Identity-and-Access-Management-Designer Free Practice Test

Universal Containers is budding a web application that will connect with the Salesforce API using JWT OAuth Flow.
Which two settings need to be configured in the connect app to support this requirement? Choose 2 answers

1. A. The Use Digital Signature option in the connected app.
2. B. The "web" OAuth scope in the connected app,
3. C. The "api" OAuth scope in the connected app.
4. D. The "edair_api" OAuth scope m the connected app.

Correct Answer: AC

Universal Containers (UC) has implemented a multi-org architecture in their company. Many users have licences across multiple orgs, and they are complaining about remembering which org and credentials are tied to which business process. Which two recommendations should the Architect make to address the Complaints? Choose 2 answers

1. A. Activate My Domain to Brand each org to the specific business use case.
2. B. Implement SP-Initiated Single Sign-on flows to allow deep linking.
3. C. Implement IdP-Initiated Single Sign-on flows to allow deep linking.
4. D. Implement Delegated Authentication from each org to the LDAP provider.

Correct Answer: AB

Universal Containers (UC) has an e-commerce website where customers can buy products, make payments and manage their accounts. UC decides to build a Customer Community on Salesforce and wants to allow the customers to access the community from their accounts without logging in again. UC decides to implement an SP-initiated SSO using a SAML-compliant Idp. In this scenario where Salesforce is the Service Provider, which two activities must be performed in Salesforce to make SP-initiated SSO work? Choose 2 answers

1. A. Configure SAML SSO settings.
2. B. Create a Connected App.
3. C. Configure Delegated Authentication.
4. D. Set up My Domain.

Correct Answer: AD

Universal Containers is implementing a new Experience Cloud site and the identity architect wants to use dynamic branding features as of the login process.
Which two options should the identity architect recommend to support dynamic branding for the site? Choose 2 answers

1. A. To use dynamic branding, the community must be built with the Visuaiforce + Salesforce Tabs template.
2. B. To use dynamic branding, the community must be built with the Customer Account Portal template.
3. C. An experience ID (expid) or placeholder parameter must be used in the URL to represent the brand.
4. D. An external content management system (CMS) must be used for dynamic branding on Experience Cloud sites.

Correct Answer: BC

Universal containers (UC) uses a legacy Employee portal for their employees to collaborate and post their ideas. UC decides to use salesforce ideas for voting and better tracking purposes. To avoid provisioning users on Salesforce, UC decides to push ideas posted on the Employee portal to salesforce through API. UC decides to use an API user using Oauth Username - password flow for the connection. How can the connection to salesforce be restricted only to the employee portal server?

1. A. Add the Employee portals IP address to the Trusted IP range for the connected App
2. B. Use a digital certificate signed by the employee portal Server.
3. C. Add the employee portals IP address to the login IP range on the user profile.
4. D. Use a dedicated profile for the user the Employee portal uses.

Correct Answer: A