Identity-and-Access-Management-Architect熱門考題，Identity-and-Access-Management-Architect考古題分享

P.S. VCESoft在Google Drive上分享了免費的、最新的Identity-and-Access-Management-Architect考試題庫：https://drive.google.com/open?id=1JubVO-tn0FR6av6YnToW_XKTVCJgjteL

你已經報名參加了Identity-and-Access-Management-Architect認證考試嗎？是不是面對一大堆的復習資料和習題感到頭痛呢？VCESoft可以幫您解決這一問題，它絕對是你可以信賴的網站！只要你選擇使用VCESoft網站提供的資料，絕對可以輕鬆通過考試，與其花費時間在不知道是否有用的復習資料上，不如趕緊來體驗VCESoft帶給您的服務，還在等什麼趕緊行動吧。

Salesforce Identity-and-Access-Management-Architect Exam Syllabus Topics:

SectionObjectives
Access Management- Given a scenario, recommend the appropriate access management solution
  • 1. Enterprise territory management
  • 2. Roles and Sharing Rules
  • 3. Profiles and Permission Sets
- Given a scenario, describe how to configure access management
  • 1. Configuration settings
  • 2. Access control implementation
- Given a scenario, troubleshoot common access management issues
  • 1. Configuration errors
  • 2. Access errors
Directory Services- Given a scenario, recommend the appropriate directory service solution
  • 1. Active Directory
  • 2. LDAP
- Given a scenario, configure directory services
  • 1. Integration settings
  • 2. Configuration steps
Identity Management- Given a scenario, recommend the appropriate Salesforce authentication mechanism
  • 1. Connected Apps
  • 2. Security tokens
  • 3. Authentication mechanisms
- Given a scenario, troubleshoot common authentication issues
  • 1. Login issues
  • 2. Authentication flow issues
- Describe the role(s) Identity Management plays in the enterprise
  • 1. Identity Management concepts
  • 2. Identity Management solutions
- Describe the risks to enterprise security associated with Identity Management
  • 1. Identity threats
  • 2. Mitigation strategies
Single Sign-On (SSO)- Given a scenario, troubleshoot common SSO issues
  • 1. SAML issues
  • 2. OpenID Connect issues
- Given a scenario, configure SSO
  • 1. OpenID Connect Configuration
  • 2. SAML Configuration
- Given a scenario, recommend the appropriate SSO strategy
  • 1. Federated SSO
  • 2. SSO strategies

>> Identity-and-Access-Management-Architect熱門考題 <<

Identity-and-Access-Management-Architect考古題分享 & Identity-and-Access-Management-Architect考試內容

如何才能快速的通過 Identity-and-Access-Management-Architect 考試呢？下麵給你推薦 VCESoft 考古題，我們的 Salesforce 的 Identity-and-Access-Management-Architect 考試培訓資料是以PDF和軟體格式提供，它包含 Identity-and-Access-Management-Architect 考試的試題及答案，而剛剛上線的 Salesforce Identity-and-Access-Management-Architect 題庫是考生需要重點把握和瞭解的。也只有在看書和看資料的基礎上認真地做 Salesforce Identity-and-Access-Management-Architect 真題，才能使複習達到事半功倍的效果。

最新的 Identity and Access Management Designer Identity-and-Access-Management-Architect 免費考試真題 (Q72-Q77):

問題 #72
Universal Containers (UC) employees have Salesforce access from restricted IP ranges only, to protect against unauthorized access. UC wants to roll out the Salesforce1 mobile app and make it accessible from any location. Which two options should an Architect recommend? Choose 2 answers

答案：B,D

解題說明：
Explanation
The two options that an architect should recommend for UC to roll out the Salesforce1 mobile app and make it accessible from any location are:
Relax the IP restriction with a second factor in the Connected App settings for Salesforce1 mobile app.
This option allows UC to enable two-factor authentication (2FA) for the Salesforce1 mobile app, which requires users to verify their identity with a second factor, such as a verification code or a mobile app, after entering their username and password. By enabling 2FA in the Connected App settings, UC can relax the IP restriction for the Salesforce1 mobile app, as users can access it from any location as long as they provide the second factor.
Relax the IP restrictions in the Connected App settings for the Salesforce1 mobile app. This option allows UC to disable or modify the IP restriction for the Salesforce1 mobile app in the Connected App settings, which control how users can access a connected app, such as Salesforce1. By relaxing the IP restrictions, UC can allow users to access the Salesforce1 mobile app from any location without requiring 2FA.
The other options are not recommended for this scenario. Removing existing restrictions on IP ranges for all types of user access would compromise security and compliance, as it would expose Salesforce to unauthorized access from any location. Using Login Flow to bypass IP range restriction for the mobile app would require custom code and logic, which could introduce complexity and errors. References: [Connected Apps], [Two-Factor Authentication], [Require a Second Factor of Authentication for Connected Apps], [IP Restrictions for Connected Apps], [Login Flows]


問題 #73
Universal Containers (UC) has a Customer Community that uses Facebook for Authentication. UC would like to ensure that Changes in the Facebook profile are reflected on the appropriate Customer Community user:
How can this requirement be met?

答案：B

解題說明：
Explanation
The best option for UC to ensure that changes in the Facebook profile are reflected on the appropriate customer community user is to use the updateUser method on the registration handler class. A registration handler class is an Apex class that implements the Auth.RegistrationHandler interface and defines the logic for creating or updating a user account when a user logs in with an external authentication provider, such as Facebook. The updateUser method is a method in the registration handler class that takes a user ID and a JSON string as parameters and updates the user record with the information from the JSON string. This method can be used to update the user's profile, email, name, or other attributes based on the changes in the Facebook profile. The other options are not optimal for this scenario. Developing a scheduled job that calls out to Facebook on a nightly basis would introduce a delay in updating the user information and require custom code and API integration. Using information in the signed request that is received from Facebook would only provide limited information about the user, such as name, email, and locale, and not reflect any changes made after the initial login. Using SAML Just-in-Time provisioning between Facebook and Salesforce would require UC to configure Facebook as a SAML identity provider, which is not supported by Facebook. References:
[Create a Registration Handler Class], [Auth.RegistrationHandler Interface], [Facebook Signed Request],
[Facebook as SAML Identity Provider]


問題 #74
Universal containers (UC) is concerned that having a self-registration page will provide a means for "bots" or unintended audiences to create user records, thereby consuming licences and adding dirty data. Which two actions should UC take to prevent unauthorised form submissions during the self-registration process? Choose
2 answers

答案：B,D


問題 #75
Northern Trail Outfitters (NTO) wants its customers to use phone numbers to log in to their new digital portal, which was designed and built using Salesforce Experience Cloud. In order to access the portal, the user will need to do the following:
1. Enter a phone number and/or email address
2. Enter a verification code that is to be sent via email or text.
What is the recommended approach to fulfill this requirement?

答案：D

解題說明：
Explanation
To allow customers to use phone numbers to log in to their new digital portal, the identity architect should create a Login Discovery page and provide a Login Discovery Handler Apex class. A Login Discovery page is a custom page that allows users to enter their phone number or email address and receive a verification code via email or text. A Login Discovery Handler is a class that implements the Auth.LoginDiscoveryHandler interface and defines how to handle the user input and verification code. This approach can provide a passwordless login experience for the customers. References: Login Discovery, Create a Login Discovery Page


問題 #76

An organization has a central cloud-based Identity and Access Management (IAM) Service for authentication and user management, which must be utilized by all applications as follows:
1 - Change of a user status in the central IAM Service triggers provisioning or deprovisioning in the integrated cloud applications.
2 - Security Assertion Markup Language single sign-on (SSO) is used to facilitate access for users authenticated at identity provider (Central IAM Service).
Which approach should an IAM architect implement on Salesforce Sales Cloud to meet the requirements?

答案：B

解題說明：
Explanation
To meet the requirements of using a central cloud-based IAM service for authentication and user management, the IAM architect should implement Salesforce Sales Cloud as a SAML service provider and enable SCIM for provisioning and deprovisioning of users. SAML is a protocol that allows users to authenticate and authorize with an external identity provider and access Salesforce resources. By configuring Salesforce as a SAML service provider, the IAM architect can use the central IAM service as an identity provider and enable single sign-on for users. SCIM is a standard that defines how to manage user identities across different systems. By enabling SCIM in Salesforce, the IAM architect can synchronize user data between the central IAM service and Salesforce and automate user provisioning and deprovisioning based on the changes made in the central IAM service. References: SAML Single Sign-On Settings, SCIM User Provisioning for Connected Apps


問題 #77
......

我們都很清楚 Salesforce Identity-and-Access-Management-Architect 認證考試在IT行業中的地位是駐足輕重的地位，但關鍵的問題是能夠拿到Salesforce Identity-and-Access-Management-Architect的認證證書不是那麼簡單的。我們很清楚地知道網上缺乏有高品質的準確性高的相關考試資料。VCESoft的考試練習題和答案可以為一切參加IT行業相關認證考試的人提供一切所急需的資料。它能時時刻刻地提供你們想要的資料，購買我們所有的資料能保證你通過你的第一次Salesforce Identity-and-Access-Management-Architect認證考試。

Identity-and-Access-Management-Architect考古題分享: https://www.vcesoft.com/Identity-and-Access-Management-Architect-pdf.html

BONUS!!! 免費下載VCESoft Identity-and-Access-Management-Architect考試題庫的完整版：https://drive.google.com/open?id=1JubVO-tn0FR6av6YnToW_XKTVCJgjteL