Question 1

An Architect has configured a SAML-based SSO integration between Salesforce and an external Identity provider and is ready to test it. When the Architect attempts to log in to Salesforce using SSO, the Architect receives a SAML error. Which two optimal actions should the Architect take to troubleshoot the issue?

Options :

A : Ensure the Callback URL is correctly set in the Connected Apps settings.

B : Use a browser that has an add-on/extension that can inspect SAML.

C : Paste the SAML Assertion Validator in Salesforce.

D : Use the browser-s Development tools to view the Salesforce page-s markup.

Answer: B,C

Question 2

Universal Containers (UC) has an existing e-commerce platform and is implementing a new customer community. They do not want to force customers to register on both applications due to concern over the customers experience. It is expected that 25% of the e-commerce customers will utilize the customer community . The e-commerce platform is capable of generating SAML responses and has an existing REST-ful API capable of managing users. How should UC create the identities of its e-commerce users with the customer community?

Options :

A : Use SAML JIT in the Customer Community to create users when a user tries to login to the community from the e-commerce site.

B : Use the e-commerce REST API to create users when a user self-register on the customer community and use SAML to allow SSO.

C : Use a nightly batch ETL job to sync users between the Customer Community and the e-commerce platform and use SAML to allow SSO.

D : Use the standard Salesforce API to create users in the Community When a User is Created in the e-Commerce platform and use SAML to allow SSO.

Answer: A

Question 3

Universal containers wants to build a custom mobile app connecting to salesforce using Oauth, and would like

to restrict the types of resources mobile users can access. What Oauth feature of Salesforce should be used to

achieve the goal?

Options :

A :

Access Tokens

B :

Mobile pins

C : Refresh Tokens

D : Scopes

Answer: D

Question 4

Universal containers (UC) wants to integrate a Web application with salesforce. The UC team hasimplemented the Oauth web-server Authentication flow for authentication process. Which two considerationsshould an architect point out to UC? Choose 2 answers

Options :

A : The web application should be hosted on a secure server.

B : The web server must be able to protect consumer privacy

C : The flow involves passing the user credentials back and forth.

D : The flow will not provide an Oauth refresh token back to the server.

Answer: A,B

Question 5

Universal containers (UC) uses a legacy Employee portal for their employees to collaborate and post their

ideas. UC decides to use salesforce ideas for voting and better tracking purposes. To avoid provisioning users

on Salesforce, UC decides to push ideas posted on the Employee portal to salesforce through API. UC decides

to use an API user using Oauth Username - password flow for the connection. How can the connection to

salesforce be restricted only to the employee portal server?

Options :

A : Add the Employee portals IP address to the Trusted IP range for the connected App

B : Use a digital certificate signed by the employee portal Server.

C : Add the employee portals IP address to the login IP range on the user profile.

D : Use a dedicated profile for the user the Employee portal uses.

Answer: A

Free Identity-and-Access-Management-Architect Mock Exam – Practice Online Confidently

Buying Options: