Get 100% Authentic Salesforce Identity-and-Access-Management-Designer Dumps with Correct Answers
New Training Course Identity-and-Access-Management-Designer Tutorial Preparation Guide
What is the duration of the Identity-and-Access-Management-Designer Exam
- Passing Score: 65%
- Format: Multiple choices, multiple answers
- Length of Examination: 120 minutes
- Number of Questions: 60
NEW QUESTION 67
The security team at Universal containers(UC) has identified exporting reports as a high-risk action and would like to require users to be logged into salesforce with their active directory (AD) credentials when doing so.
For all other uses of Salesforce, Users should be allowed to use AD credentials or salesforce credentials. What solution should be recommended to prevent exporting reports except when logged in using AD credentials while maintaining the ability to view reports when logged in with salesforce credentials?
- A. Use SAML Federated Authentication with a login flow to dynamically add or remove a permission set that grants the export reports permission.
- B. Use SAML Federated Authentication and block access to reports when accesses through a standard assurance session.
- C. Use SAML Federated Authentication and Custom SAML jit provisioning to dynamically add or remove a permission set that grants the Export Reports permission.
- D. Use SAML Federated Authentication, treat SAML sessions as high assurance, and raise the session level required for exporting reports.
Answer: B
NEW QUESTION 68
Universal Containers (UC) is setting up delegated authentication to allow employees to log in using their corporate credentials. UC's security team is concerned about the risks of exposing the corporate login service on the internet and has asked that a reliable trust mechanism be put in place between the login service and Salesforce.
What mechanism should an Architect put in place to enable a trusted connection between the login service and Salesforce?
- A. Require the use of Salesforce security tokens on passwords.
- B. Include Client Id and Client Secret in the login header callout.
- C. Set up a proxy service for the login service in the DMZ.
- D. Enforce mutual authentication between systems using SSL.
Answer: A
NEW QUESTION 69
Universal Containers wants to allow its customers to log in to its Experience Cloud via a third party authentication provider that supports only the OAuth protocol.
What should an identity architect do to fulfill this requirement?
- A. Create a custom external authentication provider.
- B. Contact Salesforce Support and enable delegate single sign-on.
- C. Configure OpenID Connect authentication provider.
- D. Use certificate-based authentication.
Answer: A
NEW QUESTION 70
An identity architect has been asked to recommend a solution that allows administrators to configure personalized alert messages to users before they land on the Experience Cloud site (formerly known as Community) homepage.
What is recommended to fulfill this requirement with the least amount of customization?
- A. Build a Lightning web Component (LWC) for a homepage that shows custom alerts.
- B. Create custom metadata that stores user alerts and use a LWC to display alerts.
- C. Customize the registration handler Apex class to create a routing logic navigating to different home pages based on the user profile.
- D. Use Login Flows to add a screen that shows personalized alerts.
Answer: D
NEW QUESTION 71
Which two capabilities does My Domain enable in the context of a SAML SSO configuration? Choose 2 answers
- A. Resource deep linking
- B. SSO from Salesforce Mobile App
- C. Login Forensics
- D. App Launcher
Answer: A,B
NEW QUESTION 72
Universal Containers (UC) wants to build a custom mobile app for their field reps to create orders in salesforce. After the first time the users log in, they must be able to access salesforce upon opening the mobile app without being prompted to log in again. What Oauth flows should be considered to support this requirement?
- A. User Agent flow with a Refresh Token.
- B. SAML Assertion flow with a Bearer Token.
- C. Mobile Agent flow with a Bearer Token.
- D. Web Server flow with a Refresh Token.
Answer: A
NEW QUESTION 73
Universal Containers (UC) has five Salesforce orgs (UC1, UC2, UC3, UC4, UC5). of Every user that is in UC2, UC3, UC4, and UC5 is also in UC1, however not all users 65* have access to every org. Universal Containers would like to simplify the authentication process such that all Salesforce users need to remember one set of credentials. UC would like to achieve this with the least impact to cost and maintenance. What approach should an Architect recommend to UC?
- A. Configure UC1 as the Identity Provider to the other four Salesforce orgs, but don't set up JIT user provisioning for other orgs.
- B. Purchase a third-party Identity Provider for all five Salesforce orgs to use, but don't set up JIT user provisioning for other orgs.
- C. Configure UC1 as the Identity Provider to the other four Salesforce orgs and set up JIT user provisioning on all other orgs.
- D. Purchase a third-party Identity Provider for all five Salesforce orgs to use and set up JIT user provisioning on all other orgs.
Answer: B
NEW QUESTION 74
Northern Trail Outfitters (NTO) wants to give customers the ability to submit and manage issues with their purchases. It is important for to give its customers the ability to login with their Facebook and Twitter credentials.
Which two actions should an identity architect recommend to meet these requirements?
Choose 2 answers
- A. Configure a predefined authentication provider for Facebook.
- B. Create a custom external authentication provider for Twitter.
- C. Create a custom external authentication provider for Facebook.
- D. Configure a predefined authentication provider for Twitter.
Answer: A,D
NEW QUESTION 75
Which two statements are capable of Identity Connect? Choose 2 answers
- A. Support multiple orgs connecting to multiple Active Directory servers.
- B. Automated user synchronization and de-activation.
- C. Synchronization of Salesforce Permission Set Licence Assignments.
- D. Supports both Identity-Provider-Initiated and Service-Provider-Initiated SSO.
Answer: C,D
NEW QUESTION 76
An architect needs to advise the team that manages the identity provider how to differentiate salesforce from other service providers. What SAML SSO setting in salesforce provides this capability?
- A. Entity id
- B. Issuer
- C. Identity provider login URL
- D. SAML identity location
Answer: A
NEW QUESTION 77
After a recent audit, universal containers was advised to implement Two-factor Authentication for all of their critical systems, including salesforce. Which two actions should UC consider to meet this requirement? Choose 2 answers
- A. Require users to supply their email and phone number, which gets validated.
- B. Require users to use a biometric reader as well as their password
- C. Require users to enter a second password after the first Authentication
- D. Require users to provide their RSA token along with their credentials.
Answer: B,D
NEW QUESTION 78
Universal Containers (UC) has an existing e-commerce platform and is implementing a new customer community. They do not want to force customers to register on both applications due to concern over the customers experience. It is expected that 25% of the e-commerce customers will utilize the customer community . The e-commerce platform is capable of generating SAML responses and has an existing REST-ful API capable of managing users. How should UC create the identities of its e-commerce users with the customer community?
- A. Use a nightly batch ETL job to sync users between the Customer Community and the e-commerce platform and use SAML to allow SSO.
- B. Use the standard Salesforce API to create users in the Community When a User is Created in the e-Commerce platform and use SAML to allow SSO.
- C. Use the e-commerce REST API to create users when a user self-register on the customer community and use SAML to allow SSO.
- D. Use SAML JIT in the Customer Community to create users when a user tries to login to the community from the e-commerce site.
Answer: D
NEW QUESTION 79
A multinational industrial products manufacturer is planning to implement Salesforce CRM to manage their business. They have the following requirements:
1. They plan to implement Partner communities to provide access to their partner network .
2. They have operations in multiple countries and are planning to implement multiple Salesforce orgs.
3. Some of their partners do business in multiple countries and will need information from multiple Salesforce communities.
4. They would like to provide a single login for their partners.
How should an Identity Architect solution this requirement with limited custom development?
- A. Allow partners to choose the Salesforce org they need information from and use login flows to authenticate access.
- B. Create a partner login for the country of their operation and use SAML federation to provide access to other orgs.
- C. Consolidate Partner related information in a single org and provide access through Salesforce community.
- D. Register partners in one org and access information from other orgs using APIs.
Answer: B
NEW QUESTION 80
An insurance company has a connected app in its Salesforce environment that is used to integrate with a Google Workspace (formerly knot as G Suite).
An identity and access management (IAM) architect has been asked to implement automation to enable users, freeze/suspend users, disable users, and reactivate existing users in Google Workspace upon similar actions in Salesforce.
Which solution is recommended to meet this requirement?
- A. Configure user Provisioning for Connected Apps.
- B. Build a custom REST endpoint in Salesforce that Google Workspace can poll against.
- C. Update the Security Assertion Markup Language Just-in-Time (SAML JIt; handler in Salesforce for user provisioning and de-provisioning.
- D. Build an Apex trigger on the useriogin object to make asynchronous callouts to Google APIs.
Answer: A
NEW QUESTION 81
A leading fitness tracker company is getting ready to launch a customer community. The company wants its customers to login to the community and connect their fitness device to their profile. Customers should be able to obtain exercise details and fitness recommendation In the community.
Which should be used to satisfy this requirement?
- A. Login Flows
- B. Single Sign-On Settings
- C. Named Credentials
- D. OAuth Device Plow
Answer: D
NEW QUESTION 82
Universal containers(UC) is building a mobile application that will make calls to the salesforce REST API.
Additionally,UC would like to provide the optimal experience for its mobile users. Which two OAuth scopes should UC configure in the connected App? Choose 2 answers
- A. API
- B. Full
- C. Refresh Tokens
- D. Web
Answer: A,B
NEW QUESTION 83
An organization has a central cloud-based Identity and Access Management (IAM) Service for authentication and user management, which must be utilized by all applications as follows:
1 - Change of a user status in the central IAM Service triggers provisioning or deprovisioining in the integrated cloud applications.
2 - Security Assertion Markup Language single sign-on (SSO) is used to facilitate access for users authenticated at identity provider (Central IAM Service).
Which approach should an IAM architect implement on Salesforce Sales Cloud to meet the requirements?
- A. A Configure Salesforce as a SAML Service Provider, and enable SCIM (System for Cross-Domain Identity Management) for provisioning and deprovisioning of users.
- B. Configure Salesforce as a SAML service provider, and enable Just-in Time (JIT) provisioning and deprovisioning of users.
- C. Configure central IAM Service as an authentication provider and extend registration handler to manage provisioning and deprovisioning of users.
- D. Deploy Identity Connect component and set up automated provisioning and deprovisioning of users, as well as SAML-based SSO.
Answer: A
NEW QUESTION 84
Universal Containers (UC) has a Customer Community that uses Facebook for Authentication. UC would like to ensure that Changes in the Facebook profile are reflected on the appropriate Customer Community user:
How can this requirement be met?
- A. Develop a scheduled job that calls out to Facebook on a nightly basis.
- B. Use information in the signed Request that is received from facebook.
- C. Use the updateUser method on the registration Handler Class.
- D. Use SAML Just-In-Time Provisioning between Facebook and Salesforce.
Answer: D
NEW QUESTION 85
Northern Trail Outfitters (NTO) employees use a custom on-premise helpdesk application to request, approve, notify, and track access granted to various on-premises and cloud applications, including Salesforce. Salesforce is currently used to authenticate users.
How should NTO provision Salesforce users as soon as they are approved in the helpdesk application with the approved profiles and permission sets?
- A. Use Salesforce Connect to integrate with the helpdesk application.
- B. Use a login flow to query the helpdesk to validate user status.
- C. Have the helpdesk initiate an IdP-initiated Just-m-Time provisioning Security Assertion Markup Language flow.
- D. Build an integration that performs a remote call-in to the Salesforce SOAP or REST API.
Answer: B
NEW QUESTION 86
......
Difficulty in writing Identity-and-Access-Management-Designer Exam
This is exam is very difficult for those candidates who don't practice during preparation and candidates need a lab for practicing. Then practical exposure is much required to understand the contents of the exam. So, if anyone is associated with some kinds of an organization where he has opportunities to practice but if you can't afford the lab and don't have time to practice. So, Dumps4PDF is the solution to this problem. We provide the best Salesforce Identity-and-Access-Management-Designer exam dumps and practice test for your preparation. Salesforce Identity-and-Access-Management-Designer exam dumps to ensure your success in the Salesforce Identity-and-Access-Management-Designer Certification Exam at first attempt. Our Salesforce Identity-and-Access-Management-Designer exam dumps are updated on regular basis. Dumps4PDF has given option to download some test papers questions in PDF format, alongwith, this candidates can practice test papers online using our test engine. Dumps4PDF provides verified questions with answers which you can expect in the exam. So, it makes easier for candidates to clear it in the first attempt itself..
Dumps of Identity-and-Access-Management-Designer Cover all the requirements of the Real Exam: https://pass4sure.dumps4pdf.com/Identity-and-Access-Management-Designer-valid-braindumps.html