Identity-and-Access-Management-Designer Salesforce Exam Questions and Free Practice Test

Question 43

Universal Containers (UC) is building a custom Innovation platform on their Salesforce instance. The Innovation platform will be written completely in Apex and Visualforce and will use custom objects to store the Data. UC would like all users to be able to access the system without having to log in with Salesforce credentials. UC will utilize a third-party idp using SAML SSO. What is the optimal Salesforce licence type for all of the UC employees?

A. Identity Licence.

B. Salesforce Licence.

C. External Identity Licence.

D. Salesforce Platform Licence.

Correct Answer:D

Question 44

Universal Containers (UC) wants to build a few applications that leverage the Salesforce REST API. UC has asked its Architect to describe how the API calls will be authenticated to a specific user. Which two mechanisms can the Architect provide? Choose 2 Answers

A. Authentication Token

B. Session ID

C. Refresh Token

D. Access Token

Correct Answer:CD

Question 45

A global company has built an external application that uses data from its Salesforce org via an OAuth 2.0 authorization flow. Upon logout, the existing Salesforce OAuth token must be invalidated.
Which action will accomplish this?

A. Use a HTTP POST to request the refresh token for the current user.

B. Use a HTTP POST to the System for Cross-domain Identity Management (SCIM) endpoint, including the current OAuth token.

C. Use a HTTP POST to make a call to the revoke token endpoint.

D. Enable Single Logout with a secure logout URL.

Correct Answer:C

Question 46

Universal Containers (UC) uses middleware to integrate multiple systems with Salesforce. UC has a strict, new requirement that usernames and passwords cannot be stored in any UC system. How can UC’s middleware authenticate to Salesforce while adhering to this requirement?

A. Create a Connected App that supports the JWT Bearer Token OAuth Flow.

B. Create a Connected App that supports the Refresh Token OAuth Flow

C. Create a Connected App that supports the Web Server OAuth Flow.

D. Create a Connected App that supports the User-Agent OAuth Flow.

Correct Answer:A

Question 47

Universal containers (UC) is building a mobile application that will make calls to the salesforce REST API. Additionally UC would like to provide the optimal experience for its mobile users. Which two OAuth scopes should UC configure in the connected App? Choose 2 answers

A. Refresh token

B. API

C. full

D. Web

Correct Answer:AB

Question 48

Which two security risks can be mitigated by enabling Two-Factor Authentication (2FA) in Salesforce? Choose 2 answers

A. Users leaving laptops unattended and not logging out of Salesforce.

B. Users accessing Salesforce from a public Wi-Fi access point.

C. Users choosing passwords that are the same as their Facebook password.

D. Users creating simple-to-guess password reset questions.

Correct Answer:BC

START Identity-and-Access-Management-Designer EXAM