Plat-Arch-203試験無料問題集（246題）「Salesforce Certified Platform Identity and Access Management Architect 認定」

出題：1

Universal containers uses an Employee portal for their employees to collaborate. employees access the portal from their company's internal website via SSO. It is set up to work with Active Directory. What is the role of Active Directory in this scenario?

A. Service provider

B. Identity provider

C. Authentication store

D. Identity store

正解：B 解答を投票する

出題：2

Universal Containers (UC) has a desktop application to collect leads for marketing campaigns. UC wants to extend this application to integrate with Salesforce to create leads. Integration between the desktop application and Salesforce should be seamless. What Authorization flow should the Architect recommend?

A. User Agent Flow

B. JWT Bearer Token Flow

C. Web Server Authentication Flow

D. Username and Password Flow

正解：A 解答を投票する

出題：3

Universal Containers (UC) wants to provide single sign-on (SSO) for a business-to-consumer (B2C) application using Salesforce Identity.
Which Salesforce license should UC utilize to implement this use case?

A. Partner Community

B. External Identity

C. Identity Only

D. Salesforce Platform

正解：B 解答を投票する

出題：4

An Identity and Access Management (IAM) architect is tasked with unifying multiple B2C Commerce sites and an Experience Cloud community with a single identity. The solution needs to support more than 1,000 logins per minute.
What should the IAM do to fulfill this requirement?

A. Create a default account for capturing all ecommerce contacts registered on the community because personAccount is not supported for this case.

B. Configure community as a Security Assertion Markup Language (SAML) identity provider and enable Just-in-Time Provisioning to B2C Commerce.

C. Confirm performance considerations with Salesforce Customer Support due to high peaks.

D. Configure both the community and the commerce sites as OAuth2 RPs (relying party) with an external identity provider.

正解：C 解答を投票する

出題：5

How should an Architect automatically redirect users to the login page of the external Identity provider when using an SP-Initiated SAML flow with Salesforce as a Service Provider?

A. Enable the Redirect to the Identity Provider setting under Authentication Services on the My domain Configuration.

B. Set the Identity Provider as default and enable the Redirect to the Identity Provider setting on the SAML Configuration.

C. Use visualforce as the landing page for My Domain to redirect users to the Identity Provider login Page.

D. Remove the Login page from the list of Authentication Services on the My Domain configuration.

正解：D 解答を投票する

出題：6

Universal Containers (UC) uses Salesforce for its customer service agents. UC has a proprietary system for order tracking which supports Security Assertion Markup Language (SAML) based single sign-on. The VP of customer service wants to ensure only active Salesforce users should be able to access the order tracking system which is only visible within Salesforce.
What should be done to fulfill the requirement?
Choose 2 answers

A. Setup Order Tracking as a Canvas app in Salesforce to POST IdP initiated SAML assertion.

B. Set up the Corporate Identity store as an identity provider (IdP) for Order Tracking,

C. Customize Order Tracking to initiate a REST call to validate users in Salesforce after login.

D. Setup Salesforce as an identity provider (IdP) for order Tracking.

正解：B,D 解答を投票する

出題：7

Northern Trail Outfitters would like to use a portal built on Salesforce Experience Cloud for customer self-service. Guests of the portal be able to self-register, but be unable to automatically be assigned to a contact record until verified. External Identity licenses have bee purchased for the project.
After registered guests complete an onboarding process, a flow will create the appropriate account and contact records for the user.
Which three steps should an identity architect follow to implement the outlined requirements?
Choose 3 answers

A. Enable "Allow customers and partners to self-register".

B. Select the "Configurable Self-Reg Page" option under Login & Registration.

C. Customize the self-registration Apex handler to temporarily associate the user to a shared single contact record.

D. Set jp an external login page and call Salesforce APIs for user creation.

E. Customize me self-registration Apex handler to create only the user record.

正解：A,B,E 解答を投票する

出題：8

Universal Containers (UC) has an existing Salesforce org configured for SP-Initiated SAML SSO with their Idp. A second Salesforce org is being introduced into the environment and the IT team would like to ensure they can use the same Idp for new org. What action should the IT team take while implementing the second org?

A. Use a different Entity ID than the first org.

B. Use the same request bindings as the first org.

C. Use the Salesforce Username as the SAML Identity Type.

D. Use the same SAML Identity location as the first org.

正解：A 解答を投票する

出題：9

Universal Containers (UC) wants its closed Won opportunities to be synced to a Data Warehouse in near real time. UC has implemented Outbound Message to enable near real-time data sync. UC wants to ensure that communication between Salesforce and Target System is Secure. What Certificate is sent along with the Outbound Message?

A. The Self-Signed Certificates from the Certificate & Key Management menu.

B. The default Client Certificate or a Certificate from Certificate and Key Management menu.

C. The default Client Certificate from the Develop--> API Menu.

D. The CA-Signed Certificate from the Certificate and Key Management menu.

正解：C 解答を投票する

Plat-Arch-203試験無料問題集「Salesforce Certified Platform Identity and Access Management Architect 認定」