Free Access Salesforce.Identity-and-Access-Management-Designer.v2024-05-12.q103 Practice Test (Page 4)

Question 11

Universal Containers (UC) has a custom, internal-only, mobile billing application for users who are commonly out of the office. The app is configured as a connected App in Salesforce. Due to the nature of this app, UC would like to take the appropriate measures to properly secure access to the app. Which two are recommendations to make the UC? Choose 2 answers

A.Require High Assurance sessions in order to use the Connected App.

B.Disallow the use of Single Sign-on for any users of the mobile app.

C.Use Google Authenticator as an additional part of the login process

D.Set Login IP Ranges to the internal network for all of the app users Profiles.

Question 12

Universal Containers (UC) has an existing web application that it would like to access from Salesforce without requiring users to re-authenticate. The web application is owned UC and the UC team that is responsible for it is willing to add new javascript code and/or libraries to the application. What implementation should an Architect recommend to UC?

A.Configure the web application as an item in the Salesforce App Launcher.

B.Create a Canvas app and use Signed Requests to authenticate the users.

C.Rewrite the web application as a set of Visualforce pages and Apex code.

D.Add the web application as a ConnectedApp using OAuth User-Agent flow.

Question 13

Universal Containers (UC) has implemented SAML-based Single Sign-On to provide seamless access to its Salesforce Orgs, financial system, and CPQ system. Below is the SSO implementation landscape.

What role combination is represented by the systems in this scenario''

A.Salesforce Org1 and PingFederate are acting as Identity Providers.

B.Salesforce Org1 and Salesforce Org2 are the only Service Providers.

C.Financial System and CPQ System are the only Service Providers.

D.Salesforce Org1 and Salesforce Org2 are acting as Identity Providers.

Question 14

Universal Containers has built a custom token-based Two-Factor Authentication system for their existing on-premise applications. They are now implementing Salesforce and would like to enable a Two-Factor login process for it, as well.
What is the recommended solution an Architect should consider?

A.Use Custom Login Flows to connect to the existing custom 2FA system for use in Salesforce.

B.Use the custom 2FA system for on-premise applications and native 2FA for Salesforce.

C.Replace the custom 2FA system with an AppExchange App that supports on-premise applications and Salesforce.

D.Replace the custom 2FA system with Salesforce 2FA for on-premise applications and Salesforce.

Question 15