2026年においても、Salesforceが実施するSalesforce Certified Identity and Access Management ArchitectはIT業界で高く評価される公式認定試験のひとつです。PassTestではこのIdentity-and-Access-Management-Architect試験に特化した練習問題112問を収録し、認定取得に向けた学習をサポートします。

Salesforce Identity-and-Access-Management-Architect 試験概要:

Salesforce Identity-and-Access-Management-Architect 試験シラバストピック:

Salesforce Identity-and-Access-Management-Architect 試験 Q&A まとめ

Salesforce Certified Identity and Access Management Architect 認定 Identity-and-Access-Management-Architect 試験問題：

問題 #1

A Salesforce customer is implementing Sales Cloud and a custom pricing application for its call center agents.
An Enterprise single sign-on solution is used to authenticate and sign-in users to all applications. The customer has the following requirements:
1. The development team has decided to use a Canvas app to expose the pricing application to agents.
2. Agents should be able to access the Canvas app without needing to log in to the pricing application.
Which two options should the identity architect consider to provide support for the Canvas app to initiate login for users?
Choose 2 answers

A. Configure the Canvas app as a connected app and set Admin-approved users as pre authorized.
B. Enable SAML in the connected app and Security Assertion Markup Language (SAML) Initiation Method as Service Provider Initiated.
C. Select " Enable as a Canvas Personal App " in the connected app settings.
D. Enable OAuth settings in the connected app with required OAuth scopes for the pricing application.

問題 #2

Universal Containers (UC) is planning to add Wi-Fi enabled GPS tracking devices to its shipping containers so that the GPS coordinates data can be sent from the tracking device to its Salesforce production org via a custom API. The GPS devices have no direct user input or output capabilities.
Which OAuth flow should the identity architect recommend to meet the requirement?

A. OAuth 2.0 Username-Password Flow for Special Scenarios
B. OAuth 2.0 Web Server Flow for Web App Integration
C. OAuth 2.0 Asset Token Flow for Securing Connected Devices
D. OAuth 2.0 JWT Bearer Flow for Server-to-Server Integration

問題 #3

A client is planning to rollout multi-factor authentication (MFA) to its internal employees and wants to understand which authentication and verification methods meet the Salesforce criteria for secure authentication.
Which three functions meet the Salesforce criteria for secure MFA?
Choose 3 answers

A. Username & password = Email Verification Code
B. Lightning Login
C. Username and password = SMS passwords
D. Third-party single sign-on with Mobile Authenticator app
E. Username and password = security key

問題 #4

A security architect is rolling out a new multi-factor authentication (MFA) mandate, where all employees must go through a secure authentication process before accessing Salesforce. There are multiple Identity Providers (IdP) in place and the architect is considering how the " Authentication Method Reference " " field (AMR) in the Login History can help.
Which two considerations should the architect keep in mind?
Choose 2 answers

A. AMR field shows the authentication methods used at IdP.
B. Both OIDC and Security Assertion Markup Language (SAML) are supported but AMR must be implemented at IdP.
C. Dependency on what is supported by OpenID Connect (OIDC) implementation at IdP.
D. High-assurance sessions must be configured under Session Security Level Policies.

問題 #5

Universal Containers allows employees to use a mobile device to access Salesforce for daily operations using a hybrid mobile app. This app uses Mobile software development kits (SDK), leverages refresh token to regenerate access token when required and is distributed as a private app.
The chief security officer is rolling out an org wide compliance policy to enforce re verification of devices if an employee has not logged in from that device in the last week.
Which connected app setting should be leveraged to comply with this policy change?

A. Permitted User - Ask admins to maintain a list of users who are permitted based on last login date.
B. Refresh Token Policy - Expire the refresh token if it has not been used for 7 days.
C. Scope - Deny refresh_token scope for this connected app.
D. Session Policy - Set timeout value of the connected app to 7 days.

解説：