Question 1

Universal containers (UC) uses a legacy Employee portal for their employees to collaborate and post their

ideas. UC decides to use salesforce ideas for voting and better tracking purposes. To avoid provisioning users

on Salesforce, UC decides to push ideas posted on the Employee portal to salesforce through API. UC decides

to use an API user using Oauth Username - password flow for the connection. How can the connection to

salesforce be restricted only to the employee portal server?

Options :

A : Add the Employee portals IP address to the Trusted IP range for the connected App

B : Use a digital certificate signed by the employee portal Server.

C : Add the employee portals IP address to the login IP range on the user profile.

D : Use a dedicated profile for the user the Employee portal uses.

Answer: A

Question 2

Universal containers (UC) is building a mobile application that will make calls to the salesforce REST API.Additionally UC would like to provide the optimal experience for its mobile users. Which two OAuth scopesshould UC configure in the connected App? Choose 2 answers

Options :

A : Refresh token

B : API

C : full

D : Web

Answer: A,B

Question 3

Universal containers wants to build a custom mobile app connecting to salesforce using Oauth, and would liketo restrict the types of resources mobile users can access. What Oauth feature of Salesforce should be used toachieve the goal?

Options :

A : Access Tokens

B : Mobile pins

C : Refresh Tokens

D : Scopes

Answer: D

Question 4

Universal Containers (UC) operates in Asia, Europe and North America regions. There is one Salesforce org

for each region. UC is implementing Customer 360 in Salesforce and has procured External Identity and

Customer Community licenses in all orgs.

Customers of UC use Community to track orders and create inquiries. Customers also tend to move across

regions frequently.

What should an identity architect recommend to optimize license usage and reduce maintenance overhead?

Options :

A : Merge three orgs into one instance of Salesforce. This will no longer require maintaining three separate copies of the same customer.

B : Delete contact/ account records and deactivate user if user moves from a specific region; Sync will no longer be required.

C : Contacts are required since Community access needs to be enabled. Maintenance is a necessary overhead that must be handled via data integration.

D : Enable Contactless User in all orgs and downgrade users from Experience Cloud license to External Identity license once users have moved out of that region.

Answer: C

Question 5

Universal Containers (UC) has built a custom token-based Two-factor authentication (2FA) system for their existing on-premise applications. They are now implementing Salesforce and would like to enable a Two-factor login process for it, as well. What is the recommended solution as Architect should consider?

Options :

A : Use the custom 2FA system for on-premise applications and native 2FA for Salesforce.

B : Replace the custom 2FA system with an AppExchange App that supports on premise application and salesforce.

C : Use Custom Login Flows to connect to the existing custom 2FA system for use in Salesforce.

D : Replace the custom 2FA system with Salesforce 2FA for on-premise applications and Salesforce.

Answer: D

Free Identity-and-Access-Management-Architect Mock Exam – Practice Online Confidently

Buying Options: