Free Salesforce Identity-and-Access-Management-Architect Exam Questions

Question 1

An identity architect's client has a homegrown identity provider (IdP). Salesforce is used as the serviceprovider (SP). The head of IT is worried that during a SP initiated single sign-on (SSO), the Security AssertionMarkup Language (SAML) request content will be altered.What should the identity architect recommend to make sure that there is additional trust between the SP andthe IdP?

A : Ensure that there is an HTTPS connection between IDP and SP.

B : Ensure that on the SSO settings page, the "Request Signing Certificate" field has a self-signed certificate.

C : Ensure that the Issuer and Assertion Consumer service (ACS) URL is property configured between SP and IDP.

D : Encrypt the SAML Request using certification authority (CA) signed certificate and decrypt on IdP.

Answer: D

Question 2

An identity architect's client has a homegrown identity provider (IdP). Salesforce is used as the serviceprovider (SP). The head of IT is worried that during a SP initiated single sign-on (SSO), the Security AssertionMarkup Language (SAML) request content will be altered.What should the identity architect recommend to make sure that there is additional trust between the SP andthe IdP?

A : Ensure that there is an HTTPS connection between IDP and SP.

B : Ensure that on the SSO settings page, the "Request Signing Certificate" field has a self-signed certificate.

C : Ensure that the Issuer and Assertion Consumer service (ACS) URL is property configured between SP and IDP.

D : Encrypt the SAML Request using certification authority (CA) signed certificate and decrypt on IdP.

Answer: D

Question 3

Universal Containers (UC) has built a custom token-based Two-factor authentication (2FA) system for their existing on-premise applications. They are now implementing Salesforce and would like to enable a Two-factor login process for it, as well. What is the recommended solution as Architect should consider?

A : Use the custom 2FA system for on-premise applications and native 2FA for Salesforce.

B : Replace the custom 2FA system with an AppExchange App that supports on premise application and salesforce.

C : Use Custom Login Flows to connect to the existing custom 2FA system for use in Salesforce.

D : Replace the custom 2FA system with Salesforce 2FA for on-premise applications and Salesforce.

Answer: D

Question 4

What information does the 'Relaystate' parameter contain in sp-Initiated Single Sign-on?

A : Reference to a URL redirect parameter at the identity provider.

B : Reference to a URL redirect parameter at the service provider.

C : Reference to the login address URL of the service provider.

D : Reference to the login address URL of the identity Provider.

Answer: B

Question 5

Universal Containers (UC) has an existing e-commerce platform and is implementing a new customer community. They do not want to force customers to register on both applications due to concern over the customers experience. It is expected that 25% of the e-commerce customers will utilize the customer community . The e-commerce platform is capable of generating SAML responses and has an existing REST-ful API capable of managing users. How should UC create the identities of its e-commerce users with the customer community?

A : Use SAML JIT in the Customer Community to create users when a user tries to login to the community from the e-commerce site.

B : Use the e-commerce REST API to create users when a user self-register on the customer community and use SAML to allow SSO.

C : Use a nightly batch ETL job to sync users between the Customer Community and the e-commerce platform and use SAML to allow SSO.

D : Use the standard Salesforce API to create users in the Community When a User is Created in the e-Commerce platform and use SAML to allow SSO.

Answer: A