Free Online Salesforce Identity-and-Access-Management-Architect Practice Test

Prepare Your Salesforce Identity-and-Access-Management-Architect Exam Questions with Free online Identity-and-Access-Management-Architect Practice Test. Get Brilliant Salesforce Certified Identity and Access Management Architect( WI24) Exam Results with Valid Identity and Access Management Architect Exam Dumps.

Page: 1 / 50

Total 250 Questions | Updated On: May 15, 2024

Add To Cart

Question 1

An Identity architect works for a multinational, multi-brand organization. As they work with the organization

to understand their Customer Identity and Access Management requirements, the identity architect learns that

the brand experience is different for each of the customer's sub-brands and each of these branded experiences

must be carried through the login experience depending on which sub-brand the user is logging into.

Which solution should the architect recommend to support scalability and reduce maintenance costs, if the

organization has more than 150 sub-brands?

A : Assign each sub-brand a unique Experience ID and use the Experience ID to dynamically brand the login experience.

B : Use Audiences to customize the login experience for each sub-brand and pass an audience ID to the community during the OAuth and Security Assertion Markup Language (SAML) flows.

C : Create a community subdomain for each sub-brand and customize the look and feel of the Login page for each community subdomain to match the brand.

D : Create a separate Salesforce org for each sub-brand so that each sub-brand has complete control over theuser experience.

Answer: A

Question 2

Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the

OAuth 2.0 user-agent flow. Application users will authenticate using username and password. They should not

be forced to approve API access in the mobile app or reauthenticate for 3 months.

Which two connected app options need to be configured to fulfill this use case?

Choose 2 answers

A : Set Permitted Users to "Admin approved users are pre-authorized".

B : Set Permitted Users to "All users may self-authorize".

C : Set the Session Timeout value to 3 months.

D : Set the Refresh Token Policy to expire refresh token after 3 months.

Answer: B,D

Question 3

Universal containers (UC) would like to enable self - registration for their salesforce partner community users.

UC wants to capture some custom data elements from the partner user, and based on these data elements,

wants to assign the appropriate profile and account values. Which two actions should the architect recommend

to UC? Choose 2 answers

A : Modify the communitiesselfregcontroller to assign the profile and account.

B : Modify the selfregistration trigger to assign profile and account.

C : Configure registration for communities to use a custom visualforce page.

D : Configure registration for communities to use a custom apex controller.

Answer: A,C

Question 4

Universal Containers (UC) has an existing e-commerce platform and is implementing a new customer community. They do not want to force customers to register on both applications due to concern over the customers experience. It is expected that 25% of the e-commerce customers will utilize the customer community . The e-commerce platform is capable of generating SAML responses and has an existing REST-ful API capable of managing users. How should UC create the identities of its e-commerce users with the customer community?

A : Use SAML JIT in the Customer Community to create users when a user tries to login to the community from the e-commerce site.

B : Use the e-commerce REST API to create users when a user self-register on the customer community and use SAML to allow SSO.

C : Use a nightly batch ETL job to sync users between the Customer Community and the e-commerce platform and use SAML to allow SSO.

D : Use the standard Salesforce API to create users in the Community When a User is Created in the e-Commerce platform and use SAML to allow SSO.

Answer: A

Question 5

Universal Containers (UC) wants to implement SAML SSO for their internal of Salesforce users using a third-party IdP. After some evaluation, UC decides NOT to 65« set up My Domain for their Salesforce org. How does that decision impact their SSO implementation?

A : IdP-initiated SSO will NOT work.

B : Neither SP- nor IdP-initiated SSO will work.

C : Either SP- or IdP-initiated SSO will work.

D : SP-initiated SSO will NOT work

Answer: B

Page: 1 / 50

Total 250 Questions | Updated On: May 15, 2024

Add To Cart