[Sep-2022] Dumps Brief Outline Of The Identity-and-Access-Management-Designer Exam - DumpsTorrent [Q133-Q151]

Rate this post

[Sep-2022] Dumps Brief Outline Of The Identity-and-Access-Management-Designer Exam – DumpsTorrent

Identity-and-Access-Management-Designer Training & Certification Get Latest Salesforce Identity and Access Management Designer

QUESTION 133
Universal Containers (UC) would liketo enable self-registration for their Salesforce Partner Community Users.
UC wants to capture some custom data elements from the partner user, and based on these data elements, wants to assign the appropriate Profile and Account values.
Which two actions should the Architect recommend to UC1
Choose 2 answers

Configure Registration for Communities to use a custom Visualforce Page.

Modify the SelfRegistration trigger to assign Profile and Account.

Modify the CommunitiesSelfRegController to assign theProfile and Account.

Configure Registration for Communities to use a custom Apex Controller.

QUESTION 134
Universal Containers (UC) uses an internal company portal for their employees to collaborate. UC decides to use Salesforce Ideas and provide the ability for employees to post ideas from the company portal. They use SAML-based SSO to get into the Company portal and would like to leverage it to access Salesforce. Most of the users don’t exist in Salesforce and they would like the user records created in Salesforce Communities the first time they try to access Salesforce.
What recommendation should an Architect make to meet this requirement?

Use Salesforce APIs to create users on the fly.

Use Just-in-Time provisioning.

Use On-the-Fly provisioning.

Use Identity Connect to sync users.

QUESTION 135
Universal Containers (UC) is rolling out its new Customer Identity and Access Management Solution built on top of its existing Salesforce instance. UC wants to allow customers to login using Facebook, Google, and other social sign-on providers.
How should this functionality be enabled for UC, assuming ail social sign-on providers support OpenID Connect?

Configure an authentication provider and a registration handler for each social sign-on provider.

Configure a single sign-on setting and a registration handler for each social sign-on provider.

Configure an authentication provider and a Just-In-Time (JIT) handler for each social sign-on provider.

Configure a single sign-on setting and a JIT handler for each social sign-on provider.

QUESTION 136
How should an Architect automatically redirect users to the login page of the external Identity provider when using an SP-Initiated SAML flow with Salesforce as a Service Provider?

Use visualforce as the landing page for My Domain to redirect users to the Identity Provider login Page.

Enable the Redirect to the Identity Provider setting under Authentication Services on the My domain Configuration.

Remove the Login page from the list of Authentication Services on the My Domain configuration.

Set the Identity Provider as default and enable the Redirect to the Identity Provider setting on the SAML Configuration.

QUESTION 137
Universal containers wants salesforce inbound Oauth-enabled integration clients to use SAML-BASED single Sign-on for authentication. What Oauth flow would be recommended in this scenario?

User-Agent Oauth flow

SAML assertion Oauth flow

User-Token Oauth flow

Web server Oauth flow

QUESTION 138
Universal Containers (UC) uses Salesforce to allow customers to keep track of the order status. The customers can log in to Salesforce using external authentication providers, such as Facebook and Google. UC is also leveraging the App Launcher to let customers access an of platform application for generating shipping labels.
The label generator application uses OAuth to provide users access. What license type should an Architect recommend for the customers?

Customer Community license

Identity license

Customer Community Plus license

External Identity license

QUESTION 139
Universal Containers (UC) has decided to replace the homegrown customer portal with Salesforce Experience Cloud. UC will continue to use its third-party single sign-on (SSO) solution that stores all of its customer and partner credentials.
The first time a customer logs in to the Experience Cloud site through SSO, a user record needs to be created automatically.
Which solution should an identity architect recommend in order to automatically provision users in Salesforce upon login?

Just-in-Time (JIT) provisioning

Custom middleware and web services

Custom login flow and Apex handler

Third-party AppExchange solution

QUESTION 140
Which three types of attacks would a 2-Factor Authentication solution help garden against?

Key logging attacks

Network perimeter attacks

Phishing attacks

Dictionary attacks

Man-in-the-middle attacks

QUESTION 141
Universal containers (UC) has multiple salesforce orgs and would like to use a single identity provider to access all of their orgs. How should UC’S architect enable this behavior?

Ensure that users have the same email value in their user records in all of UC’s salesforce orgs.

Ensure the same username is allowed in multiple orgs by contacting salesforce support.

Ensure that users have the same Federation ID value in their user records in all of UC’s salesforce orgs.

Ensure that users have the same alias value in their user records in all of UC’s salesforce orgs.

QUESTION 142
Containers (UC) uses an internal system for recruiting and would like to have the candidates’ info available in the Salesforce automatically when they are selected. UC decides to use OAuth to connect to Salesforce from the recruiting system and would like to do the authentication using digital certificates. Which two OAuth flows should be considered to meet the requirement? Choose 2 answers

JWT Bearer Token flow

Refresh Token flow

SAML Bearer Assertion flow

Web Service flow

QUESTION 143
Universal Containers (UC) has an e-commerce website where customers can buy products, make payments and manage their accounts. UC decides to build a Customer Community on Salesforce and wants to allow the customers to access the community from their accounts without logging in again. UC decides to implement an SP-initiated SSO using a SAML-compliant Idp. In this scenario where Salesforce is the Service Provider, which two activities must be performed in Salesforce to make SP-initiated SSO work? Choose 2 answers

Configure SAML SSO settings.

Create a Connected App.

Configure Delegated Authentication.

Set up My Domain.

QUESTION 144
A global fitness equipment manufacturer uses Salesforce to manage its sales cycle. The manufacturer has a custom order fulfillment app that needs to request order data from Salesforce. The order fulfillment app needs to integrate with the Salesforce API using OAuth 2.0 protocol.
What should an identity architect use to fulfill this requirement?

Canvas App Integration

OAuth Tokens

Authentication Providers

Connected App and OAuth scopes

QUESTION 145
How should an Architect force users to authenticate with Two-factor Authentication (2FA) for Salesforce only when not connected to an internal company network?

Use Custom Login Flows with Apex to detect the user’s IP address and prompt for 2FA if needed.

Add the list of company’s network IP addresses to the Login Range list under 2FA Setup.

Use an Apex Trigger on the UserLogin object to detect the user’s IP address and prompt for 2FA if needed.

Apply the “Two-factor Authentication for User Interface Logins” permission and Login IP Ranges for all Profiles.

QUESTION 146
Universal Containers (UC) is building an authenticated Customer Community for its customers. UC does not want customer credentials stored in Salesforce and is confident its customers would be willing to use their social media credentials to authenticate to the community. Which two actions should an Architect recommend UC to take?

Use Delegated Authentication to call the Twitter login API to authenticate users.

Configure an Authentication Provider for LinkedIn Social Media Accounts.

Create a Custom Apex Registration Handler to handle new and existing users.

Configure SSO Settings For Facebook to serve as a SAML Identity Provider.

QUESTION 147
Universal containers (UC) has an e-commerce website while customers can buy products, make payments, and manage their accounts. UC decides to build a customer Community on Salesforce and wants to allow the customers to access the community for their accounts without logging in again. UC decides to implement ansp-Initiated SSO using a SAML-BASED complaint IDP. In this scenario where salesforce is the service provider, which two activities must be performed in salesforce to make sp-Initiated SSO work? Choose 2 answers

Configure SAML SSO settings.

Configure Delegated Authentication

Create a connected App

Set up my domain

QUESTION 148
Universal Containers (UC) uses Salesforce to allow customers to keep track of the order status. The customers can log in to Salesforce using external authentication providers, such as Facebook and Google. UC is also leveraging the App Launcher to let customers access an off-platform application for generating shipping labels. The label generator application uses OAuth to provide users access.
What license type should an Architect recommend for the customers?

External Identity license

Identity license

Customer Community license

Customer Community Plus license

QUESTION 149
Containers (UC) has implemented SAML-based single Sign-on for their Salesforce application and is planning to provide access to Salesforce on mobile devices using the Salesforce1 mobile app. UC wants to ensure that Single Sign-on is used for accessing the Salesforce1 mobile App. Which two recommendations should the Architect make? Choose 2 Answers

Configure the Embedded Web Browser to use My Domain URL.

Configure the Salesforce1 App to use the MY Domain URL.

Use the existing SAML-SSO flow along with User Agent Flow.

Use the existing SAML SSO flow along with Web Server Flow.

QUESTION 150
Universal containers wants salesforce inbound Oauth-enabled integration clients to use SAML-BASED single Sign-on for authentication. What Oauth flow would be recommended in this scenario?

User-Agent Oauth flow

SAML assertion Oauth flow

User-Token Oauth flow

Web server Oauth flow

QUESTION 151
Which three capabilities does SAML-based Federated authentication provide? (Choose three.)

Centralized federation provides single point of access, control and auditing.

Access tokens are used to access resources on the server once the user is authenticated.

Web applications with no passwords are more secure and stronger against hacks.

Trust relationships between Identity Provider and Service Provider are required.

SAML tokens can be in XML or JSON format and can be used interchangeably.

Loading …

The benefit in Obtaining the Identity-and-Access-Management-Designer Exam Certification

When an organization hiring or promotion an employee, then the decision is made by human resources. Now while Candidate may have an IT background, they do their decisions in a way that takes into record many different factors. One thing is candidates have formal credentials, such as the Salesforce Certified Identity and Access Management Designer.
After completing the Salesforce Certified Identity and Access Management Designer certification Candidate becomes a solid, well-rounded Salesforce Certified Identity and Access Management Designer.
A candidate might have incredible IT skills. Employers that do the hiring need to make decisions based on limited information and as it always. When they view the official Salesforce Certified Identity and Access Management Designer certification, they can be guaranteed that a candidate has achieved a certain level of competence.
If the Candidate has the desire to move up to a higher-paying position in an organization. This certification will help as always.

Certification Training for Identity-and-Access-Management-Designer Exam Dumps Test Engine: https://www.dumpstorrent.com/Identity-and-Access-Management-Designer-exam-dumps-torrent.html

[Sep-2022] Dumps Brief Outline Of The Identity-and-Access-Management-Designer Exam – DumpsTorrent [Q133-Q151]

The benefit in Obtaining the Identity-and-Access-Management-Designer Exam Certification

admin

Leave a Reply Cancel reply