100% Free Salesforce Identity-and-Access-Management-Architect Practice Test Questions

Question 1

Universal Containers (UC) is implementing Salesforce and would like to establish SAML SSO for its users to

log in. UC stores its corporate user identities in a Custom Database. The UC IT Manager has heard good

things about Salesforce Identity Connect as an Idp, and would like to understand what limitations they may

face if they decided to use Identity Connect in their current environment. What limitation Should an Architect

inform the IT Manager about?

A : Identity Connect will not support user provisioning in UC's current environment.

B : Identity Connect will only support Idp-initiated SAML flows in UC's current environment.

C : Identity Connect will only support SP-initiated SAML flows in UC's current environment.

D : Identity connect is not compatible with UC's current identity environment.

Answer: A

Question 2

A large consumer company is planning to create a community and will requ.re login through the customers

social identity. The following requirements must be met:

1. The customer should be able to login with any of their social identities, however salesforce should only

have one user per customer.

2. Once the customer has been identified with a social identity, they should not be required to authonze

Salesforce.

3. The customers personal details from the social sign on need to be captured when the customer logs into

Salesforce using their social Identity.

3. If the customer modifies their personal details in the social site, the changes should be updated in Salesforce

.

Which two options allow the Identity Architect to fulfill the requirements?

Choose 2 answers

A : Use Login Flows to call an authentication registration handler to provision the user before logging theuser into the community.

B : Use authentication providers for social sign-on and use the custom registration handler to insert orupdate personal details.

C : Redirect the user to a custom page that allows the user to select an existing social identity for login

D : Use the custom registration handler to link social identities to Salesforce identities.

Answer: B,D

Question 3

Universal containers wants to build a custom mobile app connecting to salesforce using Oauth, and would like

to restrict the types of resources mobile users can access. What Oauth feature of Salesforce should be used to

achieve the goal?

A : Access Tokens

B : Mobile pins

C : Refresh Tokens

D : Scopes

Answer: D

Question 4

Universal Containers (UC) uses Active Directory (AD) as their identity store for employees and must continue to do so for network access. UC is undergoing a major transformation program and moving all of their enterprise applications to cloud platforms including Salesforct, Workday, and SAP HANA. UC needs to implement an SSO solution for accessing all of the third-party cloud applications and the CIO is inclined to use Salesforce for all of their identity and access management needs. Which two Salesforce license types does UC need for its employees' Choose 2 answers

A : Company Community and Identity licenses

B : Identity and Identity Connect licenses

C : Chatter Only and Identity licenses

D : Salesforce and Identity Connect licenses

Answer: B,D

Question 5

Identity-and-Access-Management-Architect-page101-image4

An organization has a central cloud-based Identity and Access Management (IAM) Service for authentication

and user management, which must be utilized by all applications as follows:

1 - Change of a user status in the central IAM Service triggers provisioning or deprovisioining in the

integrated cloud applications.

2 - Security Assertion Markup Language single sign-on (SSO) is used to facilitate access for users

authenticated at identity provider (Central IAM Service).

Which approach should an IAM architect implement on Salesforce Sales Cloud to meet the requirements?

A : A Configure Salesforce as a SAML Service Provider, and enable SCIM (System for Cross-DomainIdentity Management) for provisioning and deprovisioning of users.

B : Configure Salesforce as a SAML service provider, and enable Just-in Time (JIT) provisioning anddeprovisioning of users

C : Configure central IAM Service as an authentication provider and extend registration handler to manageprovisioning and deprovisioning of users.

D : Deploy Identity Connect component and set up automated provisioning and deprovisioning of users, aswell as SAML-based SSO.

Answer: A

Free Practice Salesforce Identity-and-Access-Management-Architect Exam Questions 2025