2021 Identity-and-Access-Management-Designer Dumps PDF - Identity-and-Access-Management-Designer Real Exam Questions Answers
Valid Identity-and-Access-Management-Designer Test Answers & Salesforce Identity-and-Access-Management-Designer Exam PDF
NEW QUESTION 83
Containers (UC) has multiple Salesforce Orgs and would like to use a single Identity Provider to access all of their orgs. How should UC's Architect enable this behaviour?
- A. Ensure the same username is allowed in multiple orgs by contacting Salesforce Support.
- B. Ensure that users have the same Email Value in their user records in all of UC's Salesforce orgs.
- C. Ensure that users have the same Federation ID value in their User records in all of UC's Salesforce orgs
- D. Ensure that users have the same Alias value in their user records in all of UC's Salesforce orgs.
Answer: C
NEW QUESTION 84
Universal Containers (UC) has decided to build a new, highly sensitive application on the Force.com platform.
The security team at UC has decided that they want users to provide a fingerprint in addition to username/password to authenticate to this application. How can an Architect support fingerprints as a form of identification for Salesforce authentication?
- A. Use delegated Authentication with callouts to a third-party fingerprint scanning application.
- B. Use custom login flows with callouts to a third-party fingerprint scanning application.
- C. Use an AppExchange product that does fingerprint scanning with native Salesforce Identity Confirmation.
- D. Use Salesforce Two-factor authentication with callouts to a third-party fingerprint scanning application.
Answer: C
NEW QUESTION 85
Universal containers (UC) is successfully using Delegated Authentication for their salesforce users. The service supporting Delegated Authentication is written in Java. UC has a new CIO that is requiring all company Web services be RESR-ful and written in . NET. Which two considerations should the UC Architect provide to the new CIO? Choose 2 answers
- A. Delegated Authentication will continue to work with rest services.
- B. Delegated Authentication will continue to work with a.net service.
- C. Delegated Authentication will not work with rest services.
- D. Delegated Authentication will not work with a.net service.
Answer: B,C
NEW QUESTION 86
Universal Containers (UC) is building a customer community and will allow customers to authenticate using Facebook credentials. The First time the user authenticating using facebook, UC would like a customer account created automatically in their Accounting system. The accounting system has a web service accessible to Salesforce for the creation of accounts. How can the Architect meet these requirements?
- A. Add an Apex callout in the registration handler of the authorization provider.
- B. Create a custom application on Heroku that manages the sign-on process from Facebook.
- C. Use JIT Provisioning to automatically create the account in the accounting system.
- D. Use OAuth JWT flow to pass the data from Salesforce to the Accounting System.
Answer: A
NEW QUESTION 87
A technology enterprise is planning to implement single sign-on login for users. When users log in to the Salesforce User object custom field, data should be populated for new and existing users.
Which two steps should an identity architect recommend?
Choose 2 answers
- A. Implement Auth.SamlJitHandler Interface.
- B. Create and update methods.
- C. Implement SesslonManagement Class.
- D. Implement RegistrationHandler Interface.
Answer: A,B
NEW QUESTION 88
Universal Containers (UC) has an existing Salesforce org configured for SP-Initiated SAML SSO with their Idp. A second Salesforce org is being introduced into the environment and the IT team would like to ensure they can use the same Idp for new org. What action should the IT team take while implementing the second org?
- A. Use the same SAML Identity location as the first org.
- B. Use the Salesforce Username as the SAML Identity Type.
- C. Use the same request bindings as the first org.
- D. Use a different Entity ID than the first org.
Answer: D
NEW QUESTION 89
Universal containers wants to implement SAML SSO for their internal salesforce users using a third-party IDP. After some evaluation, UC decides not to set up my domain for their salesforce.org. How does thatdecision impact their SSO implementation?
- A. Either sp - or IDP - initiated SSO will work
- B. Sp-Initiated SSO will not work
- C. IDP - initiated SSO will not work
- D. Neithersp - nor IDP - initiated SSO will work
Answer: B
NEW QUESTION 90
Universal containers (UC) is setting up Delegated Authentication to allow employees to log in using their corporate credentials. UC's security team is concerned about the risk of exposing the corporate login service on the Internet and has asked that a reliable trust mechanism be put in place between the login service and salesforce. What mechanism should an architect put in place to enable a trusted connection between the login services and salesforce?
- A. Enforce mutual Authentication between systems using SSL.
- B. Require the use of Salesforce security Tokens on password.
- C. Set up a proxy server for the login service in the DMZ.
- D. Include client ID and client secret in the login header callout.
Answer: B
NEW QUESTION 91
Universal containers (UC) has a mobile application that calls the salesforce REST API. In order to prevent users from having to enter their credentials everytime they use the app, UC has enabled the use of refresh Tokens as part of the salesforce connected App and updated their mobile app to take advantage of the refresh token. Even after enabling the refresh token, Users are still complaining that they have to enter their credentials once a day. What is the most likely cause of the issue?
- A. The Oauth authorizations are being revoked by a nightly batch job.
- B. The app is requesting too many access Tokens in a 24-hour period
- C. The users forget to check the box to remember their credentials.
- D. The refresh token expiration policy is set incorrectly in salesforce
Answer: D
NEW QUESTION 92
The CIO of universal containers(UC) wants to start taking advantage of the refresh token capability for the UC applications that utilize Oauth 2.0. UC has listed an architect to analyze all of the applications that use Oauth flows to. See where refresh Tokens can be applied. Which two OAuth flows should the architect consider in their evaluation? Choose 2 answers
- A. Web server
- B. User-Agent
- C. Jwt bearer token
- D. Username-password
Answer: A,B
NEW QUESTION 93
Universal Containers is budding a web application that will connect with the Salesforce API using JWT OAuth Flow.
Which two settings need to be configured in the connect app to support this requirement?
Choose 2 answers
- A. The "api" OAuth scope in the connected app.
- B. The Use Digital Signature option in the connected app.
- C. The "web" OAuth scope in the connected app,
- D. The "edair_api" OAuth scope m the connected app.
Answer: A,B
NEW QUESTION 94
Universal Containers (UC) has a Customer Community that uses Facebook for Authentication. UC would like to ensure that Changes in the Facebook profile are reflected on the appropriate Customer Community user: How can this requirement be met?
- A. Use SAML Just-In-Time Provisioning between Facebook and Salesforce.
- B. Develop a scheduled job that calls out to Facebook on a nightly basis.
- C. Use information in the signed Request that is received from facebook.
- D. Use the updateUser method on the registration Handler Class.
Answer: D
NEW QUESTION 95
Universal Containers (UC) is building a customer community and will allow customers to authenticate using Facebook credentials. The First time the user authenticating using facebook, UC would like a customer account created automatically in their Accounting system. The accounting system has a web service accessible to Salesforce for the creation of accounts. How can the Architect meet these requirements?
- A. Use JIT Provisioning to automatically create the account in the accounting system.
- B. Create a custom application on Heroku that manages the sign-on process from Facebook.
- C. Use OAuth JWT flow to pass the data from Salesforce to the Accounting System.
- D. Add an Apex callout in the registration handler of the authorization provider.
Answer: A
NEW QUESTION 96
Universal Containers is considering using Delegated Authentication as the sole means of Authenticating of Salesforce users. A Salesforce Architect has been brought in to assist with the implementation. What two risks Should the Architect point out? Choose 2 answers
- A. UC will be required to develop and support a custom SOAP web service.
- B. Salesforce users will be locked out of Salesforce if the web service goes down.
- C. The web service must reside on a public cloud service, such as Heroku.
- D. Delegated Authentication is enabled or disabled for the entire Salesforce org.
Answer: C,D
NEW QUESTION 97
Universal containers (UC) employees have salesforce access from restricted ip ranges only, to protect against unauthorised access. UC wants to rollout the salesforce1 mobile app and make it accessible from any location.
Which two options should an architect recommend? Choose 2 answers
- A. Relax the ip restriction in the connect app settings for the salesforce1 mobile app
- B. Relax the ip restriction with a second factor in the connect app settings for salesforce1 mobile app
- C. Remove existing restrictions on ip ranges for all types of user access.
- D. Use login flow to bypass ip range restriction for the mobile app.
Answer: A,D
NEW QUESTION 98
Universal Containers (UC) implemented SSO to a third-party system for their Salesforce users to access the App Launcher. UC enabled "User Provisioning" on the Connected App so that changes to user accounts can be synched between Salesforce and the third party system. However, UC quickly notices that changes to user roles in Salesforce are not getting synched to the third-party system. What is the most likely reason for this behaviour?
- A. User Provisioning for Connected Apps does not support role sync.
- B. The Approval queue for User Provisioning Requests is unmonitored.
- C. Required operation(s) was not mapped in User Provisioning Settings.
- D. Salesforce roles have more than three levels in the role hierarchy.
Answer: A
NEW QUESTION 99
Universal Containers uses Salesforce as an identity provider and Concur as the Employee Expense management system. The HR director wants to ensure Concur accounts for employees are created only after the appropnate approval in the Salesforce org.
Which three steps should the identity architect use to implement this requirement?
Choose 3 answers
- A. Create an approval process for UserProvisionlngRequest object associated with the provisioning flow.
- B. Create an approval process for a custom object associated with the provisioning flow.
- C. Create a connected app for Concur in Salesforce.
- D. Enable User Provisioning for the connected app.
- E. Create an approval process for user object associated with the provisioning flow.
Answer: A,C,D
NEW QUESTION 100
Universal containers (UC) would like to enable self - registration for their salesforce partner community users. UC wants to capture some custom data elements from the partner user, and based on these data elements, wants to assign the appropriate profile and account values. Which two actions should the architect recommend to UC? Choose 2 answers
- A. Modify the communitiesselfregcontroller to assign the profile and account.
- B. Configure registration for communities to use a custom visualforce page.
- C. Configure registration for communities to use a custom apex controller.
- D. Modify the selfregistration trigger to assign profile and account.
Answer: A,B
NEW QUESTION 101
......
Difficulty in writing Identity-and-Access-Management-Designer Exam
This is exam is very difficult for those candidates who don’t practice during preparation and candidates need a lab for practicing. Then practical exposure is much required to understand the contents of the exam. So, if anyone is associated with some kinds of an organization where he has opportunities to practice but if you can’t afford the lab and don’t have time to practice. So, Easy4Engine is the solution to this problem. We provide the best Salesforce Identity-and-Access-Management-Designer dumps and practice test for your preparation. Salesforce Identity-and-Access-Management-Designer dumps to ensure your success in the Salesforce Identity-and-Access-Management-Designer Certification Exam at first attempt. Our Salesforce Identity-and-Access-Management-Designer dumps are updated on regular basis. Easy4Engine has given option to download some test papers questions in PDF format, alongwith, this candidates can practice test papers online using our test engine. Easy4Engine provides verified questions with answers which you can expect in the exam. So, it makes easier for candidates to clear it in the first attempt itself..
Identity-and-Access-Management-Designer Exam Dumps - PDF Questions and Testing Engine: https://www.easy4engine.com/Identity-and-Access-Management-Designer-test-engine.html
Realistic Identity-and-Access-Management-Designer Exam Dumps with Accurate & Updated Questions: https://drive.google.com/open?id=1jHZkMqfK5r6JiGKGARnaSsXRtGKfFbe2
