Question 1

Northern Trail Outfitters (NTO) has an off-boarding process where a terminated employee is first disabled inthe Lightweight Directory Act Protocol (LDAP) directory, then requests are sent to the various applicationsupport teams to finish user deactivations. A terminated employee recently was able to login to NTO'sSalesforce instance 24 hours after termination, even though the user was disabled in the corporate LDAPdirectory.What should an identity architect recommend to prevent this from happening in the future?

Options :

A : Create a Just-in-Time provisioning registration handler to ensure users are deactivated in Salesforce as they are disabled in LDAP.

B : Configure an authentication provider to delegate authentication to the LDAP directory.

C : use a login flow to make a callout to the LDAP directory before authenticating the user to Salesforce.

D : Setup an identity provider (IdP) to authenticate users using LDAP, set up single sign-on to Salesforce and disable Login Form authentication.

Answer: B

Question 2

Universal Containers (UC) employees have Salesforce access from restricted IP ranges only, to protect againstunauthorised access. UC wants to roll out the Salesforce1 mobile app and make it accessible from anylocation. Which two options should an Architect recommend? Choose 2 answers

Options :

A : Relax the IP restriction with a second factor in the Connect App settings for Salesforce1 mobile app.

B : Remove existing restrictions on IP ranges for all types of user access.

C : Relax the IP restrictions in the Connect App settings for the Salesforce1 mobile app.

D : Use Login Flow to bypass IP range restriction for the mobile app.

Answer: A,C

Question 3

Universal Containers (UC) is implementing Salesforce and would like to establish SAML SSO for its users tolog in. UC stores its corporate user identities in a Custom Database. The UC IT Manager has heard goodthings about Salesforce Identity Connect as an Idp, and would like to understand what limitations they mayface if they decided to use Identity Connect in their current environment. What limitation Should an Architectinform the IT Manager about?

Options :

A : Identity Connect will not support user provisioning in UC-s current environment.

B : Identity Connect will only support Idp-initiated SAML flows in UC-s current environment.

C : Identity Connect will only support SP-initiated SAML flows in UC-s current environment.

D : Identity connect is not compatible with UC-s current identity environment.

Answer: A

Question 4

Which tool should be used to track login data, such as the average number of logins, who logged in more thanthe average number of times and who logged in during non-business hours?

Options :

A : Login Inspector

B : Login History

C : Login Report

D : Login Forensics

Answer: D

Question 5

A technology enterprise is setting up an identity solution with an external vendors wellness application for itsemployees. The user attributes need to be returned to the wellness application in an ID token.Which authentication mechanism should an identity architect recommend to meet the requirements?

Options :

A : OpenID Connect

B : User Agent Flow

C : JWT Bearer Token Flow

D : Web Server Flow

Answer: D

Free Plat-Arch-203 Mock Exam – Practice Online Confidently

Buying Options: