Online Access Free Plat-Arch-203 Practice Test

Universal Containers (UC) is planning to deploy a custom mobile app that will allow users to get e-signatures from its customers on their mobile devices. The mobile app connects to Salesforce to upload the e-signature as a file attachment and uses OAuth protocol for both authentication and authorization. What is the most recommended and secure OAuth scope setting that an Architect should recommend?

• A.Api
• B.Id
• C.Custom_permissions
• D.Web

A multinational company is looking to rollout Salesforce globally. The company has a Microsoft Active Directory Federation Services (ADFS) implementation for the Americas, Europe and APAC. The company plans to have a single org and they would like to have all of its users access Salesforce using the ADFS . The company would like to limit its investments and prefer not to procure additional applications to satisfy the requirements.
What is recommended to ensure these requirements are met ?

• A.Implement Identity Connect to provide single sign-on to Salesforce and federated across multiple ADFS systems.
• B.Configure Each ADFS system under single sign-on settings and allow users to choose the system to authenticate during sign on to Salesforce-
• C.Use connected apps for each ADFS implementation and implement Salesforce site to authenticate users across the ADFS system applicable to their geo.
• D.Add a central identity system that federates between the ADFS systems and integrate with Salesforce for single sign-on.

Northern Trail Outfitters (NTO) is launching a new sportswear brand on its existing consumer portal built on Salesforce Experience Cloud. As part of the launch, emails with promotional links will be sent to existing customers to log in and claim a discount. The marketing manager would like the portal dynamically branded so that users will be directed to the brand link they clicked on; otherwise, users will view a recognizable NTO-branded page.
The campaign is launching quickly, so there is no time to procure any additional licenses. However, the development team is available to apply any required changes to the portal.
Which approach should the identity architect recommend?

• A.Configure an additional community site on the same org that is dedicated for the new brand.
• B.Use Heroku to build the new brand site and embedded login to reuse identities.
• C.Create a full sandbox to replicate the portal site and update the branding accordingly.
• D.Implement Experience ID in the code and extend the URLs and endpoints, as required.

Universal Containers (UC) has an existing web application that it would like to access from Salesforce without requiring users to re-authenticate. The web application is owned UC and the UC team that is responsible for it is willing to add new javascript code and/or libraries to the application. What implementation should an Architect recommend to UC?

• A.Add the web application as a ConnectedApp using OAuth User-Agent flow.
• B.Configure the web application as an item in the Salesforce App Launcher.
• C.Rewrite the web application as a set of Visualforce pages and Apex code.
• D.Create a Canvas app and use Signed Requests to authenticate the users.

Northern Trail Outfitters (NTO) has a number of employees who do NOT need access Salesforce objects. Trie employees should sign in to a custom Benefits web app using their Salesforce credentials.
Which license should the identity architect recommend to fulfill this requirement?

• A.Identity Only License
• B.Identity Verification Credits Add-on License
• C.External Identity License
• D.Identity Connect License