Online Identity-and-Access-Management-Designer Practice TestMore Salesforce Products >

Free Salesforce Identity-and-Access-Management-Designer Exam Dumps Questions

Salesforce Identity-and-Access-Management-Designer: Salesforce Certified Identity and Access Management Designer (SP19)

- Get instant access to Identity-and-Access-Management-Designer practice exam questions

- Get ready to pass the Salesforce Certified Identity and Access Management Designer (SP19) exam right now using our Salesforce Identity-and-Access-Management-Designer exam package, which includes Salesforce Identity-and-Access-Management-Designer practice test plus an Salesforce Identity-and-Access-Management-Designer Exam Simulator.

- The best online Identity-and-Access-Management-Designer exam study material and preparation tool is here.

4.5

(2265 ratings)

Question 1

Which two things should be done to ensure end users can only use single sign-on (SSO) to login in to Salesforce?
Choose 2 answers

A. Enable My Domain and select "Prevent login from https://login.salesforce.com".

B. Request Salesforce Support to enable delegated authentication.

C. Once SSO is enabled, users are only able to login using Salesforce credentials.

D. Assign user "is Single Sign-on Enabled" permission via profile or permission set.

Correct Answer:AD

Question 2

Universal Containers (UC) rolling out a new Customer Identity and Access Management Solution will be built on top of their existing Salesforce instance.
Several service providers have been setup and integrated with Salesforce using OpenlD Connect to allow for a seamless single sign-on experience. UC has a requirement to limit user access to only a subset of service providers per customer type.
Which two steps should be done on the platform to satisfy the requirement? Choose 2 answers

A. Manage which connected apps a user has access to by assigning authentication providers to the users profile.

B. Assign the connected app to the customer community, and enable the users profile in the Community settings.

C. Use Profiles and Permission Sets to assign user access to Admin Pre-Approved Connected Apps.

D. Set each of the Connected App access settings to Admin Pre-Approved.

Correct Answer:CD

Question 3

Universal Containers (UC) has a custom, internal-only, mobile billing application for users who are commonly out of the office. The app is configured as a connected App in Salesforce. Due to the nature of this app, UC would like to take the appropriate measures to properly secure access to the app. Which two are recommendations to make the UC? Choose 2 answers

A. Disallow the use of Single Sign-on for any users of the mobile app.

B. Require High Assurance sessions in order to use the Connected App.

C. Set Login IP Ranges to the internal network for all of the app users Profiles.

D. Use Google Authenticator as an additional part of the login process

Correct Answer:BD

Question 4

Universal containers uses an Employee portal for their employees to collaborate. employees access the portal from their company's internal website via SSO. It is set up to work with Active Directory. What is the role of Active Directory in this scenario?

A. Identity store

B. Authentication store

C. Identity provider

D. Service provider

Correct Answer:C

Question 5

Universal containers wants to implement SAML SSO for their internal salesforce users using a third-party IDP. After some evaluation, UC decides not to set up my domain for their salesforce.org. How does that decision impact their SSO implementation?

A. Neithersp - nor IDP - initiated SSO will work

B. Either sp - or IDP - initiated SSO will work

C. IDP - initiated SSO will not work

D. Sp-Initiated SSO will not work

Correct Answer:D

Question 6

Universal Containers is considering using Delegated Authentication as the sole means of Authenticating of Salesforce users. A Salesforce Architect has been brought in to assist with the implementation. What two risks Should the Architect point out? Choose 2 answers

A. Delegated Authentication is enabled or disabled for the entire Salesforce org.

B. UC will be required to develop and support a custom SOAP web service.

C. Salesforce users will be locked out of Salesforce if the web service goes down.

D. The web service must reside on a public cloud service, such as Heroku.

Correct Answer:BC

START Identity-and-Access-Management-Designer EXAM