[2023年12月14日]Identity-and-Access-Management-Designer試験問題集でSalesforce練習テスト問題
最新でリアルなIdentity-and-Access-Management-Designer試験問題集解答
質問 # 120
A financial enterprise is planning to set up a user authentication mechanism to login to the Salesforce system. Due to regulatory requirements, the CIO of the company wants user administration, including passwords and authentication requests, to be managed by an external system that is only accessible via a SOAP webservice.
Which authentication mechanism should an identity architect recommend to meet the requirements?
- A. Identity Connect
- B. OAuth Web-Server Flow
- C. Delegated Authentication
- D. Just-in-Time Provisioning
正解：C
質問 # 121
Universal Containers (UC) wants to build a few applications that leverage the Salesforce REST API. UC has asked its Architect to describe how the API calls will be authenticated to a specific user. Which two mechanisms can the Architect provide? Choose 2 Answers
- A. Session ID
- B. Access Token
- C. Refresh Token
- D. Authentication Token
正解：B、C
質問 # 122
Universal Containers (UC) would like to enable self-registration for their Salesforce Partner Community Users. UC wants to capture some custom data elements from the partner user, and based on these data elements, wants to assign the appropriate Profile and Account values.
Which two actions should the Architect recommend to UC1
Choose 2 answers
- A. Configure Registration for Communities to use a custom Visualforce Page.
- B. Configure Registration for Communities to use a custom Apex Controller.
- C. Modify the CommunitiesSelfRegController to assign the Profile and Account.
- D. Modify the SelfRegistration trigger to assign Profile and Account.
正解：A、C
質問 # 123
Universal Containers (UC) has implemented a multi-org architecture in their company. Many users have licenses across multiple orgs, and they are complaining about remembering which org and credentials are tied to which business process.
Which two recommendations should the Architect make to address the complaints? (Choose two.)
- A. Implement IdP-Initiated Single Sign-on flows to allow deep linking.
- B. Activate My Domain to brand each org to the specific business use case.
- C. Implement Delegated Authentication from each org to the LDAP provider.
- D. Implement SP-Initiated Single Sign-on flows to allow deep linking.
正解：B、D
質問 # 124
Universal containers (UC) is setting up their customer Community self-registration process. They are uncomfortable with the idea of assigning new users to a default account record. What will happen when customers self-register in the community?
- A. The self-registration process will produce an error to the user.
- B. The self-registration page will create a new account record.
- C. The self-registration page will ask user to select an account.
- D. The self-registration process will create a person Account record.
正解：A
質問 # 125
Universal Containers (UC) implemented SSO to a third-party system for their Salesforce users to access the App Launcher. UC enabled "User Provisioning" on the Connected App so that changes to user accounts can be synched between Salesforce and the third party system. However, UC quickly notices that changes to user roles in Salesforce are not getting synched to the third-party system. What is the most likely reason for this behaviour?
- A. Salesforce roles have more than three levels in the role hierarchy.
- B. User Provisioning for Connected Apps does not support role sync.
- C. The Approval queue for User Provisioning Requests is unmonitored.
- D. Required operation(s) was not mapped in User Provisioning Settings.
正解：B
質問 # 126
Universal Containers is implementing Salesforce Identity to broker authentication from its enterprise single sign-on (SSO) solution through Salesforce to third party applications using SAML.
What rote does Salesforce Identity play in its relationship with the enterprise SSO system?
- A. Identity Provider (IdP)
- B. Service Provider (SP)
- C. Resource Server
- D. Client Application
正解：B
質問 # 127
Northern Trail Outfitters (NTO) utilizes a third-party cloud solution for an employee portal. NTO also owns Salesforce Service Cloud and would like employees to be able to login to Salesforce with their third-party portal credentials for a seamless expenence. The third-party employee portal only supports OAuth.
What should an identity architect recommend to enable single sign-on (SSO) between the portal and Salesforce?
- A. Configure Salesforce for Delegated Authentication.
- B. Configure SSO to use the third party portal as an identity provider.
- C. Create a custom external authentication provider.
- D. Add the third-party portal as a connected app.
正解：B
質問 # 128
Universal containers (UC) has implemented a multi-org strategy and would like to centralize the management of their salesforce user profiles. What should the architect recommend to allow salesforce profiles to be managed from a central system of record?
- A. Implement Delegated Authentication that will update the user profiles as necessary.
- B. Implement an Oauthjwt flow to pass the profile credentials between systems.
- C. Create an apex scheduled job in one org that will synchronize the other orgs profile.
- D. Implement jit provisioning on the SAML IDP that will pass the profile id in each assertion.
正解：D
質問 # 129
How should an Architect force users to authenticate with Two-factor Authentication (2FA) for Salesforce only when not connected to an internal company network?
- A. Use an Apex Trigger on the UserLogin object to detect the user's IP address and prompt for 2FA if needed.
- B. Apply the "Two-factor Authentication for User Interface Logins" permission and Login IP Ranges for all Profiles.
- C. Use Custom Login Flows with Apex to detect the user's IP address and prompt for 2FA if needed.
- D. Add the list of company's network IP addresses to the Login Range list under 2FA Setup.
正解：C
質問 # 130
Universal Containers built a custom mobile app for their field reps to create orders in Salesforce. OAuth is used for authenticating mobile users. The app is built in such a way that when a user session expires after Initial login, a new access token is obtained automatically without forcing the user to log in again. While that improved the field reps' productivity, UC realized that they need a "logout" feature.
What should the logout function perform in this scenario, where user sessions are refreshed automatically?
- A. Clear out all the tokens to stop auto session refresh.
- B. Invoke the revocation URL and pass the refresh token.
- C. Clear out the client Id to stop auto session refresh.
- D. Invoke the revocation URL and pass the access token.
正解：B
質問 # 131
A public sector agency is setting up an identity solution for its citizens using a Community built on Experience Cloud and requires the new user registration functionality to capture first name, last name, and phone number. The phone number will be used for identity verification.
Which feature should an identity architect recommend to meet the requirements?
- A. Use an external Identity Provider
- B. Use Login Discovery
- C. Create a custom Lightning Web Component
- D. Integrate with social websites (Facebook, Linkedin. Twitter)
正解：B
質問 # 132
Which three are features of federated Single sign-on solutions? Choose 3 Answers
- A. It federates credentials control to authorized applications.
- B. It solves all identity and access management problems.
- C. It establishes trust between Identity Store and Service Provider.
- D. It enables quick and easy provisioning and deactivating of users.
- E. It improves affiliated applications adoption rates.
正解：B、D、E
質問 # 133
Universal Containers (UC) wants to implement SAML SSO for their internal of Salesforce users using a third-party IdP.
After some evaluation, UC decides NOT to 65 set up My Domain for their Salesforce org. How does that decision impact their SSO implementation?
- A. Neither SP- nor IdP-initiated SSO will work.
- B. SP-initiated SSO will NOT work
- C. Either SP- or IdP-initiated SSO will work.
- D. IdP-initiated SSO will NOT work.
正解：A
質問 # 134
Universal containers (UC) has implemented SAML SSO to enable seamless access across multiple applications. UC has regional salesforce orgs and wants it's users to be able to access them from their main Salesforce org seamless. Which action should an architect recommend?
- A. Configure the main salesforce org as an Authentication provider.
- B. Configure the main Salesforce org as a service provider.
- C. Configure the regional salesforce orgs as Identity Providers.
- D. Configure the main salesforce org as the Identity provider.
正解：D
質問 # 135
Universal Containers (UC) has a Customer Community that uses Facebook for Authentication. UC would like to ensure that Changes in the Facebook profile are reflected on the appropriate Customer Community user: How can this requirement be met?
- A. Use information in the signed Request that is received from facebook.
- B. Use the updateUser method on the registration Handler Class.
- C. Use SAML Just-In-Time Provisioning between Facebook and Salesforce.
- D. Develop a scheduled job that calls out to Facebook on a nightly basis.
正解：B
質問 # 136
Universal Containers (UC) has built a custom token-based Two-factor authentication (2FA) system for their existing on-premise applications. They are now implementing Salesforce and would like to enable a Two-factor login process for it, as well. What is the recommended solution as Architect should consider?
- A. Replace the custom 2FA system with Salesforce 2FA for on-premise applications and Salesforce.
- B. Replace the custom 2FA system with an AppExchange App that supports on premise application and salesforce.
- C. Use Custom Login Flows to connect to the existing custom 2FA system for use in Salesforce.
- D. Use the custom 2FA system for on-premise applications and native 2FA for Salesforce.
正解：A
質問 # 137
Universal containers wants to set up SSO for a selected group of users to access external applications from salesforce through App launcher. Which three steps must be completed in salesforce to accomplish the goal?
- A. Create named credentials for each external system.
- B. Complete single Sign-on settings in security controls.
- C. Associate user profiles with the connected Apps.
- D. Complete my domain and Identity provider setup.
- E. Create connected apps for the external applications.
正解：C、D、E
質問 # 138
Universal Containers (UC) uses an internal company portal for their employees to collaborate. UC decides to use Salesforce Ideas and provide the ability for employees to post ideas from the company portal. They use SAML-based SSO to get into the Company portal and would like to leverage it to access Salesforce. Most of the users don't exist in Salesforce and they would like the user records created in Salesforce Communities the first time they try to access Salesforce.
What recommendation should an Architect make to meet this requirement?
- A. Use Identity Connect to sync users.
- B. Use On-the-Fly provisioning.
- C. Use Salesforce APIs to create users on the fly.
- D. Use Just-in-Time provisioning.
正解：D
質問 # 139
universal container plans to develop a custom mobile app for the sales team that will use salesforce for authentication and access management. The mobile app access needs to be restricted to only the sales team.
What would be the recommended solution to grant mobile app access to sales users?
- A. Use a custom attribute on the user object to control access to the mobile app
- B. Add a new identity provider to authenticate and authorize mobile users.
- C. Use the permission set license to assign the mobile app permission to sales users
- D. Use connected apps Oauth policies to restrict mobile app access to authorized users.
正解：D
質問 # 140
......
Identity-and-Access-Management-Designer認証試験問題集解答を提供しています：https://drive.google.com/open?id=1RSLDqHAmFTId_sAHssN4G_wMq2ESVhW-
あなたを簡単に合格させるIdentity-and-Access-Management-Designer試験正確なPDF問題：https://www.passtest.jp/Salesforce/Identity-and-Access-Management-Designer-shiken.html