Free Practice Salesforce Identity-and-Access-Management-Architect Exam Questions 2025

Stay ahead with 100% Free Salesforce Certified Identity and Access Management Architect (WI25) Identity-and-Access-Management-Architect Dumps Practice Questions

Page: 1 / 50

Total 250 Questions | Updated On: Jan 27, 2025

Add To Cart

Question 1

Universal Containers (UC) wants to implement SAML SSO for their internal of Salesforce users using a third-party IdP. After some evaluation, UC decides NOT to 65« set up My Domain for their Salesforce org. How does that decision impact their SSO implementation?

A : IdP-initiated SSO will NOT work.

B : Neither SP- nor IdP-initiated SSO will work.

C : Either SP- or IdP-initiated SSO will work.

D : SP-initiated SSO will NOT work

Answer: B

Question 2

Universal Containers (UC) operates in Asia, Europe and North America regions. There is one Salesforce org

for each region. UC is implementing Customer 360 in Salesforce and has procured External Identity and

Customer Community licenses in all orgs.

Customers of UC use Community to track orders and create inquiries. Customers also tend to move across

regions frequently.

What should an identity architect recommend to optimize license usage and reduce maintenance overhead?

A : Merge three orgs into one instance of Salesforce. This will no longer require maintaining three separate copies of the same customer.

B : Delete contact/ account records and deactivate user if user moves from a specific region; Sync will no longer be required.

C : Contacts are required since Community access needs to be enabled. Maintenance is a necessary overhead that must be handled via data integration.

D : Enable Contactless User in all orgs and downgrade users from Experience Cloud license to External Identity license once users have moved out of that region.

Answer: C

Question 3

Northern Trail Outfitters would like to automatically create new employee users in Salesforce with an

appropriate profile that maps to its Active Directory Department.

How should an identity architect implement this requirement?

A : Use the createUser method in the Just-in-Time (JIT) provisioning registration handler to assign theappropriate profile.

B : Use the updateUser method in the Just-in-Time (JIT) provisioning registration handler to assign theappropriate profile.

C : Use a login flow to collect Security Assertion Markup Language attributes and assign the appropriateprofile during Just-In-Time(JIT) provisioning.

D : Make a callout during the login flow to query department from Active Directory to assign theappropriate profile.

Answer: B

Question 4

Universal containers (UC) is building a mobile application that will make calls to the salesforce REST API.

Additionally UC would like to provide the optimal experience for its mobile users. Which two OAuth scopes

should UC configure in the connected App? Choose 2 answers

A : Refresh token

B : API

C : full

D : Web

Answer: A,B

Question 5

Northern Trail Outfitters want to allow its consumer to self-register on it business-to-consumer (B2C) portal

that is built on Experience Cloud. The identity architect has recommended to use Person Accounts.

Which three steps need to be configured to enable self-registration using person accounts?

Choose 3 answers

A : Enable access to person and business account record types under Public Access Settings.

B : Contact Salesforce Support to enable business accounts.

C : Under Login and Registration settings, ensure that the default account field is empty.

D : Contact Salesforce Support to enable person accounts.

E : Set organization-wide default sharing for Contact to Public Read Only.

Answer: A,C,D

Page: 1 / 50

Total 250 Questions | Updated On: Jan 27, 2025

Add To Cart