Question 1

Northern Trail Outfitters would like to automatically create new employee users in Salesforce with anappropriate profile that maps to its Active Directory Department.How should an identity architect implement this requirement?

Options :

A : Use the createUser method in the Just-in-Time (JIT) provisioning registration handler to assign theappropriate profile.

B : Use the updateUser method in the Just-in-Time (JIT) provisioning registration handler to assign theappropriate profile.

C : Use a login flow to collect Security Assertion Markup Language attributes and assign the appropriateprofile during Just-In-Time(JIT) provisioning.

D : Make a callout during the login flow to query department from Active Directory to assign theappropriate profile.

Answer: B

Question 2

Universal Containers (UC) wants to implement SAML SSO for their internal of Salesforce users using a third-party IdP. After some evaluation, UC decides NOT to 65« set up My Domain for their Salesforce org. How does that decision impact their SSO implementation?

Options :

A : IdP-initiated SSO will NOT work.

B : Neither SP- nor IdP-initiated SSO will work.

C : Either SP- or IdP-initiated SSO will work.

D : SP-initiated SSO will NOT work

Answer: B

Question 3

Northern Trail Outfitters want to allow its consumer to self-register on it business-to-consumer (B2C) portal

that is built on Experience Cloud. The identity architect has recommended to use Person Accounts.

Which three steps need to be configured to enable self-registration using person accounts?

Choose 3 answers

Options :

A : Enable access to person and business account record types under Public Access Settings.

B : Contact Salesforce Support to enable business accounts.

C : Under Login and Registration settings, ensure that the default account field is empty.

D : Contact Salesforce Support to enable person accounts.

E :

Set organization-wide default sharing for Contact to Public Read Only.

Answer: A,C,D

Question 4

Universal containers wants to build a custom mobile app connecting to salesforce using Oauth, and would liketo restrict the types of resources mobile users can access. What Oauth feature of Salesforce should be used toachieve the goal?

Options :

A : Access Tokens

B : Mobile pins

C : Refresh Tokens

D : Scopes

Answer: D

Question 5

Universal containers (UC) is building a mobile application that will make calls to the salesforce REST API.

Additionally UC would like to provide the optimal experience for its mobile users. Which two OAuth scopes

should UC configure in the connected App? Choose 2 answers

Options :

A :

Refresh token

B : API

C : full

D : Web

Answer: A,B

Free Identity-and-Access-Management-Architect Mock Exam – Practice Online Confidently

Buying Options: