Free Identity-and-Access-Management-Architect Practice Exam Questions Online

Why Salesforce Identity-and-Access-Management-Architect Practice Exam Questions?

Ready to level up your Salesforce Identity-and-Access-Management-Architect exam study? Just TheExamsLab Identity-and-Access-Management-Architect practice tests free.

Identity-and-Access-Management-Architect exam questions are expertly crafted practice tests designed to simulate the real Salesforce certification exam environment and help you assess your knowledge and figure out where you are lacking. From our free Salesforce Certified Identity and Access Management Architect (SU24) Identity-and-Access-Management-Architect practice exam, you will feel secure in passing any question type or time limit. TheExamsLab offers the Identity-and-Access-Management-Architect exam questions 2024. Don’t settle or do it half-heartedly get the best and invest in the best what you want is what you get.

Page: 1 / 50

Total 250 Questions | Updated On: Nov 20, 2024

Add To Cart

Question 1

Universal Containers (UC) uses Salesforce to allow customers to keep track of the order status. The customers

can log in to Salesforce using external authentication providers, such as Facebook and Google. UC is also

leveraging the App Launcher to let customers access an of platform application for generating shipping labels.

The label generator application uses OAuth to provide users access. What license type should an Architect

recommend for the customers?

A : Customer Community license

B : Identity license

C : Customer Community Plus license

D : External Identity license

Answer: B

Question 2

Northern Trail Outfitters want to allow its consumer to self-register on it business-to-consumer (B2C) portal

that is built on Experience Cloud. The identity architect has recommended to use Person Accounts.

Which three steps need to be configured to enable self-registration using person accounts?

Choose 3 answers

A : Enable access to person and business account record types under Public Access Settings.

B : Contact Salesforce Support to enable business accounts.

C : Under Login and Registration settings, ensure that the default account field is empty.

D : Contact Salesforce Support to enable person accounts.

E : Set organization-wide default sharing for Contact to Public Read Only.

Answer: A,C,D

Question 3

Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the

OAuth 2.0 user-agent flow. Application users will authenticate using username and password. They should not

be forced to approve API access in the mobile app or reauthenticate for 3 months.

Which two connected app options need to be configured to fulfill this use case?

Choose 2 answers

A : Set Permitted Users to "Admin approved users are pre-authorized".

B : Set Permitted Users to "All users may self-authorize".

C : Set the Session Timeout value to 3 months.

D : Set the Refresh Token Policy to expire refresh token after 3 months.

Answer: B,D

Question 4

Identity-and-Access-Management-Architect-page101-image4

An organization has a central cloud-based Identity and Access Management (IAM) Service for authentication

and user management, which must be utilized by all applications as follows:

1 - Change of a user status in the central IAM Service triggers provisioning or deprovisioining in the

integrated cloud applications.

2 - Security Assertion Markup Language single sign-on (SSO) is used to facilitate access for users

authenticated at identity provider (Central IAM Service).

Which approach should an IAM architect implement on Salesforce Sales Cloud to meet the requirements?

A : A Configure Salesforce as a SAML Service Provider, and enable SCIM (System for Cross-DomainIdentity Management) for provisioning and deprovisioning of users.

B : Configure Salesforce as a SAML service provider, and enable Just-in Time (JIT) provisioning anddeprovisioning of users

C : Configure central IAM Service as an authentication provider and extend registration handler to manageprovisioning and deprovisioning of users.

D : Deploy Identity Connect component and set up automated provisioning and deprovisioning of users, aswell as SAML-based SSO.

Answer: A

Question 5

An Architect has configured a SAML-based SSO integration between Salesforce and an external Identity provider and is ready to test it. When the Architect attempts to log in to Salesforce using SSO, the Architect receives a SAML error. Which two optimal actions should the Architect take to troubleshoot the issue?

A : Ensure the Callback URL is correctly set in the Connected Apps settings.

B : Use a browser that has an add-on/extension that can inspect SAML.

C : Paste the SAML Assertion Validator in Salesforce.

D : Use the browser's Development tools to view the Salesforce page's markup.

Answer: B,C

Page: 1 / 50

Total 250 Questions | Updated On: Nov 20, 2024

Add To Cart