Identity-and-Access-Management-Designer Dumps for Pass Guaranteed - Pass Identity-and-Access-Management-Designer Exam 2023
Identity-and-Access-Management-Designer Exam Dumps - Try Best Identity-and-Access-Management-Designer Exam Questions from Training Expert Actual4dump
The Salesforce Identity-and-Access-Management-Designer certification exam is designed for professionals who specialize in designing, implementing, and managing identity and access management solutions within the Salesforce platform. This certification is ideal for professionals who have extensive experience in identity and access management and who want to demonstrate their knowledge and expertise in this area.
The Salesforce Identity-and-Access-Management-Designer Certification Exam is highly sought after by organizations that rely on Salesforce for their business operations. This certification validates the expertise of professionals in designing and configuring complex security models, integrating with external identity providers, and implementing access control policies. The exam covers a wide range of topics, including authentication and authorization methods, identity federation, single sign-on, and data access governance. Passing this certification exam demonstrates a high level of expertise and proficiency in Salesforce's security features and can provide significant career growth opportunities for professionals in the Salesforce ecosystem.
Earning the Salesforce Identity-and-Access-Management-Designer Certification can help professionals stand out in the job market and demonstrate their expertise in IAM solutions within the Salesforce ecosystem. It can also help organizations ensure that their Salesforce environments are secure and meet industry standards for data protection and privacy.
NEW QUESTION # 38
Universal Containers (UC) has a Customer Community that uses Facebook for Authentication. UC would like to ensure that Changes in the Facebook profile are reflected on the appropriate Customer Community user:
How can this requirement be met?
- A. Use information in the signed Request that is received from facebook.
- B. Use SAML Just-In-Time Provisioning between Facebook and Salesforce.
- C. Use the updateUser method on the registration Handler Class.
- D. Develop a scheduled job that calls out to Facebook on a nightly basis.
Answer: B
NEW QUESTION # 39
Which two are valid choices for digital certificates when setting up two-way SSL between Salesforce and an external system. Choose 2 answers
- A. Use a trusted CA-signed certificate for salesforce and a self-signed cert for the external system
- B. Use a self-signed certificate for salesforce and a self-signed cert for the external system
- C. Use a trusted CA-signed certificate for salesforce and a trusted CA-signed cert for the external system
- D. Use a self-signed certificate for salesforce and a trusted CA-signed cert for the external system
Answer: D
NEW QUESTION # 40
Which two statements are capable of Identity Connect? Choose 2 answers
- A. Automated user synchronization and de-activation.
- B. Supports both Identity-Provider-Initiated and Service-Provider-Initiated SSO.
- C. Synchronization of Salesforce Permission Set Licence Assignments.
- D. Support multiple orgs connecting to multiple Active Directory servers.
Answer: B,C
NEW QUESTION # 41
An identity architect is setting up an integration between Salesforce and a third-party system. The third-party system needs to authenticate to Salesforce and then make API calls against the REST API.
One of the requirements is that the solution needs to ensure the third party service providers connected app in Salesforce mini need for end user interaction and maximizes security.
Which OAuth flow should be used to fulfill the requirement?
- A. Username-Password Flow
- B. JWT Bearer Flow
- C. User Agent Flow
- D. Web Server Flow
Answer: B
NEW QUESTION # 42
An identity architect wants to secure Salesforce APIs using Security Assertion Markup Language (SAML). For secunty purposes, administrators will need to authorize the applications that will be consuming the APIs.
Which Salesforce OAuth authorization flow should be used?
- A. OAuth 2.0 User-Agent Flow
- B. OAuth 2-0 SAML Bearer Assertion Flow
- C. OAuth 2.0 JWT Bearer Flow
- D. SAML Assertion Flow
Answer: D
NEW QUESTION # 43
In a typical SSL setup involving a trusted party and a trusting party, what consideration should an Architect take into account when using digital certificates?
- A. Use of self-signed certificate leads to lower maintenance for trusted party because multiple self-signed certs need to be maintained.
- B. Use of self-signed certificate leads to higher maintenance for trusted party because they have to act as the trusted CA.
- C. Use of self-signed certificate leads to higher maintenance for trusting party because the cert needs to be added to their truststore.
- D. Use of self-signed certificate leads to lower maintenance for trusting party because there is no trusted CA cert to maintain.
Answer: C
NEW QUESTION # 44
Universal Containers (UC) wants to implement SAML SSO for their internal of Salesforce users using a third-party IdP. After some evaluation, UC decides NOT to SSO set up My Domain for their Salesforce org. How does that decision impact their SSO implementation?
- A. SP-initiated SSO will NOT work
- B. Either SP- or IdP-initiated SSO will work.
- C. IdP-initiated SSO will NOT work.
- D. Neither SP- nor IdP-initiated SSO will work.
Answer: D
NEW QUESTION # 45
Universal Containers (UC) uses an internal system for recruiting and would like to have the candidates' info available in Salesforce automatically when they are selected. UC decides to use OAuth to connect to Salesforce from the recruiting system and would like to do the authentication using digital certificates.
Which two OAuth flows should be considered to meet the requirement? (Choose two.)
- A. JWT Bearer Token flow
- B. Refresh Token flow
- C. SAML Bearer Assertion flow
- D. Web Server flow
Answer: A,C
NEW QUESTION # 46
Universal Containers (UC) would like to enable self-registration for their Salesforce Partner Community Users. UC wants to capture some custom data elements from the partner user, and based on these data elements, wants to assign the appropriate Profile and Account values.
Which two actions should the Architect recommend to UC1
Choose 2 answers
- A. Configure Registration for Communities to use a custom Visualforce Page.
- B. Modify the SelfRegistration trigger to assign Profile and Account.
- C. Modify the CommunitiesSelfRegController to assign the Profile and Account.
- D. Configure Registration for Communities to use a custom Apex Controller.
Answer: A,C
NEW QUESTION # 47
Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the OAuth 2.0 user-agent flow (this flow uses the OAuth 2.0 implicit grant type).
Which three OAuth concepts apply to this flow?
Choose 3 answers
- A. Refresh Token
- B. Verification Code
- C. Client ID
- D. Authorization Code
- E. Scopes
Answer: A,C,E
NEW QUESTION # 48
A third-party app provider would like to have users provisioned via a service endpoint before users access their app from Salesforce.
What should an identity architect recommend to configure the requirement with limited changes to the third-party app?
- A. Use Salesforce identity with Security Assertion Markup Language (SAML) for provisioning users.
- B. Redirect users to the third-party app for registration.
- C. Use a connected app with user provisioning flow.
- D. Create Canvas app in Salesforce for third-party app to provision users.
Answer: C
NEW QUESTION # 49
Universal Containers is implementing Salesforce Identity to broker authentication from its enterprise single sign-on (SSO) solution through Salesforce to third party applications using SAML.
What rote does Salesforce Identity play in its relationship with the enterprise SSO system?
- A. Service Provider (SP)
- B. Identity Provider (IdP)
- C. Client Application
- D. Resource Server
Answer: A
NEW QUESTION # 50
A large consumer company is planning to create a community and will requ.re login through the customers social identity. The following requirements must be met:
1. The customer should be able to login with any of their social identities, however salesforce should only have one user per customer.
2. Once the customer has been identified with a social identity, they should not be required to authonze Salesforce.
3. The customers personal details from the social sign on need to be captured when the customer logs into Salesforce using their social Identity.
3. If the customer modifies their personal details in the social site, the changes should be updated in Salesforce .
Which two options allow the Identity Architect to fulfill the requirements?
Choose 2 answers
- A. Use the custom registration handler to link social identities to Salesforce identities.
- B. Use Login Flows to call an authentication registration handler to provision the user before logging the user into the community.
- C. Redirect the user to a custom page that allows the user to select an existing social identity for login.
- D. Use authentication providers for social sign-on and use the custom registration handler to insert or update personal details.
Answer: A,D
NEW QUESTION # 51
Universal Containers (UC) is both a Salesforce and Google Apps customer. The UC IT team would like to manage the users for both systems in a single place to reduce administrative burden.
Which two recommended ways can the IT team provision users and allow Single Sign-on between Salesforce and Google Apps? (Choose two.)
- A. Use a third-party product as the Identity Provider for both Salesforce and Google Apps and manage the provisioning from there.
- B. Build a custom app running on Heroku as the Identity Provider that can sync user information between Salesforce and Google Apps.
- C. Use Identity Connect as the Identity Provider for both Salesforce and Google Apps and manage the provisioning from there.
- D. Use Salesforce as the Identity Provider and Google Apps as a Service Provider and configure User Provisioning for Connected Apps.
Answer: A,D
NEW QUESTION # 52
Universal containers (UC) has decided to use identity connect as it's identity provider. UC uses active directory(AD) and has a team that is very familiar and comfortable with managing ad groups. UC would like to use AD groups to help configure salesforce users. Which three actions can AD groups control through identity connect? Choose 3 answers
- A. Role Assignment
- B. Public Group Assignment
- C. Granting report folder access
- D. Permission sets assignment
- E. Custom permission assignment
Answer: A,B,D
NEW QUESTION # 53
Universal containers (UC) has a classified information system that it's call centre team uses only when they are working on a case with a record type of "classified". They are only allowed to access the system when they own an open "classified" case, and their access to the system is removed at all other times. They would like to implement SAML SSO with salesforce as the IDP, and automatically allow or deny the staff's access to the classified information system based on whether they currently own an open "classified" case record when they try to access the system using SSO. What is the recommended solution for automatically allowing or denying access to the classified information system based on the open "classified" case record criteria?
- A. Use a custom connected App handler using apex to dynamically allow access to the system based on whether the staff owns any open "classified" cases.
- B. Use custom SAML jit provisioning to dynamically query the user's open "classified" cases when attempting to access the classified information system
- C. Use salesforce reports to identify users that currently owns open "classified" cases and should be granted access to the classified information system.
- D. Use apex trigger on case to dynamically assign permission sets that grant access when a user is assigned with an open "classified" case, and remove it when the case is closed.
Answer: A
NEW QUESTION # 54
In an SP-Initiated SAML SSO setup where the user tries to access a resource on the Service Provider, What HTTP param should be used when submitting a SAML Request to the Idp to ensure the user is returned to the intended resourse after authentication?
- A. StartURL
- B. RedirectURL
- C. DisplayState
- D. RelayState
Answer: D
NEW QUESTION # 55
Universal Containers (UC) has an e-commerce website where customers can buy products, make payments and manage their accounts. UC decides to build a Customer Community on Salesforce and wants to allow the customers to access the community from their accounts without logging in again. UC decides to implement an SP-initiated SSO using a SAML-compliant Idp. In this scenario where Salesforce is the Service Provider, which two activities must be performed in Salesforce to make SP-initiated SSO work? Choose 2 answers
- A. Configure SAML SSO settings.
- B. Create a Connected App.
- C. Configure Delegated Authentication.
- D. Set up My Domain.
Answer: A,D
NEW QUESTION # 56
Universal Containers wants to implement Single Sign-on for a Salesforce org using an external Identity Provider and corporate identity store.
What type of authentication flow is required to support deep linking'
- A. StartURL on Identity Provider
- B. Web Server OAuth SSO flow
- C. Service-Provider-Initiated SSO
- D. Identity-Provider-initiated SSO
Answer: C
NEW QUESTION # 57
Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the OAuth 2.0 user-agent flow. Application users will authenticate using username and password. They should not be forced to approve API access in the mobile app or reauthenticate for 3 months.
Which two connected app options need to be configured to fulfill this use case?
Choose 2 answers
- A. Set Permitted Users to "All users may self-authorize".
- B. Set Permitted Users to "Admin approved users are pre-authorized".
- C. Set the Refresh Token Policy to expire refresh token after 3 months.
- D. Set the Session Timeout value to 3 months.
Answer: A,C
NEW QUESTION # 58
Universal Container's (UC) identity architect needs to recommend a license type for their new Experience Cloud site that will be used by external partners (delivery providers) for reviewing and updating their accounts, downloading files provided by UC and obtaining scheduled pickup dates from their calendar.
UC is using their Salesforce production org as the identity provider for these users and the expected number of individual users is 2.5 million with 13.5 million unique logins per month.
Which of the following license types should be used to meet the requirement?
- A. Partner Community Login License
- B. Partner Community License
- C. External Apps License
- D. Customer Community plus Login License
Answer: D
NEW QUESTION # 59
Sales users at Universal containers use salesforce for Opportunity management. Marketing uses a third-party application called Nest for Lead nurturing that is accessed using username/password. The VP of sales wants to open up access to nest for all sales uses to provide them access to lead history and would like SSO for better adoption. Salesforce is already setup for SSO and uses Delegated Authentication. Nest can accept username/Password or SAML-based Authentication. IT teams have received multiple password-related issues for nest and have decided to set up SSO access for Nest for Marketing users as well. The CIO does not want to invest in a new IDP solution and is considering using Salesforce for this purpose. Which are appropriate license type choices for sales and marketing users, giving salesforce is using Delegated Authentication?
Choose 2 answers
- A. Salesforce license for sales users and External Identity license for Marketing users
- B. Identity license for sales users and Identity connect license for Marketing users
- C. Salesforce license for sales users and Identity license for Marketing users
- D. Salesforce license for sales users and platform license for Marketing users.
Answer: A,D
NEW QUESTION # 60
......
Latest 100% Passing Guarantee - Brilliant Identity-and-Access-Management-Designer Exam Questions PDF: https://whizlabs.actual4dump.com/Salesforce/Identity-and-Access-Management-Designer-actualtests-dumps.html