Question # 1 Universal Containers (UC) is building an authenticated Customer Community for its customers. UC does not want customer credentials stored in Salesforce and is confident its customers would be willing to use their social media credentials to authenticate to the community. Which two actions should an Architect recommend UC to take? A. Use Delegated Authentication to call the Twitter login API to authenticate users.B. Configure an Authentication Provider for LinkedIn Social Media Accounts.C. Create a Custom Apex Registration Handler to handle new and existing users.D. Configure SSO Settings For Facebook to serve as a SAML Identity Provider.
Click for Answer
B. Configure an Authentication Provider for LinkedIn Social Media Accounts.C. Create a Custom Apex Registration Handler to handle new and existing users.
Answer Description Explanation: Configuring an Authentication Provider for LinkedIn Social Media Accounts allows UC to use LinkedIn as an external identity provider for its customer community. This means that customers can use their LinkedIn credentials to log in to the community without storing their credentials in Salesforce. Creating a Custom Apex Registration Handler allows UC to customize how new and existing users are handled when they log in with an external identity provider. This means that UC can control how user records are created, updated, or matched when customers use their social media credentials to authenticate to the community. These two actions can meet the requirement of UC to use social media credentials for its customer community.
Question # 2 Containers (UC) has an existing Customer Community. UC wants to expand the self- registration capabilities such that customers receive a different community experience based on the data they provide during the registration process. What is the recommended approach an Architect Should recommend to UC? A. Create an After Insert Apex trigger on the user object to assign specific custom permissions.B. Create separate login flows corresponding to the different community user personas.C. Modify the Community pages to utilize specific fields on the User and Contact records.D. Modify the existing Communities registration controller to assign different profiles.
Click for Answer
C. Modify the Community pages to utilize specific fields on the User and Contact records.
Answer Description Explanation: The recommended approach for UC to expand the self-registration capabilities such that customers receive a different community experience based on the data they provide during the registration process is to modify the community pages to utilize specific fields on the user and contact records. This approach allows UC to customize the community pages based on the user’s profile, preferences, interests, or other attributes that are stored in the user or contact fields. For example, UC can use conditional visibility rules or audience criteria to display different components or content based on the user’s field values. This approach does not require any code or complex configuration, and it provides a flexible and personalized community experience for different customer segments. The other options are not recommended for this scenario. Creating an after-insert Apex trigger on the user object to assign specific custom permissions would require UC to write code and manage custom permissions, which could increase maintenance and testing efforts. Creating separate login flows corresponding to the different community user personas would require UC to create multiple login pages and logic, which could increase complexity and confusion. Modifying the existing communities’ registration controller to assign different profiles would require UC to write code and manage multiple profiles, which could increase security and governance risks.
Question # 3 Universal Containers is creating a web application that will be secured by Salesforce Identity using the OAuth 2.0 Web Server Flow uses the OAuth 2.0 authorization code grant type). Which three OAuth concepts apply to this flow? Choose 3 answers A. Verification URLB. Client SecretC. Access TokenD. Scopes
Click for Answer
B. Client SecretC. Access TokenD. Scopes
Answer Description Explanation: The OAuth 2.0 Web Server Flow requires the client secret to authenticate the web application to Salesforce. The access token is used to access the Salesforce resources on behalf of the user. The scopes define the permissions and access levels for the web application. References: OAuth 2.0 Web Server Authentication Flow, Digging Deeper into OAuth 2.0 on Force.com
Question # 4 Universal Containers (UC) has an existing web application that it would like to access from Salesforce without requiring users to re-authenticate. The web application is owned UC and the UC team that is responsible for it is willing to add new javascript code and/or libraries to the application. What implementation should an Architect recommend to UC? A. Create a Canvas app and use Signed Requests to authenticate the users.B. Rewrite the web application as a set of Visualforce pages and Apex code.C. Configure the web application as an item in the Salesforce App Launcher.D. Add the web application as a ConnectedApp using OAuth User-Agent flow.
Click for Answer
A. Create a Canvas app and use Signed Requests to authenticate the users.
Answer Description Explanation:
A Canvas app is a web application that can be embedded within Salesforce and access
Salesforce data using the signed request authentication method. This method allows the Canvas app to receive a signed request that contains the context and OAuth token when it is loaded. The Canvas app can use the SDK to request a new or refreshed signed request on demand2. This way, the users do not need to re-authenticate when accessing the web application from Salesforce. References: Requesting a Signed Request, SAML Single Sign-On for Canvas Apps, Mastering Salesforce Canvas Apps
Question # 5 Universal Containers (UC) has an e-commerce website where customers can buy products, make payments, and manage their accounts. UC decides to build a Customer Community on Salesforce and wants to allow the customers to access the community from their accounts without logging in again. UC decides to implement an SP-initiated SSO using a SAML-compliant Idp. In this scenario where Salesforce is the Service Provider, which two activities must be performed in Salesforce to make SP-initiated SSO work? A. Configure SAML SSO settings.B. Create a Connected App.C. Configure Delegated Authentication.D. Set up My Domain.
Click for Answer
A. Configure SAML SSO settings.D. Set up My Domain.Question # 6 Universal Container's (UC) identity architect needs to recommend a license type for their new Experience Cloud site that will be used by external partners (delivery providers) for reviewing and updating their accounts, downloading files provided by UC and obtaining scheduled pickup dates from their calendar.
UC is using their Salesforce production org as the identity provider for these users and the expected number of individual users is 2.5 million with 13.5 million unique logins per month.
Which of the following license types should be used to meet the requirement? A. External Apps LicenseB. Partner CommunityLicenseC. Partner Community Login LicenseD. Customer Community plus Login License
Click for Answer
C. Partner Community Login License
Answer Description Explanation:
Question # 7 Universal containers uses an Employee portal for their employees to collaborate. employees access the portal from their company's internal website via SSO. It is set up to work with Active Directory. What is the role of Active Directory in this scenario? A. Identity storeB. Authentication storeC. Identity providerD. Service provider
Click for Answer
C. Identity provider
Answer Description Explanation: The role of Active Directory in this scenario is an identity provider. An identity provider is an application that authenticates users and provides information about them to service providers6. A service provider is an application that provides a service to users and relies on an identity provider for authentication6. In this scenario, the employee portal is a service provider that provides collaboration features to employees and relies on Active Directory for authentication. Active Directory is an identity provider that authenticates employees using their corporate credentials and sends information about them to the employee portal7. References: Identity Provider Overview, Configure SSO to Salesforce Using Microsoft AD FS as the Identity Provider
Question # 8 Universal Containers (UC) has a mobile application for its employees that uses data from Salesforce as well as uses Salesforce for Authentication purposes. UC wants its mobile users to only enter their credentials the first time they run the app. The application has been live for a little over 6 months, and all of the users who were part of the initial launch are complaining that they have to re-authenticate. UC has also recently changed the URI Scheme associated with the mobile app. What should the Architect at UC first investigate?Universal Containers (UC) has a mobile application for its employees that uses data from Salesforce as well as uses Salesforce for Authentication purposes. UC wants its mobile users to only enter their credentials the first time they run the app. The application has been live for a little over 6 months, and all of the users who were part of the initial launch are complaining that they have to re-authenticate. UC has also recently changed the URI Scheme associated with the mobile app. What should the Architect at UC first investigate? A. Check the Refresh Token policy defined in the Salesforce Connected App.B. Validate that the users are checking the box to remember their passwords.C. Verify that the Callback URL is correctly pointing to the new URI Scheme.D. Confirm that the access Token's Time-To-Live policy has been set appropriately.
Click for Answer
A. Check the Refresh Token policy defined in the Salesforce Connected App.
Answer Description Explanation: The first thing that the architect at UC should investigate is the refresh token policy defined in the Salesforce connected app. A refresh token is a credential that allows an application to obtain new access tokens without requiring the user to re-authenticate.
The refresh token policy determines how long a refresh token is valid and under what conditions it can be revoked. If the refresh token policy is set to expire after a certain period of time or after a change in IP address or device ID, then the users may have to re- authenticate after using the app for a while or from a different location or device. Option B is not a good choice because validating that the users are checking the box to remember their passwords may not be relevant, as the app uses SSO with a third-party identity provider and does not rely on Salesforce credentials. Option C is not a good choice because verifying that the callback URL is correctly pointing to the new URI scheme may not be necessary, as the callback URL is used for redirecting the user back to the app after authentication, but it does not affect how long the user can stay authenticated. Option D is not a good choice because confirming that the access token’s time-to-live policy has been set appropriately may not be effective, as the access token’s time-to-live policy determines how long an access token is valid before it needs to be refreshed by a refresh token, but it does not affect how long a refresh token is valid or when it can be revoked.
Up-to-Date
We always provide up-to-date Identity-and-Access-Management-Architect exam dumps to our clients. Keep checking website for updates and download.
Excellence
Quality and excellence of our Salesforce Certified Identity andAccess Management Architect (SU24) practice questions are above customers expectations. Contact live chat to know more.
Success
Your SUCCESS is assured with the Identity-and-Access-Management-Architect exam questions of passin1day.com. Just Buy, Prepare and PASS!
Quality
All our braindumps are verified with their correct answers. Download Identity and Access Management Designer Practice tests in a printable PDF format.
Basic
$80
Any 3 Exams of Your Choice
3 Exams PDF + Online Test Engine
Buy Now
Premium
$100
Any 4 Exams of Your Choice
4 Exams PDF + Online Test Engine
Buy Now
Gold
$125
Any 5 Exams of Your Choice
5 Exams PDF + Online Test Engine
Buy Now
Passin1Day has a big success story in last 12 years with a long list of satisfied customers.
Identity-and-Access-Management-Architect Dumps
We have recently updated Salesforce Identity-and-Access-Management-Architect dumps study guide. You can use our Identity and Access Management Designer braindumps and pass your exam in just 24 hours. Our Salesforce Certified Identity andAccess Management Architect (SU24) real exam contains latest questions. We are providing Salesforce Identity-and-Access-Management-Architect dumps with updates for 3 months. You can purchase in advance and start studying. Whenever Salesforce update Salesforce Certified Identity andAccess Management Architect (SU24) exam, we also update our file with new questions. Passin1day is here to provide real Identity-and-Access-Management-Architect exam questions to people who find it difficult to pass exam
What Our Customers Say
Jeff Brown
Thanks you so much passin1day.com team for all the help that you have provided me in my Salesforce exam. I will use your dumps for next certification as well.
Mareena Frederick
You guys are awesome. Even 1 day is too much. I prepared my exam in just 3 hours with your Identity-and-Access-Management-Architect exam dumps and passed it in first attempt :)
Ralph Donald
I am the fully satisfied customer of passin1day.com. I have passed my exam using your Salesforce Certified Identity andAccess Management Architect (SU24) braindumps in first attempt. You guys are the secret behind my success ;)
Lilly Solomon
I was so depressed when I get failed in my Cisco exam but thanks GOD you guys exist and helped me in passing my exams. I am nothing without you.
