• ホーム
  • ブログ
  • [2026年03月27日] 最新でリアルなIntegration-Architect試験問題集解答 [Q58-Q79]

[2026年03月27日] 最新でリアルなIntegration-Architect試験問題集解答 [Q58-Q79]

Share

[2026年03月27日] 最新でリアルなIntegration-Architect試験問題集解答

あなたを簡単に合格させるIntegration-Architect試験問と正確なSalesforce Certified Integration ArchitectのPDF問題


Salesforce Integration-Architect 認定試験は、Salesforceと他のシステムを統合する専門家のための重要な認定試験です。この認定は、ビジネスのニーズを満たす効率的でスケーラブルかつ安全な統合を開発するために必要なスキルと知識を検証します。この試験に備えるためには、Salesforceのアーキテクチャ、デザインパターン、およびベストプラクティスに対する深い理解、さらにはさまざまな統合ツールを使用した経験が必要です。この認定を取得することで、専門家はSalesforceの統合の専門知識を証明し、新たなキャリアチャンスを開拓することができます。

 

質問 # 58
What should an Architect recommend to ensure all integrations to the Northern Trail Outfitters company portal useSSL mutual authentication?

  • A. Enforce SSL/TLS MutualAuthentication.
  • B. Generate a Self-signed Certificate.
  • C. Generate a CA-signed Certificate.
  • D. Enable My Domain and SSL/TLS.

正解：A

解説：
This is because SSL/TLS mutual authentication is a security featurethat allows Salesforce to verify the identity of the client that connects to its API endpoint on port 8443. To enable this feature, you need to upload a client certificate to Salesforce and assign the "Enforce SSL/TLS Mutual Authentication" user permission to the users who need to access the company portal. The other options are not sufficient for this scenario because:
A, Enable My Domain and SSL/TLS, is a prerequisite for using SSL/TLS mutual authentication, but it does not ensure that all integrations use it. My Domain allows you to customize your Salesforce domain name and SSL/TLS provides encryption for your data in transit.
C, Generate a Self-signed Certificate, is a step that you need to do on the client side to create a certificate that can be usedfor SSL/TLS mutual authentication, but it does not ensure that allintegrations use it. You also need to upload the certificate to Salesforce and assign the user permission.
D, Generate a CA-signed Certificate, is an alternative to generating a self-signedcertificate, but it also does not ensure that all integrations use SSL/TLS mutual authentication. You still need to upload the certificate to Salesforce and assign the user permission.
References:
Certificates in Mutual Authentication
Configure Your API Client to Use Mutual Authentication
Salesforce Mutual Authentication Setup


質問 # 59
Which WSDL should an architect consider when creating an integration that might be used for more than one salesforce organization and different met

  • A. Enterprise WSDL
  • B. Partner WSDL
  • C. SOAP API WSDL
  • D. Corporate WSDL

正解：B

解説：
Explanation
The Partner WSDL is the best option for creating an integration that might be used for more than one Salesforce organization and different metadata. The Partner WSDL is loosely typed and can reflect against any configuration of Salesforce. It is static and does not change if modifications are made to an organization's Salesforce configuration. Therefore, it is more flexible and adaptable than the Enterprise WSDL, which is strongly typed and bound to a specific configuration of Salesforce1 References: Differences between Salesforce provided WSDL files


質問 # 60
Northern Trail Outfitters has a requirement to encrypt few of widely used standard fields. They also want to be able to use these fields in workflow rules.
Which security solution should an Integration Architect recommend to fulfill the business use case?

  • A. Cryptography Class
  • B. Classic Encryption
  • C. Data Masking
  • D. Platform Shield Encryption

正解：D

解説：
https://help.salesforce.com/articleView?id=data_mask_overview.htm&type=5
https://help.salesforce.com/articleView?id=security_pe_vs_classic_encryption.htm&type=5


質問 # 61
A subscription-based media company's system landscape forces many subscribers to maintain multiple accounts and to log in more than once. An Identity and Access Management (IAM) system, which supports SAML and OpenId, was recently implemented to improve the subscriber experience through self-registration and single sign-on (SSO). The IAM system must integrate with Salesforce to give new self-service customers instant access to Salesforce Community Cloud.
Which requirement should Salesforce Community Cloud support for self-registration and SSO?

  • A. OpenId Connect Authentication Provider and Registration Handler
  • B. SAML SSO and Registration Handler
  • C. OpenId Connect Authentication Provider and Just-in-Time (JIT) provisioning

正解：A


質問 # 62
Universal Containers (UC) uses Salesforce to track the following customer data:
1. Leads,
2. Contacts
3. Accounts
4. Cases
Salesforce is considered to be the system of record for the customer. In addition to Salesforce, customer data exists in an Enterprise Resource Planning (ERP) system, ticketing system, and enterprise data lake. Each of these additional systems have their own unique identifier. UC plans on using middleware to integrate Salesforce with the external systems.
UC has a requirement to update the proper external system with record changes in Salesforce and vice versa.
Which two solutions should an Integration Architect recommend to handle this requirement?
Choose 2answers

  • A. Store unique identifiers in an External ID field in Salesforce and use this to update the proper records across systems.
  • B. Use Change Data Capture to update downstream systems accordingly when a record changes.
  • C. Design an MDM solution that maps external ID's to the Salesforce record ID.
  • D. Locally cache external ID'S at the middleware layer and design business logic to map updates between systems.

正解：B、C

解説：
Explanation
Using Change Data Capture (CDC) to update downstream systems accordingly when a record changes is a solution that can handle this requirement by capturing data changes in Salesforce and sending them to external systems via a publish-subscribe model. This way, the external systems can receive near real-time updates from Salesforce and synchronize their data accordingly. Designing an MDM solution that maps external ID's to the Salesforce record ID is a solution that can handle this requirement by creating a master data hub that stores and manages the unique identifiers of each system and their relationships. This way, the MDM solution can ensure data quality, consistency, and accuracy across systems. Locally caching external ID's at the middleware layer and designing business logic to map updates between systems is not a good solution because it can introduce performance and scalability issues, as well as increase the complexity and maintenance cost of the middleware layer. Storing unique identifiers in an External ID field in Salesforce and using this to update the proper records across systems is not enough to handle this requirement, as it does not address how to update Salesforce with record changes from external systems. Reference: Salesforce Integration Architecture Designer Resource Guide, page 27-28


質問 # 63
A company's security assessment noted vulnerabilities on the un managed packages in their Salesforce orgs, notably secrets that are easily accessible and in plain text, suchas usernames, passwords, and OAuth tokens used in callouts from Salesforce.
Which two persistence mechanisms should an integration architect require to be used to ensure that secrets are protected from deliberate or inadvertent exposure?
Choose 2 answers

  • A. Named Credentials
  • B. Encrypted Custom Fields
  • C. Protected Custom Metadata Types
  • D. Protected Custom Settings

正解：A、D

解説：
Named Credentials and Protected Custom Settings are two persistence mechanisms that can be used to ensure that secrets are protected from deliberate or inadvertent exposure. Named Credentials allow you to specify the URL of a callout endpoint and its required authentication parameters in one definition. Salesforce manages all the authentication for Apex callouts that specify a namedcredential as the callout endpoint, and you don't have to add more authentication logic in your Apex code. Named Credentials can be defined to provide a secure and convenient way of settingup authenticated callouts, and they can also be usedin Lightning components, Visualforce pages, and flows1.
Protected Custom Settings are a type of custom settings that store application-specific data that is hidden from subscribers. They are only accessible by the managed package that created them, and they canbe used to store secrets such as encryption keys, passwords, or tokens. Protected Custom Settings can be accessed by Apex code, formulas, or validation rules within the same namespace as the settings2.
Encrypted Custom Fields are not a suitable mechanism for storing secrets, because they are not designed to prevent unauthorized access to sensitive data. Encrypted Custom Fields allow you to encrypt text fields using a standard encryption scheme. The encrypteddata is masked in reports, list views, and search results, but it can still be viewed by users who have the "View Encrypted Data" permission. Encrypted Custom Fields are intended to protect data from unauthorized access by users within your organization, not from external threats or malicious code3.
Protected Custom Metadata Types are another type of custom metadata types that store application-specific data that is hidden from subscribers. They are similar to Protected Custom Settings, but they have some advantages such as being deployable using change sets or Metadata API, being accessible by SOQL queries, and being able to reference other metadata types or settings. However, Protected Custom Metadata Types cannot be used to store secrets, because they do not support encryption or masking of sensitive data. Protected Custom Metadata Types are intended to store configuration datathat is specific to your managed package, not secrets that need to be secured.
Therefore, the correct answer is B and D, because Named Credentials and Protected Custom Settings are the only persistence mechanisms that can be used to securely store secretsin Salesforce.
References: 1: Named Credentials | Apex Developer Guide | Salesforce Developers 2: CustomSettings | Apex Developer Guide | Salesforce Developers 3: Encrypted Fields | Salesforce Help : [Protected Custom Metadata Types | ISVforce Guide | Salesforce Developers]


質問 # 64
Universal Containers is a global financial company that sells financial products and services.
There is a daily scheduled Batch Apex job that generates invoice from a given set of orders.
UC requested building a resilient integration for this batch apex job in case the invoice generation fails.
What should an integration architect recommend to fulfill the requirement?

  • A. Build Batch Retry & Error Handling using BatchApexErrorEvent.
  • B. Build Batch Retry & Error Handling in the Batch Apex Job itself.
  • C. Build Batch Retry & Error Handling in the middleware.
  • D. Batch Retry & Error Handling report to monitor the error handling.

正解：A

解説：
The BatchApexErrorEvent object allows handling errors that occur during Batch Apex execution. By subscribing to this event,the integration can retry the invoice generation for the failed records or perform other recovery actions. This is a resilient and scalable solution that does not require custom code in the Batch Apex job itself or in the middleware1


質問 # 65
A large enterprise customer has decided to implement Salesforce as their CRM. The current system landscape includes the following:
1. An Enterprise Resource Planning (ERP) solution that is responsible for Customer Invoicingand Order fulfillment.
2. A Marketing solution they use for email campaigns.
The enterprise customer needs their sales and service associates to use Salesforce to view and log their interactions with customers and prospects in Salesforce.
Which system should be the System of record for their customers and prospects?

  • A. ERP with all prospect data from Marketing and Salesforce.
  • B. Salesforce with relevant Marketing and ERP information.
  • C. Marketing with all customer data from Salesforce and ERP.
  • D. New CustomDatabase forCustomers and Prospects.

正解：B

解説：
Option C is correct because Salesforce should be the system of record for their customers and prospects, as it is the CRM solution that the sales and service associates use to view and log their interactions with them. Salesforce can also integrate with the Marketing and ERP solutions to display relevant information from those systems, such as campaign history, invoices, and orders12 Option A is incorrect because ERP is not a suitable system of record for customers and prospects, as it is mainly focused on invoicing and order fulfillment. ERP may not have all the data that the sales and service associates need to interactwith them, such as contact details, preferences, activities, and opportunities. ERP may also have different datamodels and definitions than Salesforce and Marketing, which can cause data quality and consistency issues3 Option B is incorrect because Marketing is not a suitable system of record for customers and prospects, as it is mainly focused on email campaigns. Marketing may not have all the data that the sales and service associates need to interact with them, such as account information, service cases, contracts, and quotes. Marketing may also have different data models and definitions than Salesforce and ERP, which can cause data quality and consistency issues.
Option D is incorrect because creating a new custom database for customers and prospects is not a feasible orefficient solution, as it would require additional development, maintenance, and integration costs. It would also create another layer of complexity and potential data duplication in the system landscape. Salesforce already provides a robust and flexibleplatform for managing customer and prospect data, which can be easily customized and integrated with other systems.
References: 1: Salesforce CRM - The Definitive Guide 2: SalesforceIntegration Cloud - Connect Any App, Data, or Device 3: What Is ERP? | Oracle : Salesforce vs ERP: What's the Difference? : Marketing Cloud - Digital Marketing Platform : Salesforce vs Marketing Cloud: What's the Difference? : Salesforce Platform - Build Apps Fast : Why You Shouldn't Build Your Own CRM System


質問 # 66
An enterprise architect has requested the Salesforce Integration architect to review the following (see diagram
& description) and provide recommendations after carefully considering all constraints of theenterprise systems and Salesforce platform limits.
* About 3,000 phone sales agents use a Salesforce Lightning UI concurrently to check eligibility of a customer for a qualifying offer.
* There are multiple eligibility systems that provides this service and are hosted externally. However, their current response times could take up to 90 seconds to process and return (there are discussions to reduce the response times in future, but no commitments are made).
* These eligibility systems can be accessed through APIs orchestrated via ESB (MuleSoft).
* All requests from Salesforce will have to traverse through customer's API Gateway layer and the API Gateway imposes a constraint of timing out requests after 9 seconds.
Which three recommendations should be made?
Choose 3 answers

  • A. Use Continuation callouts to make the eligibility check request from Salesforce from Lightning UI at page load.
  • B. ESB (Mule) with cache/state management to return a request ID (or) response if available from external system.
  • C. Recommend synchronous Apex call-outs from Lightning UI to External Systems via Mule and implement polling on API gateway timeout.
  • D. When responses are received by Mule, create a Platform Event in Salesforce via Remote-Call-In and use the empAPI in the lightningUI to serve 3,000 concurrent users.
  • E. Implement a 'Check Update' button that passes a request ID received from ESB (user action needed).

正解：A、B、E

解説：
Option A is correct because using ESB (Mule) with cache/state management can help to handle the long- running requests from Salesforce and return a request ID or a response if available from the external systems. This way, Salesforce does not have to wait for the externalsystems to respond and can avoid the API gateway timeout1 Option C is correct because using Continuation callouts can make the eligibility check request from Salesforce from Lightning UI at page load without blocking the UI thread. Continuation callouts are asynchronous and can handle long-running requestsup to 60 seconds23 Option E is correct because implementing a 'Check Update' button that passes a requestID received from ESB can allow the user to manually check the status of the eligibility check request. This can be useful when theresponse is not available within the Continuation timeout limit or when the user wants to refresh the data4 Option B is incorrect because recommending synchronous Apex callouts from Lightning UI to External Systems via Mule and implementing polling on APIgateway timeout can cause performance issues and user frustration. Synchronous Apex callouts block the UI thread and can only handle requests up to 120 seconds. Polling on API gateway timeout can increasethe network traffic and consume the callout limits25 Option D is incorrect because creating a Platform Event in Salesforce via Remote-Call-In and using the empAPI in the lightning UI to serve 3,000 concurrent users can introduce complexity and scalability issues.
Platform Events are meant for event-driven architecture and not for request-response scenarios. Remote-Call- In requires an additional license and configuration. empAPI has a limit of 1,000 concurrent subscribers per channel678 References: 1: MuleSoft Documentation 2: Salesforce Documentation 4: Salesforce Trailhead 3: Salesforce Developers Blog 5: Salesforce Documentation 6: Salesforce Documentation 7: Salesforce Documentation 8:
Salesforce Documentation


質問 # 67
Universal Containers (UC) is a leading provider of management training globally, UC embarked on a Salesforce transformation journey to allow students to register for courses in the Salesforce community. UC has a learning system that masters all courses and student registration.
UC requested a near real-time feed of student registration from Salesforce to the learning system. The integration architect recommends using Salesforce event.
Which API should be used for the Salesforce platform event solution?

  • A. O REST AP
  • B. SOAP API
  • C. Streaming API
  • D. Tooling API

正解：C


質問 # 68
Salesforce users need to read data from an external system via HTTPS request.
Which two security methods should an integration architect leverage within Salesforce to secure the integration?
Choose 2 answers

  • A. Authorization Provider
  • B. Named Credentials
  • C. Connected App
  • D. Two way SSL

正解：B、D


質問 # 69
Which two requirements should the Salesforce Community Cloud support for self-registration and SSO?
Choose 2 answers

  • A. OpenId Connect Authentication Provider and Registration Handler
  • B. SAML SSO and Registration Handler
  • C. SAML SSO and just-in-time provisioning
  • D. OpenId Connect Authentication Provider and just-in-time provisioning

正解：A、C

解説：
Explanation
OpenId Connect Authentication Provider and Registration Handler, and SAML SSO and just-in-time provisioning are two requirements that the Salesforce Community Cloud can support for self-registration and SSO. OpenId Connect is a protocol that allows users to authenticate with an external identity provider and access Salesforce resources. A registration handler is a class that implements the Auth.RegistrationHandler interface and defines the logic for creating or updating a user in Salesforce after authentication. SAML SSO is a protocol that allows users to log in to Salesforce with a single click, using an assertion from an identity provider that confirms the user's identity. Just-in-time provisioning is a feature that allows Salesforce to create or update a user account based on the information in the SAML assertion. References: Certification - Integration Architect - Trailhead, [OpenID Connect Authentication Providers], [SAML Single Sign-On (SSO) Service for Salesforce]


質問 # 70
Northern Trail Outfitters uses a custom Java application to display code coverage and test results for all of their enterprise applicationsand is planning to include Salesforce as well.
Which Salesforce API should an Integration Architect use to meet the requirement?

  • A. SOAP API
  • B. Analytics REST API
  • C. Tooling API
  • D. Metadata API

正解：C

解説：
Explanation
Option D is correct because Tooling API is the Salesforce API that can be used to retrieve code coverage and test results for Apex classes and triggers. Tooling API provides REST and SOAP interfaces to access metadata about code, execute tests, and get test results12 Option A is incorrect because SOAP API is a Salesforce API that can be used to create, retrieve, update, or delete records, but not to get code coverage and test results. SOAP API uses a WSDL file to define the parameters for accessing data through the API3 Option B is incorrect because Analytics REST API is a Salesforce API that can be used to access data from reports and dashboards, but not from code coverage and test results. Analytics REST API provides a programmatic way to interact with analytics features such as lenses, datasets, and dashboards4 Option C is incorrect because Metadata API is a Salesforce API that can be used to retrieve, deploy, create, update, or delete customization information, such as custom object definitions and page layouts, but not code coverage and test results. Metadata API is mainly used for development tools or backup tools5 References: 1: Introducing Tooling API 2: Tooling API Examples 3: SOAP API Developer Guide 4: Analytics REST API Developer Guide 5: Metadata API Developer Guide


質問 # 71
Given the diagram below, a Salesforce org, middleware, and Historical data store (with
20million records and growing) exists with connectivity between them
Historical records are archived from Salesforce and moved to Historical Data store (which houses 20M records and growing; fine-tuned to be performant with search queries).
Call center agents use Salesforce, when reviewing occasional special cases, have requested access to view the related historical case items that relate to submit cases.
Which mechanism and patterns are recommended to maximize declarative configuration?

  • A. C Use an ESB tool with a fire and forget pattern and then publish a platform event for the requested historical data.
  • B. Use an ESB tool with Request-Reply pattern and then make a real-time Apex callout to the ESB endpoint to fetch and display component related to Case object
  • C. Use ESB tool with Data Virtualization pattern, expose OData endpoint, and then use Salesforce Connect to consume and display the External Object alongside with the Caseobject.
  • D. Use an ETL tool with a Batch Data Synchronization pattern to migrate historical data into Salesforce and into a custom object (historical data) related to Case object.

正解：C


質問 # 72
Northern Trail Outfitters (NTO) leverages Sales Cloud for tracking and managing leads, accounts, contacts, and opportunities- Orders and order fulfillment is taken care of by an Order Management System (OMS) in the back-office. When an opportunity has changed it's status to "Closed/Won" and there are products attached, the details should be passed to the OMS for fulfillment operations.
The callout from Salesforce to the OMS should be synchronous.
What should an Integration Architect do to satisfy these requirements?

  • A. Build a Lightning Component that makes a synchronous Apex REST callout to the Order ManagementSystem when a button is clicked.
  • B. Write a trigger that invokes an Apex proxy class to make a REST callout to the Order Management System.
  • C. Use Process Builder to call an Apex proxy class to make a REST callout to theOrder Management System.
  • D. Develop a batch Apex job that aggregates Closed Opportunities and makes a REST callout to the Order Management System hourly.

正解：B

解説：
Explanation
A trigger is a programmatic way of executing some logic when a record is inserted, updated, deleted, or undeleted in Salesforce. A trigger can invoke an Apex class that contains the code to perform a REST callout to an external system. A REST callout is a way of sending an HTTP request to a service endpoint and receiving a response. A REST callout can be synchronous or asynchronous, depending on whether the Apex code waits for the response before continuing the execution. A synchronous callout is suitable for scenarios where the response is needed immediately, such as order fulfillment1.
An Apex proxy class is a class that is generated from a WSDL (Web Service Description Language) document of an external SOAP web service. An Apex proxy class can be used to make a SOAP callout to the external web service, but not a REST callout. A SOAP callout is another way of sending an HTTP request to a service endpoint and receiving a response, but it uses a different format and protocol than REST2.
Process Builder is a declarative tool that allows you to automate business processes by defining criteria and actions. Process Builder can invoke an Apex class that implements the Process.Plugin interface, which allows you to extend the functionality of Process Builder with custom logic. However, Process Builder does not support synchronous callouts, because it runs in the background and does not wait for the response from the external system. Process Builder only supports asynchronous callouts, which are executed after the transaction is committed3.
Batch Apex is a way of processing large volumes of data asynchronously by breaking them into smaller batches of records. Batch Apex can be used to perform complex or long-running operations on data, such as data cleansing, archiving, or integration. Batch Apex can make callouts to external systems by implementing the Database.AllowsCallouts interface in the batch class. However, Batch Apex is not suitable for scenarios where the callout needs to be synchronous, because it runs in the background and does not wait for the response from the external system. Batch Apex also has some limitations, such as the maximum number of batches in the queue, the maximum number of records per batch, and the maximum number of callouts per batch4.
A Lightning Component is a reusable unit of user interface that can be used to build modern web apps with Salesforce. A Lightning Component can make a callout to an external system by using JavaScript code or by invoking an Apex controller class that contains the logic for the callout. A Lightning Component can make a synchronous or asynchronous callout, depending on whether the JavaScript code or Apex code waits for the response before continuing the execution. However, a Lightning Component is not a good choice for scenarios where the callout needs to be triggered by a record change, such as when an opportunity is closed/won. A Lightning Component requires user interaction, such as clicking a button or loading a page, to initiate the callout5.
Therefore, the correct answer is A, because writing a trigger that invokes an Apex class to make a REST callout to the Order Management System is the only option that satisfies the requirements of making a synchronous callout when an opportunity is closed/won.
References: 1: Callouts From Triggers | Apex Developer Guide | Salesforce Developers 2: Generate an Apex Class from a WSDL | Apex Developer Guide | Salesforce Developers 3: Invoking Apex from Process Builder | Process Automation Developer Guide | Salesforce Developers 4: Using Batch Apex | Apex Developer Guide | Salesforce Developers 5: Make HTTP Requests from JavaScript Code in Lightning Components | Lightning Aura Components Developer Guide | Salesforce Developers


質問 # 73
A company wants to standardize exception tracking, handling, and analytics. Given the following actions:
1. Build a company wide logging service hosted on a middleware platform
2. Create case object records for exceptions based thresholds
3. Change all their Apex Loggers to publish Application Exceptions as custom Platform Events.
Which two specifications should the integration architect include in the logging service architecture?
Choose 2 answers

  • A. Create Salesforce Cases conditionally using automatic Case creation rules.
  • B. Subscribe to the Application Exceptions using the Salesforce Streaming API.
  • C. Create Salesforce Cases using the Salesforce REST, SOAP or Bulk API.
  • D. Receive Application Events through Change Data Capture (CDC).

正解：A、C


質問 # 74
Northern Trail Outfitters is creating a distributable Salesforce package for other Salesforce orgs within the company. The package needs to call into a custor ApexREST endpoint in the central org. The security team wants to ensure a specific integration account is used in the central org that they will authorize after installation of the package.
Which three items should an architect recommend to secure the integration in the package?
Choose 3 answers

  • A. Use an encrypted field to store the password that the security team enters and use password management for external orgs and set the encryption method to TLS 1.2.
  • B. Create an Auth provider in the package and set the consumer key and consumer secret of the connected app in the central org.
  • C. Use the Auth Provider configured and select the identity type as Named Principal with OAuth 2.0 as the protocol and Select Start Authentication Flow on Save.
  • D. Create a connected app in the central org and add the callback URL of each org the package is installed in to redirect to after successful authentication.
  • E. Contact Salesforce support and create a case to temporarily enable API access for managed packages.

正解：B、C、D

解説：
Explanation
Answer A is valid because creating an Auth provider in the package and setting the consumer key and consumer secret of the connected app in the central org can allow the package to authenticate with the central org using OAuth 2.0. An Auth provider is a configuration that specifies how to connect to an external service that uses a specific identity protocol. A connected app is an application that can access Salesforce resources using APIs and standard protocols. The consumer key and consumer secret are credentials that identify the connected app to Salesforce.
Answer C is valid because creating a connected app in the central org and adding the callback URL of each org the package is installed in to redirect to after successful authentication can enable the package to obtain an access token from the central org using OAuth 2.0. The callback URL is a parameter that specifies where the user should be redirected after granting or denying permission to access Salesforce resources. The access token is a credential that can be used to invoke the custom Apex REST endpoint in the central org.
Answer E is valid because using the Auth Provider configured and selecting the identity type as Named Principal with OAuth 2.0 as the protocol and selecting Start Authentication Flow on Save can initiate the authentication flow when installing the package. The identity type determines how the package accesses Salesforce resources on behalf of users or an application. The Named Principal identity type means that the package uses a single credential, such as a username and password or an access token, to access Salesforce resources for all users. The Start Authentication Flow on Save option means that the package will prompt the user to enter the credential when saving the Auth Provider configuration.
Answer B is not valid because contacting Salesforce support and creating a case to temporarily enable API access for managed packages is not a necessary or recommended action. API access for managed packages is enabled by default and does not require any special permission or configuration from Salesforce support. Moreover, this action does not address the security requirement of using a specific integration account in the central org that will be authorized after installation of the package.
Answer D is not valid because using an encrypted field to store the password that the security team enters and using password management for external orgs and setting the encryption method to TLS 1.2 is not a secure or reliable solution. An encrypted field is a custom field that encrypts sensitive data at rest and masks it on the user interface. However, this field does not prevent unauthorized access or leakage of data, as it can be decrypted by users who have the View Encrypted Data permission or by Apex code that runs in system mode. Moreover, this field does not support encryption methods such as TLS 1.2, which are used for securing data in transit, not at rest.
References: Auth Provider: Connected Apps : OAuth 2.0 Web Server Authentication Flow : Named Credentials as Callout Endpoints : API Access in Packages : Encrypted Fields : Encryption Methods Available in Salesforce
11of30


質問 # 75
An Integration Architect has built a solution using REST API, updating Account, Contact, and other related information. The data volumes have increased, resulting in higher API calls consumed, and some days the limits are exceeded. A decision was made to decrease the number of API calls using bulk updates. The customer prefers to continue using REST API to avoid architecture changes.
Which REST API composite resources should the Integration Architect use to allow up to 200 records in one API call?

  • A. Batch
  • B. SObject Tree
  • C. SObject Collections
  • D. Composite

正解：C

解説：
Explanation
SObject Collections is a REST API composite resource that allows you to create, update, or delete up to 200 records in one API call. You can specify the type of operation (create, update, or delete) for each record in the request body, and the response body will contain the status and IDs of each record. SObject Collections is suitable for bulk operations on records that are not related to each other1.
SObject Tree is another REST API composite resource that allows you to create up to 200 records in one API call. However, unlike SObject Collections, SObject Tree requires the records to be related to each other in a hierarchy. You can specify the parent and child records in a JSON tree structure, and the response body will contain the reference IDs and URLs of each record. SObject Tree is suitable for creating nested data in one request2.
Batch is a REST API composite resource that allows you to combine up to 25 requests in one API call. Each request can be a different type of operation (query, create, update, delete, etc.) on different objects. The response body will contain the status and results of each request. Batch is suitable for grouping multiple requests into one transaction3.
Composite is a REST API composite resource that allows you to execute a series of REST API requests in one API call. You can use the output of one request as the input of another request using a reference ID. The response body will contain the status and results of each request. Composite is suitable for chaining requests that depend on each other.
Therefore, the correct answer is A, because SObject Collections is the only REST API composite resource that allows bulk updates on records that are not related to each other.
References: 1: SObject Collections | REST API Developer Guide | Salesforce Developers 2: SObject Tree | REST API Developer Guide | Salesforce Developers 3: Batch | REST API Developer Guide | Salesforce Developers : [Composite | REST API Developer Guide | Salesforce Developers]


質問 # 76
Northern Trail Outfitters requires an integration to be set up between one of their Salesforce orgs and an external data source us Salesforce Connect. The external data source supports Open Data Protocol.
Which three configurations should an Integration Architect recommend be implemented in order to secure requests coming from Salesforce?
Choose 3 answers

  • A. Configure Special Compatibility for OData connection,
  • B. Configure CSRF Protection on External Data Source.
  • C. Configure a Certificate for OData connection.
  • D. Configure CSRF Protection for OData connection.
  • E. Configure Identity Type for OData connection.

正解：C、D、E

解説：
https://help.salesforce.com/articleView?id=apex_add_external_data_source.htm&type=5


質問 # 77
An architect recommended using Apex code to make callouts to an external system to process insurance quote.
What should the integration architect consider to make sure this is the right option for the integration?

  • A. The limit on long-running requests (total execution time).
  • B. The limit of pending operations in the same transaction.
  • C. The maximum callouts in a single Apex transaction.
  • D. The maximum number of parallel Apex callouts in a single continuation.

正解：C

解説：
Explanation
The maximum callouts in a single Apex transaction is one of the factors that should be considered when choosing Apex code to make callouts to an external system. The limit is 100 callouts per transaction, and if this limit is exceeded, a LimitException is thrown. Therefore, the integration architect should evaluate the expected volume and frequency of the callouts and design the solution accordingly2 References: Salesforce API Limits and Usage


質問 # 78
Northern Trail Outfitters (NTO) use Salesforce to track leads, opportunities, and to capture order details. However, Salesforce isn't the system that holds or processes orders. After the order details are captured in Salesforce, an order must be created in the remote system, which manages the orders lifecylce. The Integration Architect for the project is recommending a remote system that will subscribe to the platform event defined in Salesforce.
Which integration pattern should be used for this business use case?

  • A. Batch Data Synchronization
  • B. Fire and Forget
  • C. Remote Call In
  • D. Request and Reply

正解：B


質問 # 79
......

Integration-Architect認証試験問題集の解答を提供しています：https://drive.google.com/open?id=14wykAlWm32b562mGKqEFQgQH_sojBF-G

更新されたIntegration-Architect試験練習テスト問題：https://www.passtest.jp/Salesforce/Integration-Architect-shiken.html

関するブログ

もっと
Integration-Architect 無料問題集