Question 1

What is one of the roles of an Identity Provider in a Single Sign-on setup using SAML?

Options :

A : Validate token

B : Create token

C : Consume token

D : Revoke token

Answer: B

Question 2

Containers (UC) has implemented SAML-based single Sign-on for their Salesforce application and is planning to provide access to Salesforce on mobile devices using the Salesforce1 mobile app. UC wants to ensure that Single Sign-on is used for accessing the Salesforce1 mobile App. Which two recommendations should the Architect make? Choose 2 Answers

Options :

A : Configure the Embedded Web Browser to use My Domain URL.

B : Configure the Salesforce1 App to use the MY Domain URL.

C : Use the existing SAML-SSO flow along with User Agent Flow.

D : Use the existing SAML SSO flow along with Web Server Flow.

Answer: B,C

Question 3

Universal Containers (UC) is looking to build a Canvas app and wants to use the corresponding ConnectedApp to control where the app is visible. Which two options are correct in regards to where the app can bemade visible under the Connected App setting for the Canvas app? Choose 2 answers

Options :

A : As part of the body of a Salesforce Knowledge article.

B : In the mobile navigation menu on Salesforce for Android.

C : The sidebar of a Salesforce Console as a console component.

D : Included in the Call Control Tool that-s part of Open CTI.

Answer: A,C

Question 4

Universal containers wants to set up SSO for a selected group of users to access external applications from salesforce through App launcher. Which three steps must be completed in salesforce to accomplish the goal?

Options :

A : Associate user profiles with the connected Apps.

B : Complete my domain and Identity provider setup.

C : Create connected apps for the external applications.

D : Complete single Sign-on settings in security controls.

E : Create named credentials for each external system.

Answer: A,B,C

Question 5

What item should an Architect consider when designing a Delegated Authentication implementation?

Options :

A : The Web service should be secured with TLS using Salesforce trusted certificates.

B : The Web service should be able to accept one to four input method parameters.

C : The web service should use the Salesforce Federation ID to identify the user.

D : The Web service should implement a custom password decryption method.

Answer: A

Higher Test Marks with Free Online Plat-Arch-203 Exam Practice

Buying Options: