Universal Containers (UC) wants to use Salesforce for sales orders and a legacy of system for order
fulfillment. The legacy system must update the status of orders in 65* Salesforce in real time as they
are fulfilled. UC decides to use OAuth for connecting the legacy system to Salesforce. What OAuth
flow should be considered that doesn't require storing credentials, client secret or refresh tokens?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
B
Explanation
:
Q: 2
Universal containers (UC) employees have salesforce access from restricted ip ranges only, to protect
against unauthorised access. UC wants to rollout the salesforce1 mobile app and make it accessible
from any location. Which two options should an architect recommend? Choose 2 answers
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
AB
Explanation
:
Q: 3
Universal Containers (UC) has a Customer Community that uses Facebook for Authentication. UC
would like to ensure that Changes in the Facebook profile are reflected on the appropriate Customer
Community user: How can this requirement be met?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
A
Explanation
:
Q: 4
Universal Containers (UC) is looking to build a Canvas app and wants to use the corresponding
Connected App to control where the app is visible. Which two options are correct in regards to where
the app can be made visible under the Connected App setting for the Canvas app? Choose 2 answers
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
A, C
Explanation
:
Q: 5
Universal Containers (UC) is planning to add Wi-Fi enabled GPS tracking devices to its shipping
containers so that the GPS coordinates data can be sent from the tracking device to its Salesforce
production org via a custom API. The GPS devices have no direct user input or output capabilities.
Which OAuth flow should the identity architect recommend to meet the requirement?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
A
Explanation
:
Q: 6
Northern Trail Outfitters (NTO) recently purchased Salesforce Identity Connect to streamline user
provisioning across Microsoft Active Directory (AD) and Salesforce Sales Cloud.
NTO has asked an identity architect to identify which salesforce security configurations can map to
AD permissions.
Which three Salesforce permissions are available to map to AD permissions?
Choose 3 answers
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
A, C, E
Explanation
:
Q: 7
A farming enterprise offers smart farming technology to its farmer customers, which includes a
variety of sensors for livestock tracking, pest monitoring, climate monitoring etc. They plan to store
all the data in Salesforce. They would also like to ensure timely maintenance of the Installed sensors.
They have engaged a salesforce Architect to propose an appropriate way to generate sensor
Information In Salesforce.
Which OAuth flow should the architect recommend?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
A
Explanation
:
Q: 8
What information does the 'Relaystate' parameter contain in sp-Initiated Single Sign-on?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
B
Explanation
:
Q: 9
Universal Containers (UC) wants to implement SAML SSO for their internal of Salesforce users using a
third-party IdP. After some evaluation, UC decides NOT to 65« set up My Domain for their Salesforce
org. How does that decision impact their SSO implementation?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
B
Explanation
:
Q: 10
Universal Containers (UC) uses Global Shipping (GS) as one of their shipping vendors. Regional leads
of GS need access to UC's Salesforce instance for reporting damage of goods using Cases. The
regional leads also need access to dashboards to keep track of regional shipping KPIs. UC internally
uses a third-party cloud analytics tool for capacity planning and UC decided to provide access to this
tool to a subset of GS employees. In addition to regional leads, the GS capacity planning team would
benefit from access to this tool. To access the analytics tool, UC IT has set up Salesforce as the
Identity provider for Internal users and would like to follow the same approach for the GS users as
well. What are the most appropriate license types for GS Tregional Leads and the GS Capacity
Planners? Choose 2 Answers
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
B, D
Explanation
:
Q: 11
Universal Containers (UC) rolling out a new Customer Identity and Access Management Solution will
be built on top of their existing Salesforce instance.
Several service providers have been setup and integrated with Salesforce using OpenlD Connect to
allow for a seamless single sign-on experience. UC has a requirement to limit user access to only a
subset of service providers per customer type.
Which two steps should be done on the platform to satisfy the requirement?
Choose 2 answers
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
C, D
Explanation
:
Q: 12
Northern Trail Outfitters (NTO) is planning to implement a community for its customers using
Salesforce Experience Cloud . Customers are not able to self-register. NTO would like to have
customers set their own passwords when provided access to the community.
Which two recommendations should an identity architect make to fulfill this requirement?
Choose 2 answers
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
C, D
Explanation
:
Q: 13
Universal containers (UC) has multiple salesforce orgs and would like to use a single identity provider
to access all of their orgs. How should UC'S architect enable this behavior?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
C
Explanation
:
Q: 14
Northern Trail Outfitters (NTO) employees use a custom on-premise helpdesk application to request,
approve, notify, and track access granted to various on-premises and cloud applications, including
Salesforce. Salesforce is currently used to authenticate users.
How should NTO provision Salesforce users as soon as they are approved in the helpdesk application
with the approved profiles and permission sets?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
B
Explanation
:
Q: 15
Universal Container's (UC) is using Salesforce Experience Cloud site for its container wholesale
business. The identity architect wants to an authentication provider for the new site.
Which two options should be utilized in creating an authentication provider?
Choose 2 answers
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
A, B
Explanation
:
Q: 16
Which two things should be done to ensure end users can only use single sign-on (SSO) to login in to
Salesforce?
Choose 2 answers
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
A, D
Explanation
:
Q: 17
An architect needs to advise the team that manages the identity provider how to differentiate
salesforce from other service providers. What SAML SSO setting in salesforce provides this
capability?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
A
Explanation
:
Q: 18
Universal Containers (UC) would like its community users to be able to register and log in with
Linkedin or Facebook Credentials. UC wants users to clearly see Facebook &Linkedin Icons when they
register and login. What are the two recommended actions UC can take to achieve this Functionality?
Choose 2 answers
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
A, B
Explanation
:
Q: 19
Universal containers (UC) has built a custom based Two-factor Authentication (2fa) system for their
existing on-premise applications. Thru are now implementing salesforce and would like to enable a
Two-factor login process for it, as well. What is the recommended solution an architect should
consider?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
D
Explanation
:
Q: 20
Universal Containers (UC) employees have Salesforce access from restricted IP ranges only, to protect
against unauthorised access. UC wants to roll out the Salesforce1 mobile app and make it accessible
from any location. Which two options should an Architect recommend? Choose 2 answers
