Question 1

Northern Trail Outfitters (NTO) leverages Microsoft Active Directory (AD) for management of employeeusernames, passwords, permissions, and asset access. NTO also owns a third-party single sign-on (SSO)solution. The third-party party SSO solution is used for all corporate applications, including Salesforce.NTO has asked an architect to explore Salesforce Identity Connect for automatic provisioning anddeprovisiorung of users in Salesforce.What role does identity Connect play in the outlined requirements?

Options :

A : Service Provider

B : Single Sign-On

C : Identity Provider

D : User Management

Answer: D

Question 2

Northern Trail Outfitters (NTO) recently purchased Salesforce Identity Connect to streamline user provisioning across Microsoft Active Directory (AD) and Salesforce Sales Cloud. NTO has asked an identity architect to identify which salesforce security configurations can map to AD permissions. Which three Salesforce permissions are available to map to AD permissions? Choose 3 answers

Options :

A : Public Groups

B : Field-Level Security

C : Roles

D : Sharing Rules

E : Profiles and Permission Sets

Answer: A,C

Question 3

Northern Trail Outfitters (NTO) has an off-boarding process where a terminated employee is first disabled inthe Lightweight Directory Act Protocol (LDAP) directory, then requests are sent to the various applicationsupport teams to finish user deactivations. A terminated employee recently was able to login to NTO'sSalesforce instance 24 hours after termination, even though the user was disabled in the corporate LDAPdirectory.What should an identity architect recommend to prevent this from happening in the future?

Options :

A : Create a Just-in-Time provisioning registration handler to ensure users are deactivated in Salesforce as they are disabled in LDAP.

B : Configure an authentication provider to delegate authentication to the LDAP directory.

C : use a login flow to make a callout to the LDAP directory before authenticating the user to Salesforce.

D : Setup an identity provider (IdP) to authenticate users using LDAP, set up single sign-on to Salesforce and disable Login Form authentication.

Answer: B

Question 4

Universal containers wants to set up SSO for a selected group of users to access external applications from salesforce through App launcher. Which three steps must be completed in salesforce to accomplish the goal?

Options :

A : Associate user profiles with the connected Apps.

B : Complete my domain and Identity provider setup.

C : Create connected apps for the external applications.

D : Complete single Sign-on settings in security controls.

E : Create named credentials for each external system.

Answer: A,B,C

Question 5

Containers (UC) has implemented SAML-based single Sign-on for their Salesforce application and is planning to provide access to Salesforce on mobile devices using the Salesforce1 mobile app. UC wants to ensure that Single Sign-on is used for accessing the Salesforce1 mobile App. Which two recommendations should the Architect make? Choose 2 Answers

Options :

A : Configure the Embedded Web Browser to use My Domain URL.

B : Configure the Salesforce1 App to use the MY Domain URL.

C : Use the existing SAML-SSO flow along with User Agent Flow.

D : Use the existing SAML SSO flow along with Web Server Flow.

Answer: B,C

Free Plat-Arch-203 Mock Exam – Practice Online Confidently

Buying Options: