Free Salesforce Identity-and-Access-Management-Architect Exam Questions

Become Salesforce Certified with updated Identity-and-Access-Management-Architect exam questions and correct answers

Page: 1 / 52

Total 258 Questions | Updated On: Apr 28, 2026

Add To Cart

Question 1

Northern Trail Outfitters recently acquired a company. Each company will retain its Identity Provider (IdP). Both companies rely extensively on Salesforce processes that send emails to users to take specific actions in Salesforce. How should the combined companys' employees collaborate in a single Salesforce org, yet authenticate to the appropriate IdP?

A : Configure unique MyDomains for each company and have generated links use the appropriate MyDomam in the URL.

B : Have generated links append a querystnng parameter indicating the IdP. The login service will redirect to the appropriate IdP.

C : Have generated links be prefixed with the appropriate IdP URL to invoke an IdP-initiated Security Assertion Markup Language flow when clicked.

D : Enable each IdP as a login option in the MyDomain Authentication Service settings. Users will then click on the appropriate IdP button.

Answer: D

Question 2

Universal containers (UC) would like to enable self - registration for their salesforce partner community users.

UC wants to capture some custom data elements from the partner user, and based on these data elements,

wants to assign the appropriate profile and account values. Which two actions should the architect recommend

to UC? Choose 2 answers

A : Modify the communitiesselfregcontroller to assign the profile and account.

B : Modify the selfregistration trigger to assign profile and account.

C : Configure registration for communities to use a custom visualforce page.

D : Configure registration for communities to use a custom apex controller.

Answer: A,C

Question 3

Universal Containers has multiple Salesforce instances where users receive emails from different instances.Users should be logged into the correct Salesforce instance authenticated by their IdP when clicking on anemail link to a Salesforce record.What should be enabled in Salesforce as a prerequisite?

A : My Domain

B : External Identity

C : Identity Provider

D : Multi-Factor Authentication

Answer: A

Question 4

A multinational industrial products manufacturer is planning to implement Salesforce CRM to manage theirbusiness. They have the following requirements:1. They plan to implement Partner communities to provide access to their partner network .2. They have operations in multiple countries and are planning to implement multiple Salesforce orgs.3. Some of their partners do business in multiple countries and will need information from multiple Salesforcecommunities.4. They would like to provide a single login for their partners.How should an Identity Architect solution this requirement with limited custom development?

A : Create a partner login for the country of their operation and use SAML federation to provide access toother orgs.

B : Consolidate Partner related information in a single org and provide access through Salesforcecommunity.

C : Allow partners to choose the Salesforce org they need information from and use login flows toauthenticate access.

D : Register partners in one org and access information from other orgs using APIs.

Answer: A

Question 5

Northern Trail Outfitters (NTO) wants its customers to use phone numbers to log in to their new digital portal,which was designed and built using Salesforce Experience Cloud. In order to access the portal, the user willneed to do the following:1. Enter a phone number and/or email address2. Enter a verification code that is to be sent via email or text.What is the recommended approach to fulfill this requirement?

A : Create a Login Discovery page and provide a Login Discovery Handler Apex class.

B : Create a custom login page with an Apex controller. The controller has logic to send and verify theidentity.

C : Create an Authentication provider and implement a self-registration handler class.

D : Create a custom login flow that uses an Apex controller to verify the phone numbers with the company's verification service.

Answer: A

Page: 1 / 52

Total 258 Questions | Updated On: Apr 28, 2026

Add To Cart