; 167Cisco.400-007.v2025-10-27.q275

Question 76

Question 77

Question 78

Question 79

Question 80

Download PDF File