Free Salesforce Identity-and-Access-Management-Architect Exam Questions

Become Salesforce Certified with updated Identity-and-Access-Management-Architect exam questions and correct answers

Page: 1 / 52

Total 258 Questions | Updated On: Aug 02, 2026

Add To Cart

Question 1

Northern Trail Outfitters (NTO) wants its customers to use phone numbers to log in to their new digital portal,which was designed and built using Salesforce Experience Cloud. In order to access the portal, the user willneed to do the following:1. Enter a phone number and/or email address2. Enter a verification code that is to be sent via email or text.What is the recommended approach to fulfill this requirement?

A : Create a Login Discovery page and provide a Login Discovery Handler Apex class.

B : Create a custom login page with an Apex controller. The controller has logic to send and verify theidentity.

C : Create an Authentication provider and implement a self-registration handler class.

D : Create a custom login flow that uses an Apex controller to verify the phone numbers with the company's verification service.

Answer: A

Question 2

Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the

OAuth 2.0 user-agent flow. Application users will authenticate using username and password. They should not

be forced to approve API access in the mobile app or reauthenticate for 3 months.

Which two connected app options need to be configured to fulfill this use case?

Choose 2 answers

A : Set Permitted Users to "Admin approved users are pre-authorized".

B : Set Permitted Users to "All users may self-authorize".

C : Set the Session Timeout value to 3 months.

D : Set the Refresh Token Policy to expire refresh token after 3 months.

Answer: B,D

Question 3

A multinational industrial products manufacturer is planning to implement Salesforce CRM to manage theirbusiness. They have the following requirements:1. They plan to implement Partner communities to provide access to their partner network .2. They have operations in multiple countries and are planning to implement multiple Salesforce orgs.3. Some of their partners do business in multiple countries and will need information from multiple Salesforcecommunities.4. They would like to provide a single login for their partners.How should an Identity Architect solution this requirement with limited custom development?

A : Create a partner login for the country of their operation and use SAML federation to provide access toother orgs.

B : Consolidate Partner related information in a single org and provide access through Salesforcecommunity.

C : Allow partners to choose the Salesforce org they need information from and use login flows toauthenticate access.

D : Register partners in one org and access information from other orgs using APIs.

Answer: A

Question 4

A multinational company using the Salesforce platform wants to implement robust user activity verification capabilities to detect unauthorized access and unusual login patterns. They need real-time monitoring and alerting functionalities to respond promptly to security incidents. Which Salesforce tool should be utilized to achieve these requirements?

A : Salesforce Event Monitoring and Event Log Files

B : Salesforce Profiles

C : Salesforce Platform Encryption

D : Salesforce Data Loader

Answer: A

Question 5

An identity architect's client has a homegrown identity provider (IdP). Salesforce is used as the serviceprovider (SP). The head of IT is worried that during a SP initiated single sign-on (SSO), the Security AssertionMarkup Language (SAML) request content will be altered.What should the identity architect recommend to make sure that there is additional trust between the SP andthe IdP?

A : Ensure that there is an HTTPS connection between IDP and SP.

B : Ensure that on the SSO settings page, the "Request Signing Certificate" field has a self-signed certificate.

C : Ensure that the Issuer and Assertion Consumer service (ACS) URL is property configured between SP and IDP.

D : Encrypt the SAML Request using certification authority (CA) signed certificate and decrypt on IdP.

Answer: D

Page: 1 / 52

Total 258 Questions | Updated On: Aug 02, 2026

Add To Cart