Question 1

A technology enterprise is setting up an identity solution with an external vendors wellness application for itsemployees. The user attributes need to be returned to the wellness application in an ID token.Which authentication mechanism should an identity architect recommend to meet the requirements?

Options :

A : OpenID Connect

B : User Agent Flow

C : JWT Bearer Token Flow

D : Web Server Flow

Answer: D

Question 2

Universal containers wants to implement SAML SSO for their internal salesforce users using a third-party IDP. After some evaluation, UC decides not to set up my domain for their salesforce.org. How does that decision impact their SSO implementation?

Options :

A : Neithersp - nor IDP - initiated SSO will work

B : Either sp - or IDP - initiated SSO will work

C : IDP - initiated SSO will not work

D : Sp-Initiated SSO will not work

Answer: D

Question 3

Universal containers (UC) is building a mobile application that will make calls to the salesforce REST API.Additionally UC would like to provide the optimal experience for its mobile users. Which two OAuth scopesshould UC configure in the connected App? Choose 2 answers

Options :

A : Refresh token

B : API

C : full

D : Web

Answer: A,B

Question 4

Northern Trail Outfitters (NTO) recently purchased Salesforce Identity Connect to streamline user provisioning across Microsoft Active Directory (AD) and Salesforce Sales Cloud. NTO has asked an identity architect to identify which salesforce security configurations can map to AD permissions. Which three Salesforce permissions are available to map to AD permissions? Choose 3 answers

Options :

A : Public Groups

B : Field-Level Security

C : Roles

D : Sharing Rules

E : Profiles and Permission Sets

Answer: A,C

Question 5

Universal Containers (UC) has an existing e-commerce platform and is implementing a new customer community. They do not want to force customers to register on both applications due to concern over the customers experience. It is expected that 25% of the e-commerce customers will utilize the customer community . The e-commerce platform is capable of generating SAML responses and has an existing REST-ful API capable of managing users. How should UC create the identities of its e-commerce users with the customer community?

Options :

A : Use SAML JIT in the Customer Community to create users when a user tries to login to the community from the e-commerce site.

B : Use the e-commerce REST API to create users when a user self-register on the customer community and use SAML to allow SSO.

C : Use a nightly batch ETL job to sync users between the Customer Community and the e-commerce platform and use SAML to allow SSO.

D : Use the standard Salesforce API to create users in the Community When a User is Created in the e-Commerce platform and use SAML to allow SSO.

Answer: A

Higher Test Marks with Free Online Plat-Arch-203 Exam Practice

Buying Options: