Salesforce certification preparation
IDENTITY-AND-ACCESS-MANAGEMENT-ARCHITECT Practice Questions
Practice exam-style questions, check your answers, and review explanations and source references where they are available.
- Exam
- IDENTITY-AND-ACCESS-MANAGEMENT-ARCHITECT
- Provider
- Salesforce
- Full set
- 248 questions
- Last Update Check
If you are interested in advancing your career in Salesforce security or looking to expand your identity management knowledge, the IDENTITY-AND-ACCESS-MANAGEMENT-ARCHITECT certification exam is a fantastic place to start. This exam tests your foundational knowledge of access controls, single sign-on concepts, and deployment services. With the help of our real exam questions, you can prepare effectively and greatly increase your chances of passing. We design our practice questions to closely simulate the real test environment, ensuring we cover the exact same topics as the actual exam to test your understanding.
Refer to the exhibit.
Outfitters (NTO) is using Experience Cloud as an Identity for its application on Heroku. The
application on Heroku should be able to handle two brands, Northern Trail Shoes and Northern Trail
Shirts.
A user should select either of the two brands in Heroku before logging into the community. The app
then performs Authorization using OAuth2.0 with the Salesforce Experience Cloud site.
NTO wants to make sure it renders login page images dynamically based on the user's brand
preference selected in Heroku before Authorization.
what should an identity architect do to fulfill the above requirements?
Outfitters (NTO) is using Experience Cloud as an Identity for its application on Heroku. The
application on Heroku should be able to handle two brands, Northern Trail Shoes and Northern Trail
Shirts.
A user should select either of the two brands in Heroku before logging into the community. The app
then performs Authorization using OAuth2.0 with the Salesforce Experience Cloud site.
NTO wants to make sure it renders login page images dynamically based on the user's brand
preference selected in Heroku before Authorization.
what should an identity architect do to fulfill the above requirements?Question 1 discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Universal Containers (UC) is planning to deploy a custom mobile app that will allow users to get e-
signatures from its customers on their mobile devices. The mobile app connects to Salesforce to
upload the e-signature as a file attachment and uses OAuth protocol for both authentication and
authorization. What is the most recommended and secure OAuth scope setting that an Architect
should recommend?
Question 2 discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Universal containers (UC) is setting up Delegated Authentication to allow employees to log in using
their corporate credentials. UC's security team is concerned about the risk of exposing the corporate
login service on the Internet and has asked that a reliable trust mechanism be put in place between
the login service and salesforce. What mechanism should an architect put in place to enable a
trusted connection between the login services and salesforce?
Question 3 discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Universal Containers (UC) wants to use Salesforce for sales orders and a legacy of system for order
fulfillment. The legacy system must update the status of orders in 65* Salesforce in real time as they
are fulfilled. UC decides to use OAuth for connecting the legacy system to Salesforce. What OAuth
flow should be considered that doesn't require storing credentials, client secret or refresh tokens?
Question 4 discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Universal containers (UC) is successfully using Delegated Authentication for their salesforce users.
The service supporting Delegated Authentication is written in Jav
a. UC has a new CIO that is requiring all company Web services be RESR-ful and written in . NET.
Which two considerations should the UC Architect provide to the new CIO? Choose 2 answers
Question 5 discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Universal Containers (UC) plans to use a SAML-based third-party IdP serving both of the Salesforce
Partner Community and the corporate portal. UC partners will log in 65* to the corporate portal to
access protected resources, including links to Salesforce resources. What would be the
recommended way to configure the IdP so that seamless access can be achieved in this scenario?
Question 6 discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Universal Containers (UC) would like its community users to be able to register and log in with
Linkedin or Facebook Credentials. UC wants users to clearly see Facebook &Linkedin Icons when they
register and login. What are the two recommended actions UC can take to achieve this Functionality?
Choose 2 answers
Question 7 discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Universal containers (UC) has an e-commerce website while customers can buy products, make
payments, and manage their accounts. UC decides to build a customer Community on Salesforce and
wants to allow the customers to access the community for their accounts without logging in again.
UC decides to implement ansp-Initiated SSO using a SAML-BASED complaint IDP. In this scenario
where salesforce is the service provider, which two activities must be performed in salesforce to
make sp-Initiated SSO work? Choose 2 answers
Question 8 discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
What information does the 'Relaystate' parameter contain in sp-Initiated Single Sign-on?
Question 9 discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Universal Containers (UC) has implemented SAML-based SSO solution for use with their multi-org
Salesforce implementation, utilizing one of the the orgs as the Identity Provider. One user is
reporting that they can log in to the Identity Provider org but get a generic SAML error message
when accessing the other orgs. Which two considerations should the architect review to
troubleshoot the issue? Choose 2 answers
Question 10 discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Question 1 of 10
Source context
How this practice set is maintained
Maintained by the CertMage content team, this page loads questions from the exam dataset connected to its preparation resource. When an answer includes a supporting reference, it is shown with that answer so you can review the underlying vendor documentation.
Certification objectives, interfaces, and vendor services can change. Verify important details against the provider's current exam guide and documentation before your exam.