Identity-and-Access-Management-Designer Salesforce Exam Questions and Free Practice Test

Question 13

Universal containers (UC) has a mobile application that calls the salesforce REST API. In order to prevent users from having to enter their credentials everytime they use the app, UC has enabled the use of refresh Tokens as part of the salesforce connected App and updated their mobile app to take advantage of the refresh token. Even after enabling the refresh token, Users are still complaining that they have to enter their credentials once a day. What is the most likely cause of the issue?

A. The Oauth authorizations are being revoked by a nightly batch job.

B. The refresh token expiration policy is set incorrectly in salesforce

C. The app is requesting too many access Tokens in a 24-hour period

D. The users forget to check the box to remember their credentials.

Correct Answer:B

Question 14

A multinational company is looking to rollout Salesforce globally. The company has a Microsoft Active Directory Federation Services (ADFS) implementation for the Americas, Europe and APAC. The company plans to have a single org and they would like to have all of its users access Salesforce using the ADFS . The company would like to limit its investments and prefer not to procure additional applications to satisfy the requirements.
Identity-and-Access-Management-Designer dumps exhibit
What is recommended to ensure these requirements are met ?

A. Use connected apps for each ADFS implementation and implement Salesforce site to authenticate users across the ADFS system applicable to their geo.

B. Implement Identity Connect to provide single sign-on to Salesforce and federated across multiple ADFS systems.

C. Add a central identity system that federates between the ADFS systems and integrate with Salesforce for single sign-on.

D. Configure Each ADFS system under single sign-on settings and allow users to choose the system to authenticate during sign on to Salesforce

Correct Answer:B

Question 15

Universal Containers (UC) has a strict requirement to authenticate users to Salesforce using their mainframe credentials. The mainframe user store cannot be accessed from a SAML provider. UC would also like to have users in Salesforce created on the fly if they provide accurate mainframe credentials.
How can the Architect meet these requirements?

A. Use a Salesforce Login Flow to call out to a web service and create the user on the fly.

B. Use the SOAP API to create the user when created on the mainframe; implement Delegated Authentication.

C. Implement Just-In-Time Provisioning on the mainframe to create the user on the fly.

D. Implement OAuth User-Agent Flow on the mainframe; use a Registration Handler to create the user on the fly.

Correct Answer:C

Question 16

The CIO of universal containers(UC) wants to start taking advantage of the refresh token capability for the UC applications that utilize Oauth 2.0. UC has listed an architect to analyze all of the applications that use Oauth flows to. See where refresh Tokens can be applied. Which two OAuth flows should the architect consider in their evaluation? Choose 2 answers

A. Web server

B. Jwt bearer token

C. User-Agent

D. Username-password

Correct Answer:AC

Question 17

Containers (UC) uses an internal system for recruiting and would like to have the candidates' info available in the Salesforce automatically when they are selected. UC decides to use OAuth to connect to Salesforce from the recruiting system and would like to do the authentication using digital certificates. Which two OAuth flows should be considered to meet the requirement? Choose 2 answers

A. JWT Bearer Token flow

B. Refresh Token flow

C. SAML Bearer Assertion flow

D. Web Service flow

Correct Answer:AC

Question 18

Universal Containers (UC) has a desktop application to collect leads for marketing campaigns. UC wants to extend this application to integrate with Salesforce to create leads. Integration between the desktop application and Salesforce should be seamless. What Authorization flow should the Architect recommend?

A. JWT Bearer Token Flow

B. Web Server Authentication Flow

C. User Agent Flow

D. Username and Password Flow

Correct Answer:C

START Identity-and-Access-Management-Designer EXAM