Free Identity-and-Access-Management-Designer Questions for Salesforce Identity-and-Access-Management-Designer Exam

Question #1

Universal containers(UC) has a customer Community that uses Facebook for authentication. UC would like to ensure that changes in the Facebook profile are reflected on the appropriate customer Community user. How can this requirement be met?

A. Use the updateuser() method on the registration handler class.

B. Use information in the signed request that is received from Facebook.

C. Develop a schedule job that calls out to Facebook on a nightly basis.

D. Use SAML just-in-time provisioning between Facebook and Salesforce

Discussion 0

Correct Answer: A Vote an answer

Question #2

Northern Trail Outfitters want to allow its consumer to self-register on it business-to-consumer (B2C) portal that is built on Experience Cloud. The identity architect has recommended to use Person Accounts.
Which three steps need to be configured to enable self-registration using person accounts?
Choose 3 answers

A. Contact Salesforce Support to enable person accounts.

B. Under Login and Registration settings, ensure that the default account field is empty.

C. Contact Salesforce Support to enable business accounts.

D. Set organization-wide default sharing for Contact to Public Read Only.

E. Enable access to person and business account record types under Public Access Settings.

Discussion 0

Correct Answer: A,B,E Vote an answer

Question #3

A global company is using the Salesforce Platform as an Identity Provider and needs to integrate a third-party application with its Experience Cloud customer portal.
Which two features should be utilized to provide users with login and identity services for the third-party application?
Choose 2 answers

A. Use a connected app.

B. Use Delegated Authentication.

C. External a Data source with Named Principal identity type.

D. Use the App Launcher with single sign-on (SSO).

Discussion 0

Correct Answer: A,D Vote an answer

Question #4

Northern Trail Outfitters (NTO) uses Salesforce for Sales Opportunity Management. Okta was recently brought in to Just-in-Time (JIT) provision and authenticate NTO users to applications. Salesforce users also use Okta to authorize a Forecasting web application to access Salesforce records on their behalf.
Which two roles are being performed by Salesforce?
Choose 2 answers

A. OAuth Client

B. SAML Service Provider

C. OAuth Resource Server

D. SAML Identity Provider

Discussion 0

Correct Answer: A,B Vote an answer

Question #5

Universal Containers (UC) rolling out a new Customer Identity and Access Management Solution will be built on top of their existing Salesforce instance.
Several service providers have been setup and integrated with Salesforce using OpenlD Connect to allow for a seamless single sign-on experience. UC has a requirement to limit user access to only a subset of service providers per customer type.
Which two steps should be done on the platform to satisfy the requirement?
Choose 2 answers

A. Manage which connected apps a user has access to by assigning authentication providers to the users profile.

B. Assign the connected app to the customer community, and enable the users profile in the Community settings.

C. Set each of the Connected App access settings to Admin Pre-Approved.

D. Use Profiles and Permission Sets to assign user access to Admin Pre-Approved Connected Apps.

Discussion 0

Correct Answer: C,D Vote an answer

Question #6

Northern Trail Outfitters (NTO) believes a specific user account may have been compromised. NTO inactivated the user account and needs U perform a forensic analysis and identify signals that could Indicate a breach has occurred.
What should NTO's first step be in gathering signals that could indicate account compromise?

A. Download the Identity Provider Event Log and evaluate the details of activities performed by the user.

B. Download the Setup Audit Trail and review all recent activities performed by the user.

C. Download the Login History and evaluate the details of logins performed by the user.

D. Review the User record and evaluate the login and transaction history.

Discussion 0

Correct Answer: C Vote an answer

Question #7

An Architect has configured a SAML-based SSO integration between Salesforce and an external Identity provider and is ready to test it. When the Architect attempts to log in to Salesforce using SSO, the Architect receives a SAML error. Which two optimal actions should the Architect take to troubleshoot the issue?

A. Paste the SAML Assertion Validator in Salesforce.

B. Ensure the Callback URL is correctly set in the Connected Apps settings.

C. Use the browser's Development tools to view the Salesforce page's markup.

D. Use a browser that has an add-on/extension that can inspect SAML.

Discussion 0

Correct Answer: A,D Vote an answer

Question #8

Universal Containers is using OpenID Connect to enable a connection from their new mobile app to its production Salesforce org.
What should be done to enable the retrieval of the access token status for the OpenID Connect connection?

A. Create a custom OAuth scope.

B. Enable cross-origin resource sharing (CORS) for the /services/oauth2/token endpoint.

C. A Leverage OpenID Connect Token Introspection.

D. Query using OpenID Connect discovery endpoint.

Discussion 0

Correct Answer: C Vote an answer

Question #9

A group of users try to access one of universal containers connected apps and receive the following error message : "Failed : Not approved for access". what is most likely to cause of the issue?

A. The connected App setting "All users may self-authorize" is enabled.

B. The salesforce administrators gave revoked the Oauth authorization.

C. The users do not have the correct permission set assigned to them.

D. The use of high assurance sections are required for the connected App.

Discussion 0

Correct Answer: C Vote an answer

Question #10

Universal Containers (UC) has a Customer Community that uses Facebook for Authentication. UC would like to ensure that Changes in the Facebook profile are reflected on the appropriate Customer Community user: How can this requirement be met?

A. Develop a scheduled job that calls out to Facebook on a nightly basis.

B. Use information in the signed Request that is received from facebook.

C. Use the updateUser method on the registration Handler Class.

D. Use SAML Just-In-Time Provisioning between Facebook and Salesforce.

Discussion 0

Correct Answer: C Vote an answer

Question #11

Universal Containers has multiple Salesforce instances where users receive emails from different instances. Users should be logged into the correct Salesforce instance authenticated by their IdP when clicking on an email link to a Salesforce record.
What should be enabled in Salesforce as a prerequisite?

A. External Identity

B. My Domain

C. Multi-Factor Authentication

D. Identity Provider

Discussion 0

Correct Answer: B Vote an answer

Question #12

Universal Containers (UC) uses Salesforce for its customer service agents. UC has a proprietary system for order tracking which supports Security Assertion Markup Language (SAML) based single sign-on. The VP of customer service wants to ensure only active Salesforce users should be able to access the order tracking system which is only visible within Salesforce.
What should be done to fulfill the requirement?
Choose 2 answers

A. Setup Salesforce as an identity provider (IdP) for order Tracking.

B. Set up the Corporate Identity store as an identity provider (IdP) for Order Tracking,

C. Setup Order Tracking as a Canvas app in Salesforce to POST IdP initiated SAML assertion.

D. Customize Order Tracking to initiate a REST call to validate users in Salesforce after login.

Discussion 0

Correct Answer: A,B Vote an answer

Question #13

Universal Containers (UC) is building a custom Innovation platform on their Salesforce instance. The Innovation platform will be written completely in Apex and Visualforce and will use custom objects to store the Dat a. UC would like all users to be able to access the system without having to log in with Salesforce credentials. UC will utilize a third-party idp using SAML SSO. What is the optimal Salesforce licence type for all of the UC employees?

A. External Identity Licence.

B. Salesforce Platform Licence.

C. Identity Licence.

D. Salesforce Licence.

Discussion 0

Correct Answer: B Vote an answer

Question #14

An identity architect has built a native mobile application and plans to integrate it with a Salesforce Identity solution. The following are the requirements for the solution:
1. Users should not have to login every time they use the app.
2. The app should be able to make calls to the Salesforce REST API.
3. End users should NOT see the OAuth approval page.
How should the identity architect configure the Salesforce connected app to meet the requirements?

A. Enable the API Scope and Offline Access Scope on the connected app, and then set the Connected App access settings to "User may self authorize".

B. Enable the Full Access Scope and then set the connected app access settings to "Admin Pre-Approved".

C. Enable the API Scope and Offline Access Scope, upload a certificate so JWT Bearer Flow can be used and then set the connected app access settings to "Admin Pre-Approved".

D. Enable the API Scope and Offline Access Scope on the connected app, and then set the connected app to access settings to 'Admin Pre-Approved".

Discussion 0

Correct Answer: C Vote an answer

Free Identity-and-Access-Management-Designer Questions for Salesforce Certified Identity and Access Management Designer Identity-and-Access-Management-Designer Exam as PDF & Practice Test Engine

Download Free Salesforce Identity-and-Access-Management-Designer Demo