Salesforce-Certified-Identity-and-Access-Management-Designer : Certified Identity and Access Management Designer Exam

Salesforce-Certified-Identity-and-Access-Management-Designer Dumps
Salesforce-Certified-Identity-and-Access-Management-Designer Braindumps
Salesforce-Certified-Identity-and-Access-Management-Designer Real Questions
Salesforce-Certified-Identity-and-Access-Management-Designer Practice Test
Salesforce-Certified-Identity-and-Access-Management-Designer Actual Questions


Salesforce
Salesforce-Certified-Identity-and-Access-Management-Designer
Certified Identity and Access Management Designer
https://killexams.com/pass4sure/exam-detail/Salesforce-Certified-Identity-and-Access-Management-Designer
Question: 62
Universal Containers (UC) implemented SSO to a third-party system for their Salesforce users to access the App
Launcher. UC enabled “User Provisioning” on the Connected App so that changes to user accounts can be synched
between Salesforce and the third party system. However, UC quickly notices that changes to user roles in Salesforce
are not getting synched to the third-party system .
What is the most likely reason for this behaviour?
A. User Provisioning for Connected Apps does not support role sync.
B. Required operation(s) was not mapped in User Provisioning Settings.
C. The Approval queue for User Provisioning Requests is unmonitored.
D. Salesforce roles have more than three levels in the role hierarchy.
Answer: A
Question: 63
An architect needs to set up a Facebook Authentication provider as login option for a salesforce customer Community .
What portion of the authentication provider setup associates a Facebook user with a salesforce user?
A. Consumer key and consumer secret
B. Federation ID
C. User info endpoint URL
D. Apex registration handler
Answer: D
Question: 64
Universal Containers wants to implement Single Sign-on for a Salesforce org using an external Identity Provider and
corporate identity store.
What type of authentication flow is required to support deep linking?
A. Web Server OAuth SSO flow
B. Service-Provider-Initiated SSO
C. Identity-Provider-initiated SSO
D. StartURL on Identity Provider
Answer: B
Question: 65
Universal containers (UC) has implemented SAML SSO to enable seamless access across multiple applications. UC
has regional salesforce orgs and wants it’s users to be able to access them from their main Salesforce org seamless .
Which action should an architect recommend?
A. Configure the main salesforce org as an Authentication provider.
B. Configure the main salesforce org as the Identity provider.
C. Configure the regional salesforce orgs as Identity Providers.
D. Configure the main Salesforce org as a service provider.
Answer: B
Question: 66
Universal Containers (UC) is setting up delegated authentication to allow employees to log in using their corporate
credentials. UC’s security team is concerned about the risks of exposing the corporate login service on the internet and
has asked that a reliable trust mechanism be put in place between the login service and Salesforce.
What mechanism should an Architect put in place to enable a trusted connection between the login service and
Salesforce?
A. Require the use of Salesforce security tokens on passwords.
B. Enforce mutual authentication between systems using SS
D. Include Client Id and Client Secret in the login header callout.
E. Set up a proxy service for the login service in the DM
Answer: A
Question: 67
Universal containers (UC) uses a legacy Employee portal for their employees to collaborate and post their ideas. UC
decides to use salesforce ideas for voting and better tracking purposes. To avoid provisioning users on Salesforce, UC
decides to push ideas posted on the Employee portal to salesforce through API. UC decides to use an API user using
Oauth Username – password flow for the connection .
How can the connection to salesforce be restricted only to the employee portal server?
A. Add the Employee portals IP address to the Trusted IP range for the connected App
B. Use a digital certificate signed by the employee portal Server.
C. Add the employee portals IP address to the login IP range on the user profile.
D. Use a dedicated profile for the user the Employee portal uses.
Answer: A
Question: 68
Which two security risks can be mitigated by enabling Two-Factor Authentication (2FA) in Salesforce? Choose 2
answers
A. Users leaving laptops unattended and not logging out of Salesforce.
B. Users accessing Salesforce from a public Wi-Fi access point.
C. Users choosing passwords that are the same as their Facebook password.
D. Users creating simple-to-guess password reset questions.
Answer: B,C
Question: 69
Universal Containers (UC) has a custom, internal-only, mobile billing application for users who are commonly out of
the office. The app is configured as a connected App in Salesforce. Due to the nature of this app, UC would like to
take the appropriate measures to properly secure access to the app .
Which two are recommendations to make the UC? Choose 2 answers
A. Disallow the use of Single Sign-on for any users of the mobile app.
B. Require High Assurance sessions in order to use the Connected App.
C. Set Login IP Ranges to the internal network for all of the app users Profiles.
D. Use Google Authenticator as an additional part of the login process
Answer: B,D
Question: 70
Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the OAuth 2.0
user-agent flow (this flow uses the OAuth 2.0 implicit grant type).
Which three OAuth concepts apply to this flow? Choose 3 answers
A. Client ID
B. Refresh Token
C. Authorization Code
D. Verification Code
E. Scopes
Answer: A,B,E
Question: 71
Universal containers (UC) is setting up Delegated Authentication to allow employees to log in using their corporate
credentials. UC’s security team is concerned about the risk of exposing the corporate login service on the Internet and
has asked that a reliable trust mechanism be put in place between the login service and salesforce .
What mechanism should an architect put in place to enable a trusted connection between the login services and
salesforce?
A. Include client ID and client secret in the login header callout.
B. Set up a proxy server for the login service in the DM
D. Require the use of Salesforce security Tokens on password.
E. Enforce mutual Authentication between systems using SS
Answer: C
Question: 72
Universal Containers (UC) is building an integration between Salesforce and a legacy web applications using the
canvas framework. The security for UC has determined that a signed request from Salesforce is not an adequate
authentication solution for the Third-Party app .
Which two options should the Architect consider for authenticating the third-party app using the canvas framework?
Choose 2 Answers
A. Utilize the SAML Single Sign-on flow to allow the third-party to authenticate itself against UC’s Id
C. Utilize Authorization Providers to allow the third-party appliction to authenticate itself against Salesforce as the Idp.
D. Utilize Canvas OAuth flow to allow the third-party appliction to authenticate itself against Salesforce as the Idp.
E. Create a registration handler Apex class to allow the third-party appliction to authenticate itself against Salesforce as
the Idp.
Answer: A,C
Question: 73
Which two roles of the systems are involved in an environment where salesforce users are enabled to access Google
Apps from within salesforce through App launcher and connected App set up? Choose 2 answers
A. Google is the identity provider
B. Salesforce is the identity provider
C. Google is the service provider
D. Salesforce is the service provider
Answer: D
Question: 74
Which two roles of the systems are involved in an environment where salesforce users are enabled to access Google
Apps from within salesforce through App launcher and connected App set up? Choose 2 answers
A. Google is the identity provider
B. Salesforce is the identity provider
C. Google is the service provider
D. Salesforce is the service provider
Answer: D
Question: 75
How should an Architect force users to authenticate with Two-factor Authentication (2FA) for Salesforce only when
not connected to an internal company network?
A. Use Custom Login Flows with Apex to detect the user’s IP address and prompt for 2FA if needed.
B. Add the list of company’s network IP addresses to the Login Range list under 2FA Setup.
C. Use an Apex Trigger on the User Login object to detect the user’s IP address and prompt for 2FA if needed.
D. Apply the "Two-factor Authentication for User Interface Logins" permission and Login IP Ranges for all Profiles.
Answer: A

User: Stasya***** Passing the salesforce-certified-identity-and-access-management-designer exam was challenging for me until I was introduced to Killexams.com question and answer series. Some of the topics were difficult, and I attempted many books but failed due to the lack of time. Fortunately, Killexams.com study material helped me understand the subjects and complete my preparation in only ten days. Thank you, Killexams.com, for the excellent guidance.

User: Fred***** I initially began preparing for the challenging salesforce-certified-identity-and-access-management-designer exam using extensive study books. However, I failed to crack the difficult topics and started to panic. I was about to drop the exam when someone showed me the practice test via Killexams. It was easy to understand and memorize all the content in a brief time, which eliminated all my apprehensions. I was able to answer 67 questions in only 76 minutes and received a high score of 85. I am indebted to Killexams.com for making my day.

User: Olenka***** The questions and answers provided by Killexams.com were extremely useful for professionals like me, and I am grateful for their platform. The revision exercise tests helped me secure an 88% score on the certified identity and access management designer exam, and I suggest that Killexams.com should broaden their reach by creating an Android app for people like me who want to practice while on the go.

User: Marina***** Although I did not initially plan to use practice tests for my IT certification test, I found myself under immense pressure for the Salesforce salesforce-certified-identity-and-access-management-designer exam. I ordered the bundle from killexams.com and was pleasantly surprised by the quality of the materials. They were definitely worth the investment and I believe they will become even more valuable in the future. With just a few days of preparation using Killexams, I was able to pass the exam with 97% marks, despite also having other work commitments that proved beneficial.

User: Lucas***** With the help of killexams.com, I achieved higher marks in my SALESFORCE-CERTIFIED-IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER certification exam using surprisingly low-priced products. I used the SALESFORCE-CERTIFIED-IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER exam engine to master difficult concepts, and the SALESFORCE-CERTIFIED-IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER exam brain dump to obtain high grades in the certification. These products were designed according to my needs and helped me prepare in just fifteen days. I am grateful for these realistic products and want to thank killexams.com for their remarkable offerings.

---