[Mar 18, 2023] Genuine Identity-and-Access-Management-Designer Exam Dumps New 2023 Salesforce Pratice Exam
New 2023 Realistic Identity-and-Access-Management-Designer Dumps Test Engine Exam Questions in here
How to book the Identity-and-Access-Management-Designer Exam
These are following steps for registering the Identity-and-Access-Management-Designer Exam. Step 1: Visit to Webassessor Exam Registration Step 2: Signup/Login to Webassessor Step 3: Select the onsite proctored or online proctored delivery method of Certification Exam Step 4: Select Date, time and confirm with a payment method
For more information, please click here.
NEW QUESTION 105
Uwversal Containers (UC) is building a custom employee hut) application on Amazon Web Services (AWS) and would like to store their users' credentials there. Users will also need access to Salesforce for internal operations. UC has tasked an identity architect with evaluating Afferent solutions for authentication and authorization between AWS and Salesforce.
How should an identity architect configure AWS to authenticate and authorize Salesforce users?
- A. Configure the custom employee app as a connected app.
- B. Develop a custom Auth server in AWS.
- C. Configure AWS as an OpenID Connect Provider.
- D. Create a custom external authentication provider.
Answer: C
NEW QUESTION 106
Universal Containers (UC) uses Active Directory (AD) as their identity store for employees and must continue to do so for network access. UC is undergoing a major transformation program and moving all of their enterprise applications to cloud platforms including Salesforct, Workday, and SAP HANA. UC needs to implement an SSO solution for accessing all of the third-party cloud applications and the CIO is inclined to use Salesforce for all of their identity and access management needs.
Which two Salesforce license types does UC need for its employees'
Choose 2 answers
- A. Chatter Only and Identity licenses
- B. Company Community and Identity licenses
- C. Identity and Identity Connect licenses
- D. Salesforce and Identity Connect licenses
Answer: C,D
NEW QUESTION 107
Universal Containers (UC) is building a custom Innovation platform on their Salesforce instance. The Innovation platform will be written completely in Apex and Visualforce and will use custom objects to store the Data. UC would like all users to be able to access the system without having to log in with Salesforce credentials. UC will utilize a third-party idp using SAML SSO. What is the optimal Salesforce licence type for all of the UC employees?
- A. External Identity Licence.
- B. Identity Licence.
- C. Salesforce Licence.
- D. Salesforce Platform Licence.
Answer: D
NEW QUESTION 108
Universal containers (UC) would like to enable self - registration for their salesforce partner community users.
UC wants to capture some custom data elements from the partner user, and based on these data elements, wants to assign the appropriate profile and account values. Which two actions should the architect recommend to UC? Choose 2 answers
- A. Modify the communitiesselfregcontroller to assign the profile and account.
- B. Configure registration for communities to use a custom visualforce page.
- C. Configure registration for communities to use a custom apex controller.
- D. Modify the selfregistration trigger to assign profile and account.
Answer: A,B
NEW QUESTION 109
A service provider (SP) supports both Security Assertion Markup Language (SAML) and OpenID Connect (OIDC).
When integrating this SP with Salesforce, which use case is the determining factor when choosing OIDC or SAML?
- A. OIDC is more secure than SAML and therefore is the obvious choice.
- B. The SP needs to perform API calls back to Salesforce on behalf of the user after the user logs in to the service provider.
- C. They are equivalent protocols and there is no real reason to choose one over the other.
- D. If the user has a session on Salesforce, you do not want them to be prompted for a username and password when they login to the SP.
Answer: B
NEW QUESTION 110
Containers (UC) uses a legacy Employee portal for their employees to collaborate. Employees access the portal from their company's internal website via SSO. It is set up to work with SiteMinder and Active Directory. The Employee portal has features to support posing ideas. UC decides to use Salesforce Ideas for voting and better tracking purposes. To avoid provisioning users on Salesforce, UC decides to integrate Employee portal ideas with Salesforce idea through the API. What is the role of Salesforce in the context of SSO, based on this scenario?
- A. Service Provider, because Salesforce is the application for managing ideas.
- B. An independent system, because Salesforce is not part of the SSO setup.
- C. Identity Provider, because the API calls are authenticated by Salesforce.
- D. Connected App, because Salesforce is connected with Employee portal via API.
Answer: B
NEW QUESTION 111
Which two statements are capable of Identity Connect? Choose 2 answers
- A. Supports both Identity-Provider-Initiated and Service-Provider-Initiated SSO.
- B. Automated user synchronization and de-activation.
- C. Support multiple orgs connecting to multiple Active Directory servers.
- D. Synchronization of Salesforce Permission Set Licence Assignments.
Answer: A,B
NEW QUESTION 112
Universal Containers (UC) is setting up delegated authentication to allow employees to log in using their corporate credentials. UC's security team is concerned about the risks of exposing the corporate login service on the internet and has asked that a reliable trust mechanism be put in place between the login service and Salesforce.
What mechanism should an Architect put in place to enable a trusted connection between the login service and Salesforce?
- A. Enforce mutual authentication between systems using SSL.
- B. Set up a proxy service for the login service in the DMZ.
- C. Include Client Id and Client Secret in the login header callout.
- D. Require the use of Salesforce security tokens on passwords.
Answer: D
NEW QUESTION 113
A group of users try to access one of Universal Containers' Connected Apps and receive the following error message: "Failed: Not approved for access." What is the probable cause of this issue?
- A. The use of High Assurance sessions are required for the Connected App.
- B. The Salesforce Administrators have revoked the OAuth authorization.
- C. The Connected App setting "All users may self-authorize" is enabled.
- D. The users do NOT have the correct permission set assigned to them.
Answer: D
NEW QUESTION 114
Universal Containers (UC) has a Customer Community that uses Facebook for of authentication. UC would like to ensure that changes in the Facebook profile are 65. reflected on the appropriate Customer Community user. How can this requirement be met?
- A. Use SAML Just-In-Time Provisioning between Facebook and Salesforce.
- B. Use information in the Signed Request that is received from Facebook.
- C. Use the updateUser() method on the Registration Handler class.
- D. Develop a scheduled job that calls out to Facebook on a nightly basis.
Answer: C
NEW QUESTION 115
Universal Containers (UC) has implemented SAML-based Single Sign-On to provide seamless access to its Salesforce Orgs, financialsystem, and CPQ system. Below is the SSO implementation landscape.
What role combination is represented by the systems in this scenario''
- A. Salesforce Org1 and PingFederate are acting as Identity Providers.
- B. Salesforce Org1 and Salesforce Org2 are acting as Identity Providers.
- C. Financial System and CPQ System are the only Service Providers.
- D. Salesforce Org1 and Salesforce Org2 are the only Service Providers.
Answer: A
NEW QUESTION 116
Universal containers wants to set up SSO for a selected group of users to access external applications from salesforce through App launcher. Which three steps must be completed in salesforce to accomplish the goal?
- A. Associate user profiles with the connected Apps.
- B. Complete my domain and Identity provider setup.
- C. Create connected apps for the external applications.
- D. Complete single Sign-on settings in security controls.
- E. Create named credentials for each external system.
Answer: A,B,C
NEW QUESTION 117
Universal Containers is creating a web application that will be secured by Salesforce Identity using the OAuth 2.0 Web Server Flow uses the OAuth 2.0 authorization code grant type).
Which three OAuth concepts apply to this flow?
Choose 3 answers
- A. Scopes
- B. Client Secret
- C. Verification URL
- D. Access Token
Answer: A,B,D
NEW QUESTION 118
In an SP-Initiated SAML SSO setup where the user tries to access a resource on the Service Provider, What HTTP param should be used when submitting a SAML Request to the Idp to ensure the user is returned to the intended resourse after authentication?
- A. StartURL
- B. RedirectURL
- C. RelayState
- D. DisplayState
Answer: A
NEW QUESTION 119
An identity architect has built a native mobile application and plans to integrate it with a Salesforce Identity solution. The following are the requirements for the solution:
1. Users should not have to login every time they use the app.
2. The app should be able to make calls to the Salesforce REST API.
3. End users should NOT see the OAuth approval page.
How should the identity architect configure the Salesforce connected app to meet the requirements?
- A. Enable the API Scope and Offline Access Scope on the connected app, and then set the connected app to access settings to 'Admin Pre-Approved".
- B. Enable the Full Access Scope and then set the connected app access settings to "Admin Pre-Approved".
- C. Enable the API Scope and Offline Access Scope on the connected app, and then set the Connected App access settings to "User may self authorize".
- D. Enable the API Scope and Offline Access Scope, upload a certificate so JWT Bearer Flow can be used and then set the connected app access settings to "Admin Pre-Approved".
Answer: D
NEW QUESTION 120
Universal containers (UC) has a mobile application that it wants to deploy to all of its salesforce users, including customer Community users. UC would like to minimize the administration overhead, which two items should an architect recommend? Choose 2 answers
- A. Enable the "Refresh Tokens is valid until revoked " setting in the Connected App.
- B. Enable the "High Assurance session required" setting in the Connected App.
- C. Enable the "Enforce Ip restrictions" settings in the connected App.
- D. Enable the "All users may self-authorize" setting in the Connected App.
Answer: A,D
NEW QUESTION 121
Northern Trail Outfitters (NTO) leverages Microsoft Active Directory (AD) for management of employee usernames, passwords, permissions, and asset access. NTO also owns a third-party single sign-on (SSO) solution. The third-party party SSO solution is used for all corporate applications, including Salesforce.
NTO has asked an architect to explore Salesforce Identity Connect for automatic provisioning and deprovisiorung of users in Salesforce.
What role does identity Connect play in the outlined requirements?
- A. Service Provider
- B. User Management
- C. Identity Provider
- D. Single Sign-On
Answer: B
NEW QUESTION 122
Universal Containers (UC) uses middleware to integrate multiple systems with Salesforce. UC has a strict, new requirement that usernames and passwords cannot be stored in any UC system. How can UC's middleware authenticate to Salesforce while adhering to this requirement?
- A. Create a Connected App that supports the JWT Bearer Token OAuth Flow.
- B. Create a Connected App that supports the Web Server OAuth Flow.
- C. Create a Connected App that supports the Refresh Token OAuth Flow
- D. Create a Connected App that supports the User-Agent OAuth Flow.
Answer: A
NEW QUESTION 123
Universal Containers (UC) uses an internal company portal for their employees to collaborate. UC decides to use Salesforce Ideas and provide the ability for employees to post ideas from the company portal. They use SAML-based SSO to get into the Company portal and would like to leverage it to access Salesforce. Most of the users don't exist in Salesforce and they would like the user records created in Salesforce Communities the first time they try to access Salesforce.
What recommendation should an Architect make to meet this requirement?
- A. Use Just-in-Time provisioning.
- B. Use On-the-Fly provisioning.
- C. Use Salesforce APIs to create users on the fly.
- D. Use Identity Connect to sync users.
Answer: A
NEW QUESTION 124
Containers (UC) has an existing Customer Community. UC wants to expand the self-registration capabilities such that customers receive a different community experience based on the data they provide during the registration process. What is the recommended approach an Architect Should recommend to UC?
- A. Create separate login flows corresponding to the different community user personas.
- B. Modify the existing Communities registration controller to assign different profiles.
- C. Create an After Insert Apex trigger on the user object to assign specific custom permissions.
- D. Modify the Community pages to utilize specific fields on the User and Contact records.
Answer: B
NEW QUESTION 125
......
Grab latest Amazon Identity-and-Access-Management-Designer Dumps as PDF Updated: https://www.test4cram.com/Identity-and-Access-Management-Designer_real-exam-dumps.html
Updated Official licence for Identity-and-Access-Management-Designer Certified by Identity-and-Access-Management-Designer Dumps PDF: https://drive.google.com/open?id=19jV6qA5hpxOazWnKrfwc7isJGe2-xR71