IDENTITY-AND-ACCESS-MANAGEMENT-ARCHITECT…
Q: 1
Universal Containers (UC) wants to use Salesforce for sales orders and a legacy of system for order
fulfillment. The legacy system must update the status of orders in 65* Salesforce in real time as they
are fulfilled. UC decides to use OAuth for connecting the legacy system to Salesforce. What OAuth
flow should be considered that doesn't require storing credentials, client secret or refresh tokens?
Options
Q: 2
Universal containers (UC) employees have salesforce access from restricted ip ranges only, to protect
against unauthorised access. UC wants to rollout the salesforce1 mobile app and make it accessible
from any location. Which two options should an architect recommend? Choose 2 answers
Options
Q: 3
Universal Containers (UC) has a Customer Community that uses Facebook for Authentication. UC
would like to ensure that Changes in the Facebook profile are reflected on the appropriate Customer
Community user: How can this requirement be met?
Options
Q: 4
Universal Containers (UC) is looking to build a Canvas app and wants to use the corresponding
Connected App to control where the app is visible. Which two options are correct in regards to where
the app can be made visible under the Connected App setting for the Canvas app? Choose 2 answers
Options
Q: 5
Universal Containers (UC) is planning to add Wi-Fi enabled GPS tracking devices to its shipping
containers so that the GPS coordinates data can be sent from the tracking device to its Salesforce
production org via a custom API. The GPS devices have no direct user input or output capabilities.
Which OAuth flow should the identity architect recommend to meet the requirement?
Options
Q: 6
Northern Trail Outfitters (NTO) recently purchased Salesforce Identity Connect to streamline user
provisioning across Microsoft Active Directory (AD) and Salesforce Sales Cloud.
NTO has asked an identity architect to identify which salesforce security configurations can map to
AD permissions.
Which three Salesforce permissions are available to map to AD permissions?
Choose 3 answers
Options
Q: 7
A farming enterprise offers smart farming technology to its farmer customers, which includes a
variety of sensors for livestock tracking, pest monitoring, climate monitoring etc. They plan to store
all the data in Salesforce. They would also like to ensure timely maintenance of the Installed sensors.
They have engaged a salesforce Architect to propose an appropriate way to generate sensor
Information In Salesforce.
Which OAuth flow should the architect recommend?
Options
Q: 8
What information does the 'Relaystate' parameter contain in sp-Initiated Single Sign-on?
Options
Q: 9
Universal Containers (UC) wants to implement SAML SSO for their internal of Salesforce users using a
third-party IdP. After some evaluation, UC decides NOT to 65« set up My Domain for their Salesforce
org. How does that decision impact their SSO implementation?
Options
Q: 10
Universal Containers (UC) uses Global Shipping (GS) as one of their shipping vendors. Regional leads
of GS need access to UC's Salesforce instance for reporting damage of goods using Cases. The
regional leads also need access to dashboards to keep track of regional shipping KPIs. UC internally
uses a third-party cloud analytics tool for capacity planning and UC decided to provide access to this
tool to a subset of GS employees. In addition to regional leads, the GS capacity planning team would
benefit from access to this tool. To access the analytics tool, UC IT has set up Salesforce as the
Identity provider for Internal users and would like to follow the same approach for the GS users as
well. What are the most appropriate license types for GS Tregional Leads and the GS Capacity
Planners? Choose 2 Answers
Options
Question 1 of 10
