Salesforce Certified Identity and Access Management Architect - Identity-and-Access-Management-Architect Exam Practice Test

Question 1

Universal Containers wants to secure its Salesforce APIs by using an existing Security Assertion Markup Language (SAML) configuration that supports the company ' s single signon process to Salesforce.
Which Salesforce OAuth authorization flow should be used?

A. OAuth 2.0 JWT Bearer Flow

B. OAuth 2.0 SAML Bearer Assertion Flow

C. SAML Assertion Flow

D. OAuth 2.0 User-Agent Flow

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

Universal Containers is using OpenID Connect to enable a connection from their new mobile app to its production Salesforce org.
What should be done to enable the retrieval of the access token status for the OpenID Connect connection?

A. Leverage OpenID Connect Token Introspection.

B. Create a custom OAuth scope.

C. Enable cross-origin resource sharing (CORS) for the /services/oauth2/token endpoint.

D. Query using OpenID Connect discovery endpoint.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

Universal Container's (UC) is using Salesforce Experience Cloud site for its container wholesale business.
The identity architect wants to use an authentication provider for the new site.
Which two options should be utilized in creating an authentication provider?
Choose 2 answers

A. The default login user can be set.

B. A custom registration handler can be set.

C. The default authentication provider certificate can be set.

D. A custom error URL can be set.

Correct Answer: B,D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

The CMO of an advertising company has invited an Identity and Access Management (IAM) specialist to discuss Salesforce out-of-box capabilities for configuring the company ' s login and registration experience on Salesforce Experience Cloud.
The CMO is looking to brand the login page with the company ' s logo, background color, login button color, and dynamic right-frame from an external URL.
Which two solutions should the IAM specialist recommend?
Choose 2 answers:

A. Login & Registration pages can be branded in the Community Administration settings.

B. Use Experience Builder to build branded Reset and Forget Password pages.

C. Build custom pages for handling requirements as Experienced Cloud.

D. Build custom site pages for reset and forget password features.

Correct Answer: A,B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

A multinational industrial products manufacturer is planning to implement Salesforce CRM to manage their business. They have the following requirements:
1. They plan to implement Partner communities to provide access to their partner network.
2. They have operations in multiple countries and are planning to implement multiple Salesforce orgs.
3. Some of their partners do business in multiple countries and will need information from multiple Salesforce communities.
4. They would like to provide a single login for their partners.
How should an Identity Architect solution this requirement with limited custom development?

A. Allow partners to choose the Salesforce org they need information from and use login flows to authenticate access.

B. Register partners in one org and access information from other orgs using APIs.

C. Create a partner login for the country of their operation and use SAML federation to provide access to other orgs.

D. Consolidate Partner related information in a single org and provide access through Salesforce community.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

An insurance company has a connected app in its Salesforce environment that is used to integrate with a Google Workspace (formerly known as G Suite).
An identity and access management (ZAM) architect has been asked to implement automation to enable users, freeze/suspend users, disable users, and reactivate existing users in Google Workspace upon similar actions in Salesforce.
Which solution is recommended to meet this requirement?

A. Update the Security Attention Hadoop Language Just-In-Time (SJAR, LTT) handler in Salesforce for user provisioning and de-provisioning.

B. configure Users Provisioning for Connected Apps.

C. Build an Asset Trigger on the UserLogin object to make asynchronous callouts to Google APIs.

D. Build a custom REST endpoint in Salesforce that Google Workspace can pull against.

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Salesforce Certified Identity and Access Management Architect - Identity-and-Access-Management-Architect Exam Practice Test

Latest Update

Useful Links

Contact Us