Free Salesforce Plat-Arch-203 Exam Questions

Become Salesforce Certified with updated Plat-Arch-203 exam questions and correct answers

Page: 1 / 52

Total 258 Questions | Updated On: Oct 25, 2026

Add To Cart

Question 1

Northern Trail Outfitters want to allow its consumer to self-register on it business-to-consumer (B2C) portalthat is built on Experience Cloud. The identity architect has recommended to use Person Accounts.Which three steps need to be configured to enable self-registration using person accounts?Choose 3 answers

A : Enable access to person and business account record types under Public Access Settings.

B : Contact Salesforce Support to enable business accounts.

C : Under Login and Registration settings, ensure that the default account field is empty.

D : Contact Salesforce Support to enable person accounts.

E : Set organization-wide default sharing for Contact to Public Read Only.

Answer: A,C,D

Question 2

Universal Containers (UC) has implemented a multi-org architecture in their company. Many users havelicences across multiple orgs, and they are complaining about remembering which org and credentials are tiedto which business process. Which two recommendations should the Architect make to address the Complaints?Choose 2 answers

A : Activate My Domain to Brand each org to the specific business use case.

B : Implement SP-Initiated Single Sign-on flows to allow deep linking.

C : Implement IdP-Initiated Single Sign-on flows to allow deep linking.

D : Implement Delegated Authentication from each org to the LDAP provider.

Answer: A,B

Question 3

Universal Containers is creating a mobile application that will be secured by Salesforce Identity using theOAuth 2.0 user-agent flow. Application users will authenticate using username and password. They should notbe forced to approve API access in the mobile app or reauthenticate for 3 months.Which two connected app options need to be configured to fulfill this use case?Choose 2 answers

A : Set Permitted Users to "Admin approved users are pre-authorized".

B : Set Permitted Users to "All users may self-authorize".

C : Set the Session Timeout value to 3 months.

D : Set the Refresh Token Policy to expire refresh token after 3 months.

Answer: B,D

Question 4

Northern Trail Outfitters would like to automatically create new employee users in Salesforce with anappropriate profile that maps to its Active Directory Department.How should an identity architect implement this requirement?

A : Use the createUser method in the Just-in-Time (JIT) provisioning registration handler to assign theappropriate profile.

B : Use the updateUser method in the Just-in-Time (JIT) provisioning registration handler to assign theappropriate profile.

C : Use a login flow to collect Security Assertion Markup Language attributes and assign the appropriateprofile during Just-In-Time(JIT) provisioning.

D : Make a callout during the login flow to query department from Active Directory to assign theappropriate profile.

Answer: B

Question 5

Northern Trail Outfitters (NTO) recently purchased Salesforce Identity Connect to streamline user provisioning across Microsoft Active Directory (AD) and Salesforce Sales Cloud. NTO has asked an identity architect to identify which salesforce security configurations can map to AD permissions. Which three Salesforce permissions are available to map to AD permissions? Choose 3 answers

A : Public Groups

B : Field-Level Security

C : Roles

D : Sharing Rules

E : Profiles and Permission Sets

Answer: A,C

Page: 1 / 52

Total 258 Questions | Updated On: Oct 25, 2026

Add To Cart