Free Salesforce Plat-Arch-203 Exam Questions

Become Salesforce Certified with updated Plat-Arch-203 exam questions and correct answers

Page: 1 / 52

Total 258 Questions | Updated On: Jul 01, 2026

Add To Cart

Question 1

Universal containers wants to implement SAML SSO for their internal salesforce users using a third-party IDP. After some evaluation, UC decides not to set up my domain for their salesforce.org. How does that decision impact their SSO implementation?

A : Neithersp - nor IDP - initiated SSO will work

B : Either sp - or IDP - initiated SSO will work

C : IDP - initiated SSO will not work

D : Sp-Initiated SSO will not work

Answer: D

Question 2

An Architect has configured a SAML-based SSO integration between Salesforce and an external Identity provider and is ready to test it. When the Architect attempts to log in to Salesforce using SSO, the Architect receives a SAML error. Which two optimal actions should the Architect take to troubleshoot the issue?

A : Ensure the Callback URL is correctly set in the Connected Apps settings.

B : Use a browser that has an add-on/extension that can inspect SAML.

C : Paste the SAML Assertion Validator in Salesforce.

D : Use the browser-s Development tools to view the Salesforce page-s markup.

Answer: B,C

Question 3

What information does the 'Relaystate' parameter contain in sp-Initiated Single Sign-on?

A : Reference to a URL redirect parameter at the identity provider.

B : Reference to a URL redirect parameter at the service provider.

C : Reference to the login address URL of the service provider.

D : Reference to the login address URL of the identity Provider.

Answer: B

Question 4

Universal Containers (UC) has built a custom token-based Two-factor authentication (2FA) system for their existing on-premise applications. They are now implementing Salesforce and would like to enable a Two-factor login process for it, as well. What is the recommended solution as Architect should consider?

A : Use the custom 2FA system for on-premise applications and native 2FA for Salesforce.

B : Replace the custom 2FA system with an AppExchange App that supports on premise application and salesforce.

C : Use Custom Login Flows to connect to the existing custom 2FA system for use in Salesforce.

D : Replace the custom 2FA system with Salesforce 2FA for on-premise applications and Salesforce.

Answer: D

Question 5

Universal Containers is creating a mobile application that will be secured by Salesforce Identity using theOAuth 2.0 user-agent flow. Application users will authenticate using username and password. They should notbe forced to approve API access in the mobile app or reauthenticate for 3 months.Which two connected app options need to be configured to fulfill this use case?Choose 2 answers

A : Set Permitted Users to "Admin approved users are pre-authorized".

B : Set Permitted Users to "All users may self-authorize".

C : Set the Session Timeout value to 3 months.

D : Set the Refresh Token Policy to expire refresh token after 3 months.

Answer: B,D

Page: 1 / 52

Total 258 Questions | Updated On: Jul 01, 2026

Add To Cart