Question 1

Users logging into Salesforce are frequently prompted to verify their identity.The identity architect is required to provide recommendations so that frequency of prompt verification can bereduced.What should the identity architect recommend to meet the requirement?

Options :

A : Implement 2FA authentication for the Salesforce org.

B : Set trusted IP ranges for the organization.

C : Implement an single sign-on for Salesforce using an external identity provider.

D : Implement multi-factor authentication for the Salesforce org.

Answer: B

Question 2

Universal Containers (UC) is implementing Salesforce and would like to establish SAML SSO for its users tolog in. UC stores its corporate user identities in a Custom Database. The UC IT Manager has heard goodthings about Salesforce Identity Connect as an Idp, and would like to understand what limitations they mayface if they decided to use Identity Connect in their current environment. What limitation Should an Architectinform the IT Manager about?

Options :

A : Identity Connect will not support user provisioning in UC-s current environment.

B : Identity Connect will only support Idp-initiated SAML flows in UC-s current environment.

C : Identity Connect will only support SP-initiated SAML flows in UC-s current environment.

D : Identity connect is not compatible with UC-s current identity environment.

Answer: A

Question 3

What is one of the roles of an Identity Provider in a Single Sign-on setup using SAML?

Options :

A : Validate token

B : Create token

C : Consume token

D : Revoke token

Answer: B

Question 4

Universal Containers (UC) uses Salesforce to allow customers to keep track of the order status. The customerscan log in to Salesforce using external authentication providers, such as Facebook and Google. UC is alsoleveraging the App Launcher to let customers access an of platform application for generating shipping labels.The label generator application uses OAuth to provide users access. What license type should an Architectrecommend for the customers?

Options :

A : Customer Community license

B : Identity license

C : Customer Community Plus license

D : External Identity license

Answer: B

Question 5

Universal containers (UC) is building a mobile application that will make calls to the salesforce REST API.Additionally UC would like to provide the optimal experience for its mobile users. Which two OAuth scopesshould UC configure in the connected App? Choose 2 answers

Options :

A : Refresh token

B : API

C : full

D : Web

Answer: A,B

Higher Test Marks with Free Online Plat-Arch-203 Exam Practice

Buying Options: