Question 1

An Identity architect works for a multinational, multi-brand organization. As they work with the organization

to understand their Customer Identity and Access Management requirements, the identity architect learns that

the brand experience is different for each of the customer's sub-brands and each of these branded experiences

must be carried through the login experience depending on which sub-brand the user is logging into.

Which solution should the architect recommend to support scalability and reduce maintenance costs, if the

organization has more than 150 sub-brands?

Options :

A : Assign each sub-brand a unique Experience ID and use the Experience ID to dynamically brand the login experience.

B : Use Audiences to customize the login experience for each sub-brand and pass an audience ID to the community during the OAuth and Security Assertion Markup Language (SAML) flows.

C : Create a community subdomain for each sub-brand and customize the look and feel of the Login page for each community subdomain to match the brand.

D :

Create a separate Salesforce org for each sub-brand so that each sub-brand has complete control over the

user experience.

Answer: A

Question 2

Universal containers (UC) wants to integrate a Web application with salesforce. The UC team has

implemented the Oauth web-server Authentication flow for authentication process. Which two considerations

should an architect point out to UC? Choose 2 answers

Options :

A : The web application should be hosted on a secure server.

B : The web server must be able to protect consumer privacy

C : The flow involves passing the user credentials back and forth.

D : The flow will not provide an Oauth refresh token back to the server.

Answer: A,B

Question 3

Universal Containers (UC) uses Salesforce to allow customers to keep track of the order status. The customers

can log in to Salesforce using external authentication providers, such as Facebook and Google. UC is also

leveraging the App Launcher to let customers access an of platform application for generating shipping labels.

The label generator application uses OAuth to provide users access. What license type should an Architect

recommend for the customers?

Options :

A : Customer Community license

B : Identity license

C : Customer Community Plus license

D : External Identity license

Answer: B

Question 4

What information does the 'Relaystate' parameter contain in sp-Initiated Single Sign-on?

Options :

A : Reference to a URL redirect parameter at the identity provider.

B : Reference to a URL redirect parameter at the service provider.

C : Reference to the login address URL of the service provider.

D : Reference to the login address URL of the identity Provider.

Answer: B

Question 5

Universal Containers (UC) wants to implement SAML SSO for their internal of Salesforce users using a third-party IdP. After some evaluation, UC decides NOT to 65« set up My Domain for their Salesforce org. How does that decision impact their SSO implementation?

Options :

A : IdP-initiated SSO will NOT work.

B : Neither SP- nor IdP-initiated SSO will work.

C : Either SP- or IdP-initiated SSO will work.

D : SP-initiated SSO will NOT work

Answer: B

Higher Test Marks with Free Online Identity-and-Access-Management-Architect Exam Practice

Buying Options: