Identity-and-Access-Management-Designer Free Practice Test

Universal Containers (UC) has an existing web application that it would like to access from Salesforce without requiring users to re-authenticate. The web application is owned UC and the UC team that is responsible for it is willing to add new javascript code and/or libraries to the application. What implementation should an Architect recommend to UC?

1. A. Create a Canvas app and use Signed Requests to authenticate the users.
2. B. Rewrite the web application as a set of Visualforce pages and Apex code.
3. C. Configure the web application as an item in the Salesforce App Launcher.
4. D. Add the web application as a ConnectedApp using OAuth User-Agent flow.

Correct Answer: A

Ttie executive sponsor for an organization has asked if Salesforce supports the ability to embed a login widget into its service providers in order to create a more seamless user experience.
What should be used and considered before recommending it as a solution on the Salesforce Platform?

1. A. OpenID Connect Web Server Flo
2. B. Determine if the service provider is secure enough to store the client secret on.
3. C. Embedded Logi
4. D. Identify what level of UI customization will be required to make it match the service providers look and feel.
5. E. Salesforce REST api
6. F. Ensure that Secure Sockets Layer (SSL) connection for the integration is used.
7. G. Embedded Logi
8. H. Consider whether or not it relies on third party cookies which can cause browser compatibility issues.

Correct Answer: C

Universal Containers (UC) uses middleware to integrate multiple systems with Salesforce. UC has a strict, new requirement that usernames and passwords cannot be stored in any UC system. How can UC’s middleware authenticate to Salesforce while adhering to this requirement?

1. A. Create a Connected App that supports the JWT Bearer Token OAuth Flow.
2. B. Create a Connected App that supports the Refresh Token OAuth Flow
3. C. Create a Connected App that supports the Web Server OAuth Flow.
4. D. Create a Connected App that supports the User-Agent OAuth Flow.

Correct Answer: A

Universal Containers (UC) is building a custom Innovation platform on their Salesforce instance. The Innovation platform will be written completely in Apex and Visualforce and will use custom objects to store the Data. UC would like all users to be able to access the system without having to log in with Salesforce credentials. UC will utilize a third-party idp using SAML SSO. What is the optimal Salesforce licence type for all of the UC employees?

1. A. Identity Licence.
2. B. Salesforce Licence.
3. C. External Identity Licence.
4. D. Salesforce Platform Licence.

Correct Answer: D

How should an Architect force users to authenticate with Two-factor Authentication (2FA) for Salesforce only when not connected to an internal company network?

1. A. Use Custom Login Flows with Apex to detect the user's IP address and prompt for 2FA if needed.
2. B. Add the list of company's network IP addresses to the Login Range list under 2FA Setup.
3. C. Use an Apex Trigger on the UserLogin object to detect the user's IP address and prompt for 2FA if needed.
4. D. Apply the "Two-factor Authentication for User Interface Logins" permission and Login IP Ranges for all Profiles.

Correct Answer: A