Practice Identity-and-Access-Management-Designer Exam Online

Question 1

An identity architect wants to secure Salesforce APIs using Security Assertion Markup Language (SAML). For secunty purposes, administrators will need to authorize the applications that will be consuming the APIs.
Which Salesforce OAuth authorization flow should be used7

A : OAuth 2-0 SAML Bearer Assertion Flow

B : OAuth 2.0 JWT Bearer Flow

C : SAML Assertion Flow

D : OAuth 2.0 User-Agent Flow

Answer: C

Question 2

Universal Containers (UC) is building a customer community and will allow customers to authenticate using Facebook credentials. The First time the user authenticating using facebook, UC would like a customer account created automatically in their Accounting system. The accounting system has a web service accessible to Salesforce for the creation of accounts. How can the Architect meet these requirements?

A : Create a custom application on Heroku that manages the sign-on process from Facebook.

B : Use JIT Provisioning to automatically create the account in the accounting system.

C : Add an Apex callout in the registration handler of the authorization provider.

D : Use OAuth JWT flow to pass the data from Salesforce to the Accounting System.

Answer: C

Question 3

Universal containers wants to implement single Sign-on for a salesforce org using an external identity provider and corporate identity store. What type of Authentication flow is required to support deep linking?

A : Web server Oauth SSO flow.

B : Identity-provider-initiated SSO

C : Service-provider-initiated SSO

D : Start URL on identity provider

Answer: C

Question 4

Universal Containers (UC) is planning to add Wi-Fi enabled GPS tracking devices to its shipping containers so that the GPS coordinates data can be sent from the tracking device to its Salesforce production org via a custom API. The GPS devices have no direct user input or output capabilities.
Which OAuth flow should the identity architect recommend to meet the requirement?

A : OAuth 2.0 Asset Token Flow for Securing Connected Devices

B : OAuth 2.0 Username-Password Flow for Special Scenarios

C : OAuth 2.0 Web Server Flow for Web App Integration

D : OAuth 2.0 JWT Bearer Flow for Server-to-Server Integration

Answer: A

Question 5

Northern Trail Outfitters (NTO) employees use a custom on-premise helpdesk application to request, approve, notify, and track access granted to various on-premises and cloud applications, including Salesforce. Salesforce is currently used to authenticate users.
How should NTO provision Salesforce users as soon as they are approved in the helpdesk application with the approved profiles and permission sets?

A : Build an integration that performs a remote call-in to the Salesforce SOAP or REST API.

B : Use a login flow to query the helpdesk to validate user status.

C : Have the helpdesk initiate an IdP-initiated Just-m-Time provisioning Security Assertion Markup Language flow.

D : Use Salesforce Connect to integrate with the helpdesk application.

Answer: B

Name:	Salesforce Certified Identity and Access Management Designer (WI24)
Exam Code:	Identity-and-Access-Management-Designer
Certification:	Salesforce Identity and Access Management Designer
Vendor:	Salesforce
Total Questions:	235
Last Updated:	Apr 23, 2024

Salesforce Identity-and-Access-Management-Designer