Plat-Arch-203問題集、Salesforce実際の試験問題

質問 1

Universal Containers (UC) is building a customer community and will allow customers to authenticate using Facebook credentials. The First time the user authenticating using facebook, UC would like a customer account created automatically in their Accounting system. The accounting system has a web service accessible to Salesforce for the creation of accounts. How can the Architect meet these requirements?

A. Use OAuth JWT flow to pass the data from Salesforce to the Accounting System.

B. Add an Apex callout in the registration handler of the authorization provider.

C. Use JIT Provisioning to automatically create the account in the accounting system.

D. Create a custom application on Heroku that manages the sign-on process from Facebook.

正解: B

質問 2

Universal Containers (UC) wants to implement SAML SSO for their internal of Salesforce users using a third-party IdP. After some evaluation, UC decides NOT to set up My Domain for their Salesforce org. How does that decision impact their SSO implementation?

A. SP-initiated SSO will NOT work

B. Either SP- or IdP-initiated SSO will work.

C. IdP-initiated SSO will NOT work.

D. Neither SP- nor IdP-initiated SSO will work.

正解: D

質問 3

The security team at Universal containers(UC) has identified exporting reports as a high-risk action and would like to require users to be logged into salesforce with their active directory (AD) credentials when doing so. For all other uses of Salesforce, Users should be allowed to use AD credentials or salesforce credentials. What solution should be recommended to prevent exporting reports except when logged in using AD credentials while maintaining the ability to view reports when logged in with salesforce credentials?

A. Use SAML Federated Authentication with a login flow to dynamically add or remove a permission set that grants the export reports permission.

B. Use SAML Federated Authentication and block access to reports when accesses through a standard assurance session.

C. Use SAML Federated Authentication and Custom SAML jit provisioning to dynamically add or remove a permission set that grants the Export Reports permission.

D. Use SAML Federated Authentication, treat SAML sessions as high assurance, and raise the session level required for exporting reports.

正解: B

質問 4

Universal containers (UC) wants to integrate a Web application with salesforce. The UC team has implemented the Oauth web-server Authentication flow for authentication process. Which two considerations should an architect point out to UC? Choose 2 answers

A. The flow involves passing the user credentials back and forth.

B. The web server must be able to protect consumer privacy

C. The flow will not provide an Oauth refresh token back to the server.

D. The web application should be hosted on a secure server.

正解: B,D

質問 5

Universal Containers (UC) has a Customer Community that uses Facebook for of authentication. UC would like to ensure that changes in the Facebook profile are 65. reflected on the appropriate Customer Community user. How can this requirement be met?

A. Use SAML Just-In-Time Provisioning between Facebook and Salesforce.

B. Use information in the Signed Request that is received from Facebook.

C. Develop a scheduled job that calls out to Facebook on a nightly basis.

D. Use the updateUser() method on the Registration Handler class.

正解: D

質問 6

Universal Containers is implementing Salesforce Identity to broker authentication from its enterprise single sign-on (SSO) solution through Salesforce to third party applications using SAML.
What rote does Salesforce Identity play in its relationship with the enterprise SSO system?

A. Service Provider (SP)

B. Client Application

C. Resource Server

D. Identity Provider (IdP)

正解: A

質問 7

Universal containers (UC) has a mobile application that calls the salesforce REST API. In order to prevent users from having to enter their credentials everytime they use the app, UC has enabled the use of refresh Tokens as part of the salesforce connected App and updated their mobile app to take advantage of the refresh token. Even after enabling the refresh token, Users are still complaining that they have to enter their credentials once a day. What is the most likely cause of the issue?

A. The Oauth authorizations are being revoked by a nightly batch job.

B. The app is requesting too many access Tokens in a 24-hour period

C. The refresh token expiration policy is set incorrectly in salesforce

D. The users forget to check the box to remember their credentials.

正解: C

質問 8

Universal Containers (UC) has a desktop application to collect leads for marketing campaigns. UC wants to extend this application to integrate with Salesforce to create leads. Integration between the desktop application and Salesforce should be seamless. What Authorization flow should the Architect recommend?

A. Web Server Authentication Flow

B. Username and Password Flow

C. User Agent Flow

D. JWT Bearer Token Flow

正解: C

質問 9

Which two considerations should be made when implementing Delegated Authentication?
Choose 2 answers

A. It can be used to authenticate API clients and mobile apps.

B. Salesforce servers receive but do not validate a user's credentials.

C. It requires trusted IP ranges at the User Profile level.

D. Just-in-time Provisioning can be configured for new users.

E. The authentication web service can include custom attributes.

正解: A,D

質問 10

Universal Containers (UC) wants to use Salesforce for sales orders and a legacy of system for order fulfillment. The legacy system must update the status of orders in 65* Salesforce in real time as they are fulfilled. UC decides to use OAuth for connecting the legacy system to Salesforce. What OAuth flow should be considered that doesn't require storing credentials, client secret or refresh tokens?

A. Username-Password flow

B. User Agent flow

C. JWT Bearer Token flow

D. Web Server flow

正解: C

質問 11

Northern Trail Outfitters (NTO) leverages Microsoft Active Directory (AD) for management of employee usernames, passwords, permissions, and asset access. NTO also owns a third-party single sign-on (SSO) solution. The third-party party SSO solution is used for all corporate applications, including Salesforce.
NTO has asked an architect to explore Salesforce Identity Connect for automatic provisioning and deprovisiorung of users in Salesforce.
What role does identity Connect play in the outlined requirements?

A. User Management

B. Service Provider

C. Identity Provider

D. Single Sign-On

正解: A

質問 12

A company with 15,000 employees is using Salesforce and would like to take the necessary steps to highlight or curb fraudulent activity.
Which tool should be used to track login data, such as the average number of logins, who logged in more than the average number of times and who logged in during non-business hours?

Salesforce Certified Platform Identity and Access Management Architect - Plat-Arch-203 模擬練習