Identity-and-Access-Management-Designer Free Practice Test

Universal Containers (UC) wants to build a custom mobile app for their field reps to create orders in salesforce. After the first time the users log in, they must be able to access salesforce upon opening the mobile app without being prompted to log in again. What Oauth flows should be considered to support this requirement?

1. A. Web Server flow with a Refresh Token.
2. B. Mobile Agent flow with a Bearer Token.
3. C. User Agent flow with a Refresh Token.
4. D. SAML Assertion flow with a Bearer Token.

Correct Answer: C

Northern Trail Outfitters (NTO) uses the Customer 360 Platform implemented on Salesforce Experience Cloud. The development team in charge has learned of a contactless user feature, which can reduce the overhead of managing customers and partners by creating users without contact information.
What is the potential impact to the architecture if NTO decides to implement this feature?

1. A. Custom registration handler is needed to correctly assign External Identity or Community license for the newly registered contactless user.
2. B. If contactless user is upgraded to Community license, the contact record is automatically created and linked to the user record, but not associated with an Account.
3. C. Contactless user feature is available only with the External Identity license, which can restrict the Experience Cloudfunctionality available to the user.
4. D. Passwordless authentication can not be supported because the mobile phone receiving one-time password (OTP) needs tomatch the number on the contact record.

Correct Answer: C

customer service representatives at Universal containers (UC) are complaining that whenever they click on links to case records and are asked to login with SAML SSO, they are being redirected to the salesforce home tab and not the specific case record. What item should an architect advise the identity team at UC to investigate first?

1. A. My domain is configured and active within salesforce.
2. B. The salesforce SSO settings are using http post
3. C. The identity provider is correctly preserving the Relay state
4. D. The users have the correct Federation ID within salesforce.

Correct Answer: C

Containers (UC) has decided to implement a federated single Sign-on solution using a third-party Idp. In reviewing the third-party products, they would like to ensure the product supports the automated provisioning and deprovisioning of users. What are the underlining mechanisms that the UC Architect must ensure are part of the product?

1. A. SOAP API for provisioning; Just-in-Time (JIT) for Deprovisioning.
2. B. Just-In-time (JIT) for Provisioning; SOAP API for Deprovisioning.
3. C. Provisioning API for both Provisioning and Deprovisioning.
4. D. Just-in-Time (JIT) for both Provisioning and Deprovisioning.

Correct Answer: D

Universal Containers (UC) has an existing e-commerce platform and is implementing a new customer community. They do not want to force customers to register on both applications due to concern over the customers experience. It is expected that 25% of the e-commerce customers will utilize the customer community . The e-commerce platform is capable of generating SAML responses and has an existing
REST-ful API capable of managing users. How should UC create the identities of its e-commerce users with the customer community?

1. A. Use SAML JIT in the Customer Community to create users when a user tries to login to the community from the e-commerce site.
2. B. Use the e-commerce REST API to create users when a user self-register on the customer community and use SAML to allow SSO.
3. C. Use a nightly batch ETL job to sync users between the Customer Community and the e-commerce platform and use SAML to allow SSO.
4. D. Use the standard Salesforce API to create users in the Community When a User is Created in the e-Commerce platform and use SAML to allow SSO.

Correct Answer: A