Question 1

Universal Containers (UC) is building a custom Innovation platform on their Salesforce instance. The Innovation platform will be written completely in Apex and Visualforce and will use custom objects to store the Data. UC would like all users to be able to access the system without having to log in with Salesforce credentials. UC will utilize a third-party idp using SAML SSO. What is the optimal Salesforce licence type for all of the UC employees?

Options :

A : Identity Licence.

B : Salesforce Licence.

C : External Identity Licence.

D : Salesforce Platform Licence.

Answer: D

Question 2

Universal Containers (UC) operates in Asia, Europe and North America regions. There is one Salesforce orgfor each region. UC is implementing Customer 360 in Salesforce and has procured External Identity andCustomer Community licenses in all orgs.Customers of UC use Community to track orders and create inquiries. Customers also tend to move acrossregions frequently.What should an identity architect recommend to optimize license usage and reduce maintenance overhead?

Options :

A : Merge three orgs into one instance of Salesforce. This will no longer require maintaining three separate copies of the same customer.

B : Delete contact/ account records and deactivate user if user moves from a specific region; Sync will no longer be required.

C : Contacts are required since Community access needs to be enabled. Maintenance is a necessary overhead that must be handled via data integration.

D : Enable Contactless User in all orgs and downgrade users from Experience Cloud license to External Identity license once users have moved out of that region.

Answer: C

Question 3

Universal containers wants to set up SSO for a selected group of users to access external applications from salesforce through App launcher. Which three steps must be completed in salesforce to accomplish the goal?

Options :

A : Associate user profiles with the connected Apps.

B : Complete my domain and Identity provider setup.

C : Create connected apps for the external applications.

D : Complete single Sign-on settings in security controls.

E : Create named credentials for each external system.

Answer: A,B,C

Question 4

A technology enterprise is setting up an identity solution with an external vendors wellness application for itsemployees. The user attributes need to be returned to the wellness application in an ID token.Which authentication mechanism should an identity architect recommend to meet the requirements?

Options :

A : OpenID Connect

B : User Agent Flow

C : JWT Bearer Token Flow

D : Web Server Flow

Answer: D

Question 5

Universal Containers (UC) employees have Salesforce access from restricted IP ranges only, to protect againstunauthorised access. UC wants to roll out the Salesforce1 mobile app and make it accessible from anylocation. Which two options should an Architect recommend? Choose 2 answers

Options :

A : Relax the IP restriction with a second factor in the Connect App settings for Salesforce1 mobile app.

B : Remove existing restrictions on IP ranges for all types of user access.

C : Relax the IP restrictions in the Connect App settings for the Salesforce1 mobile app.

D : Use Login Flow to bypass IP range restriction for the mobile app.

Answer: A,C

Free Plat-Arch-203 Mock Exam – Practice Online Confidently

Buying Options: