Identity-and-Access-Management-Designer Free Practice Test

Universal containers(UC) has decided to build a new, highly sensitive application on Force.com platform. The security team at UC has decided that they want users to provide a fingerprint in addition to username/Password to authenticate to this application. How can an architect support fingerprints as a form of identification for salesforce Authentication?

1. A. Use salesforce Two-factor Authentication with callouts to a third-party fingerprint scanning application.
2. B. Use Delegated Authentication with callouts to a third-party fingerprint scanning application.
3. C. Use an appexchange product that does fingerprint scanning with native salesforce identity confirmation.
4. D. Use custom login flows with callouts to a third-party fingerprint scanning application.

Correct Answer: D

Universal containers (UC) is setting up their customer Community self-registration process. They are uncomfortable with the idea of assigning new users to a default account record. What will happen when customers self-register in the community?

1. A. The self-registration process will produce an error to the user.
2. B. The self-registration page will ask user to select an account.
3. C. The self-registration process will create a person Account record.
4. D. The self-registration page will create a new account record.

Correct Answer: A

Refer to the exhibit.

Outfitters (NTO) is using Experience Cloud as an Identity for its application on Heroku. The application on Heroku should be able to handle two brands, Northern Trail Shoes and Northern Trail Shirts.
A user should select either of the two brands in Heroku before logging into the community. The app then performs Authorization using OAuth2.0 with the Salesforce Experience Cloud site.
NTO wants to make sure it renders login page images dynamically based on the user's brand preference selected in Heroku before Authorization.
what should an identity architect do to fulfill the above requirements?

1. A. For each brand create different communities and redirect users to the appropriate community using a custom Login controller written in Apex.
2. B. Create multiple login screens using Experience Builder and use Login Flows at runtime to route to different login screens.
3. C. Authorize third-party service by sending authorization requests to the community-url/services/oauth2/authorize/cookie_value.
4. D. Authorize third-party service by sending authorization requests to thecommunity-url/services/oauth2/authonze/expid_value.

Correct Answer: D

Universal Containers (UC) uses Active Directory (AD) as their identity store for employees and must continue to do so for network access. UC is undergoing a major transformation program and moving all of their enterprise applications to cloud platforms including Salesforct, Workday, and SAP HANA. UC needs to implement an SSO solution for accessing all of the third-party cloud applications and the CIO is inclined to use Salesforce for all of their identity and access management needs.
Which two Salesforce license types does UC need for its employees' Choose 2 answers

1. A. Company Community and Identity licenses
2. B. Identity and Identity Connect licenses
3. C. Chatter Only and Identity licenses
4. D. Salesforce and Identity Connect licenses

Correct Answer: BD

An Identity and Access Management (IAM) Architect is recommending Identity Connect to integrate Microsoft Active Directory (AD) with Salesforce for user provisioning, deprovisioning and single sign-on (SSO).
Which feature of Identity Connect is applicable for this scenano?

1. A. When Identity Connect is in place, if a user is deprovisioned in an on-premise AD, the user's Salesforce session Is revokedImmediately.
2. B. If the number of provisioned users exceeds Salesforce licence allowances, identity Connect will start disabling the existingSalesforce users in First-in, First-out (FIFO) fashion.
3. C. Identity Connect can be deployed as a managed package on salesforce org, leveraging High Availability of Salesforce Platformout-of-the-box.
4. D. When configured, Identity Connect acts as an identity provider to both Active Directory and Salesforce,thus providing SSO as a default feature.

Correct Answer: A