Get Ready to Pass the Identity-and-Access-Management-Designer exam Right Now Using Our Salesforce Identity and Access Management Designer Exam Package [Q51-Q66]

Rate this post

Get Ready to Pass the Identity-and-Access-Management-Designer exam Right Now Using Our Salesforce Identity and Access Management Designer Exam Package

Enhance Your Career With Available Preparation Guide for Identity-and-Access-Management-Designer Exam

To be eligible for the Salesforce Certified Identity and Access Management Designer certification, candidates must have at least two years of experience designing and implementing identity and access management solutions using Salesforce. They must also hold one of the following certifications: Salesforce Certified Technical Architect (CTA), Salesforce Certified Application Architect, or Salesforce Certified System Architect.

Q51. Universal Containers wants to set up SSO for a selected group of users to access external applications from Salesforce through App Launcher.
Which three steps must be completed in Salesforce to accomplish the goal? (Choose three.)

Associate User profiles with the Connected Apps.

Complete My Domain and Identity Provider setup.

Create Connected Apps for the external applications.

Complete Single Sign-on Settings in Security Controls.

Create Named Credentials for each external system.

Explanation/Reference:

Q52. Containers (UC) uses an internal system for recruiting and would like to have the candidates’ info available in the Salesforce automatically when they are selected. UC decides to use OAuth to connect to Salesforce from the recruiting system and would like to do the authentication using digital certificates. Which two OAuth flows should be considered to meet the requirement? Choose 2 answers

JWT Bearer Token flow

Refresh Token flow

SAML Bearer Assertion flow

Web Service flow

Q53. Universal containers wants to build a custom mobile app connecting to salesforce using Oauth, and would like to restrict the types of resources mobile users can access. What Oauth feature of Salesforce should be used to achieve the goal?

Access Tokens

Mobile pins

Refresh Tokens

Scopes

Q54. Universal containers (UC) would like to enable self – registration for their salesforce partner community users.
UC wants to capture some custom data elements from the partner user, and based on these data elements, wants to assign the appropriate profile and account values. Which two actions should the architect recommend to UC? Choose 2 answers

Modify the communitiesselfregcontroller to assign the profile and account.

Modify the selfregistration trigger to assign profile and account.

Configure registration for communities to use a custom visualforce page.

Configure registration for communities to use a custom apex controller.

Q55. Universal containers (UC) is concerned that having a self-registration page will provide a means for “bots” or unintended audiences to create user records, thereby consuming licences and adding dirty dat a. Which two actions should UC take to prevent unauthorised form submissions during the self-registration process? Choose 2 answers

Use open-ended security questions and complex password requirements

Primarily use lookup and picklist fields on the self registration page.

Require a captcha at the end of the self-registration process.

Use hidden fields populated via java script events in the self-registration page.

Q56. Universal containers (UC) employees have salesforce access from restricted ip ranges only, to protect against unauthorised access. UC wants to rollout the salesforce1 mobile app and make it accessible from any location.
Which two options should an architect recommend? Choose 2 answers

Relax the ip restriction in the connect app settings for the salesforce1 mobile app

Use login flow to bypass ip range restriction for the mobile app.

Relax the ip restriction with a second factor in the connect app settings for salesforce1 mobile app

Remove existing restrictions on ip ranges for all types of user access.

Q57. A manufacturer wants to provide registration for an Internet of Things (IoT) device with limited display input or capabilities.
Which Salesforce OAuth authorization flow should be used?

OAuth 2.0 JWT Bearer How

OAuth 2.0 Device Flow

OAuth 2.0 User-Agent Flow

OAuth 2.0 Asset Token Flow

Q58. A multinational industrial products manufacturer is planning to implement Salesforce CRM to manage their business. They have the following requirements:
1. They plan to implement Partner communities to provide access to their partner network .
2. They have operations in multiple countries and are planning to implement multiple Salesforce orgs.
3. Some of their partners do business in multiple countries and will need information from multiple Salesforce communities.
4. They would like to provide a single login for their partners.
How should an Identity Architect solution this requirement with limited custom development?

Create a partner login for the country of their operation and use SAML federation to provide access to other orgs.

Consolidate Partner related information in a single org and provide access through Salesforce community.

Allow partners to choose the Salesforce org they need information from and use login flows to authenticate access.

Q59. universal container plans to develop a custom mobile app for the sales team that will use salesforce for authentication and access management. The mobile app access needs to be restricted to only the sales team.
What would be the recommended solution to grant mobile app access to sales users?

Use a custom attribute on the user object to control access to the mobile app

Use connected apps Oauth policies to restrict mobile app access to authorized users.

Use the permission set license to assign the mobile app permission to sales users

Add a new identity provider to authenticate and authorize mobile users.

Q60. An identity architect has built a native mobile application and plans to integrate it with a Salesforce Identity solution. The following are the requirements for the solution:
1. Users should not have to login every time they use the app.
2. The app should be able to make calls to the Salesforce REST API.
3. End users should NOT see the OAuth approval page.
How should the identity architect configure the Salesforce connected app to meet the requirements?

Enable the API Scope and Offline Access Scope, upload a certificate so JWT Bearer Flow can be used and then set the connected app access settings to “Admin Pre-Approved”.

Enable the API Scope and Offline Access Scope on the connected app, and then set the connected app to access settings to ‘Admin Pre-Approved”.

Enable the Full Access Scope and then set the connected app access settings to “Admin Pre-Approved”.

Enable the API Scope and Offline Access Scope on the connected app, and then set the Connected App access settings to “User may self authorize”.

Q61. Universal Containers (UC) has implemented a multi-org architecture in their company. Many users have licenses across multiple orgs, and they are complaining about remembering which org and credentials are tied to which business process.
Which two recommendations should the Architect make to address the complaints? (Choose two.)

Activate My Domain to brand each org to the specific business use case.

Implement IdP-Initiated Single Sign-on flows to allow deep linking.

Implement Delegated Authentication from each org to the LDAP provider.

Implement SP-Initiated Single Sign-on flows to allow deep linking.

Q62. architect is troubleshooting some SAML-based SSO errors during testing. The Architect confirmed that all of the Salesforce SSO settings are correct. Which two issues outside of the Salesforce SSO settings are most likely contributing to the SSO errors the Architect is encountering? Choose 2 Answers

The Identity Provider is also used to SSO into five other applications.

The clock on the Identity Provider server is twenty minutes behind Salesforce.

The Issuer Certificate from the Identity Provider expired two weeks ago.

The default language for the Identity Provider and Salesforce are Different.

Q63. Universal Containers (UC) is building an integration between Salesforce and a legacy web applications using the canvas framework. The security for UC has determined that a signed request from Salesforce is not an adequate authentication solution for the Third-Party app. Which two options should the Architect consider for authenticating the third-party app using the canvas framework? Choose 2 Answers

Utilize the SAML Single Sign-on flow to allow the third-party to authenticate itself against UC’s IdP.

UtilizeAuthorization Providers to allow the third-party appliction to authenticate itself against Salesforce as the Idp.

Utilize Canvas OAuth flow to allow the third-party appliction to authenticate itself against Salesforce as the Idp.

Create a registration handler Apex class to allow the third-party appliction to authenticate itself against Salesforce as the Idp.

Q64. Containers (UC) has multiple Salesforce Orgs and would like to use a single Identity Provider to access all of their orgs. How should UC’s Architect enable this behaviour?

Ensure that users have the same Alias value in their user records in all of UC’s Salesforce orgs.

Ensure the same username is allowed in multiple orgs by contacting Salesforce Support.

Ensure that users have the same Federation ID value in their User records in all of UC’s Salesforce orgs

Ensure that users have the same Email Value in their user records in all of UC’s Salesforce orgs.

Q65. universal container plans to develop a custom mobile app for the sales team that will use salesforce for authentication and access management. The mobile app access needs to be restricted to only the sales team.
What would be the recommended solution to grant mobile app access to sales users?

Use a custom attribute on the user object to control access to the mobile app

Use connected apps Oauth policies to restrict mobile app access to authorized users.

Use the permission set license to assign the mobile app permission to sales users

Add a new identity provider to authenticate and authorize mobile users.

Q66. Universal Containers (UC) has an existing Salesforce org configured for SP-Initiated SAML SSO with their Idp. A second Salesforce org is being introduced into the environment and the IT team would like to ensure they can use the same Idp for new org. What action should the IT team take while implementing the second org?

Use the same SAML Identity location as the first org.

Use a different Entity ID than the first org.

Use the same request bindings as the first org.

Use the Salesforce Username as the SAML Identity Type.

Loading …

Salesforce Identity-and-Access-Management-Designer (Salesforce Certified Identity and Access Management Designer) Certification Exam is designed for professionals who have the skills and knowledge to design and implement identity and access management solutions in Salesforce. It is a globally recognized certification that validates the expertise of a professional in managing user authentication and authorization, managing user profiles and roles, managing data access, and implementing single sign-on solutions in Salesforce.

Get Special Discount Offer of Identity-and-Access-Management-Designer Certification Exam Sample Questions and Answers: https://www.test4cram.com/Identity-and-Access-Management-Designer_real-exam-dumps.html