Identity-and-Access-Management-Architect Practice Test

Universal Container's (UC) is using Salesforce Experience Cloud site for its container wholesale business. The identity architect wants to an authentication provider for the new site. Which two options should be utilized in creating an authentication provider? Choose 2 answers

A. A custom registration handier can be set.

B. A custom error URL can be set.

C. The default login user can be set.

D. The default authentication provider certificate can be set.

Universal containers (UC) has multiple salesforce orgs and would like to use a single identity provider to access all of their orgs. How should UC'S architect enable this behavior?

A. Ensure that users have the same email value in their user records in all of UC's salesforce orgs.

B. Ensure the same username is allowed in multiple orgs by contacting salesforce support.

C. Ensure that users have the same Federation ID value in their user records in all of UC's salesforce orgs.

D. Ensure that users have the same alias value in their user records in all of UC's salesforce orgs.

A group of users try to access one of universal containers connected apps and receive the following error message : "Failed : Not approved for access". what is most likely to cause of the issue?

A. The use of high assurance sections are required for the connected App.

B. The users do not have the correct permission set assigned to them.

C. The connected App setting "All users may self-authorize" is enabled.

D. The salesforce administrators gave revoked the Oauth authorization.

Northern Trail Outfitters (NTO) uses a Security Assertion Markup Language (SAML)-based Identity Provider (idP) to authenticate employees to all systems. The IdP authenticates users against a Lightweight Directory Access Protocol (LDAP) directory and has access to user information. NTO wants to minimize Salesforce license usage since only a small percentage of users need Salesforce. What is recommended to ensure new employees have immediate access to Salesforce using their current IdP?

A. Install Salesforce Identity Connect to automatically provision new users in Salesforce the first time they attempt to login.

B. Build an integration that queries LDAP periodically and creates new active users in Salesforce.

C. Configure Just-in-Time provisioning using SAML attributes to create new Salesforce users as necessary when a new user attempts to login to Salesforce.

D. Build an integration that queries LDAP and creates new inactive users in Salesforce and use a login flow to activate the user at first login.

Which three are features of federated Single sign-on solutions? Choose 3 Answers

A. It establishes trust between Identity Store and Service Provider.

B. It federates credentials control to authorized applications.

C. It solves all identity and access management problems.

D. It improves affiliated applications adoption rates.

E. It enables quick and easy provisioning and deactivating of users.