Identity-and-Access-Management-Architect問題集、Salesforce実際の試験問題

質問 1

A leading fitness tracker company is getting ready to launch a customer community. The company wants its customers to login to the community and connect their fitness device to their profile. Customers should be able to obtain exercise details and fitness recommendation in the community.
Which should be used to satisfy this requirement?

A. OAuth Device Flow

B. Login Flows

C. Named Credentials

D. OAuth Asset Token flow

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 2

Universal Containers (UC) is rolling out its new Customer Identity and Access Management Solution built on top of its existing Salesforce instance. UC wants to allow customers to login using Facebook, Google, and other social sign-on providers.
How should this functionality be enabled for UC, assuming all social sign-on providers support OpenID Connect?

A. configure a single sign-on setting and a registration handler for each social sign-on provider.

B. configure an authentication provider and a registration handler for each social sign-on provider.

C. configure an authentication provider and a Auto-Time Unit handler for each social sign-on provider.

D. configure a single sign-on setting and a JTT handler for each social sign-on provider.

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 3

A client is planning to rollout multi-factor authentication (MFA) to its internal employees and wants to understand which authentication and verification methods meet the Salesforce criteria for secure authentication.
Which three functions meet the Salesforce criteria for secure MFA?
Choose 3 answers

A. Username & password = Email Verification Code

B. Lightning Login

C. Username and password = SMS passwords

D. Third-party single sign-on with Mobile Authenticator app

E. Username and password = security key

正解: B,D,E

解説: (PassTest メンバーにのみ表示されます)

質問 4

Northern Trail Outfitters is implementing a business-to-business (B2B) collaboration site using Salesforce Experience Cloud. The partners will authenticate with an existing identity provider and the solution will utilize Security Assertion Markup Language (SAML) to provide single sign-on to Salesforce. Delegated administration will be used in the Experience Cloud site to allow the partners to administer their users ' access.
How should a partner identity be provisioned in Salesforce for this solution?

A. Create a contactless user.

B. Create only a contact.

C. Create a user and a related contact.

D. Create a person account.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 5

A multinational industrial products manufacturer is planning to implement Salesforce CRM to manage their business. They have the following requirements:
1. They plan to implement Partner communities to provide access to their partner network.
2. They have operations in multiple countries and are planning to implement multiple Salesforce orgs.
3. Some of their partners do business in multiple countries and will need information from multiple Salesforce communities.
4. They would like to provide a single login for their partners.
How should an Identity Architect solution this requirement with limited custom development?

A. Create a partner login for the country of their operation and use SAML federation to provide access to other orgs.

B. Allow partners to choose the Salesforce org they need information from and use login flows to authenticate access.

C. Register partners in one org and access information from other orgs using APIs.

D. Consolidate Partner related information in a single org and provide access through Salesforce community.

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 6

Universal Containers (UC) rolling out a new Customer Identity and Access Management Solution will be built on top of their existing Salesforce instance. Several service providers have been setup and integrated with Salesforce using OpenID Connect to allow for a seamless single sign-on experience. UC has a requirement to limit users to sign on directly from the Salesforce org to the external Service provider app that accepts OpenID Connect.
Which two steps should be done on the platform to satisfy the requirement?
Choose 2 answers

A. Set each of the Connected App access settings to Admin Pre-Approved.

B. Assign the connected app to the customer community, and enable the users profile in the Community settings.

C. Use Profiles and Permission Sets to assign user access to Admin Pre-Approved Connected Apps.

D. Manage which connected apps a user has access to by assigning authentication providers to the users profile.

正解: A,C

解説: (PassTest メンバーにのみ表示されます)

質問 7

Northern Trail Outfitters (NTO) is using Experience Cloud as an Identity Provider for its application on Heroku. The application on Heroku should be able to handle two brands, Northern Trail Shoes and Northern Trail Shirts.
A user should select either of the two brands in Heroku before logging into the community. The app then performs Authorization using OAuth2.0 with the Salesforce Experience Cloud site.
NTO wants to make sure it renders login page images dynamically based on the user ' s brand preference selected in Heroku before Authorization.
What should an identity architect do to fulfill the above requirements?

A. For each brand create different communities and redirect users to the appropriate community using a custom Login controller written in Ages.

B. Authorize third-party service by sending authorizations requests to the community. Authorizes/search?authorize?coside_value.

C. Authorize third-party service by sending authorizations requests to the community. Authorizes/search?
authorize?node=value.

D. Create multiple login screens using Experience Builders and use Login Flows at runtime to route to different login screens.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 8

An identity architect is implementing a mobile-first Consumer Identity Access Management (CIAM) for external users.
User authentication is the only requirement. The users email or mobile phone number should be supported as a username.
Which two licenses are needed to meet this requirement?
Choose 2 answers

A. SMS Verification Credits

B. External Identity Licenses

C. Email Verification Credits

D. Identity Connect Licenses

正解: A,B

解説: (PassTest メンバーにのみ表示されます)

質問 9

Northern Trail Outfitters (NTO) is planning to implement a community for its customers using Salesforce Experience Cloud. Customers are not able to self-register. NTO would like to have customers set their own passwords when provided access to the community.
Which two recommendations should an identity architect make to fulfill this requirement?
Choose 2 answers

A. Allow Password reset using the API to update Experience Cloud site membership.

B. Enable Welcome emails while configuring the Experience Cloud site.

C. Use Login Flows to allow users to reset password in Experience Cloud site.

D. Add customers as contacts and add them to Experience Cloud site.

正解: B,D

解説: (PassTest メンバーにのみ表示されます)

Salesforce Certified Identity and Access Management Architect - Identity-and-Access-Management-Architect 模擬練習