BONUS!!! 免費下載Testpdf Identity-and-Access-Management-Architect考試題庫的完整版：https://drive.google.com/open?id=1BkUcMlBYZNHBZp13unInfYGMfYPRy7WN
Salesforce 是一個成功的公司，提供各種認證和考試。通過 Identity-and-Access-Management-Architect 考試是其中的核心要求。將帶來一個新的前沿，對你的職業道路起著如此重要的角色。Identity-and-Access-Management-Architect 認證考試的考題按照相同的教學大綱，其次是實際的 Salesforce 的 Identity-and-Access-Management-Architect 認證考試，我們也是不斷的升級我們的培訓資料，你得到的所有產品高達1年的免費更新，你也可以隨時延長更新訂閱時間，你將得到更多的時間來充分準備考試。
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Salesforce Identity Features and Architecture | 17% | - Salesforce Identity Connect and integration - License selection for identity use cases - Connected Apps configuration and security - Customer 360 Identity solution design |
| Topic 2: Community and External User Identity | 16% | - B2C, B2B, partner identity models - External user license and access design - External identity governance and security - Custom login and registration experiences |
| Topic 3: Access Management and Authorization | 17% | - Access policies and session management - Access auditing and compliance - Roles, profiles, permission sets and sharing models - Multi-factor authentication (MFA) design and implementation |
| Topic 4: Accepting Third-Party Identity in Salesforce | 17% | - Auditing, monitoring and diagnostics - Salesforce as Service Provider or Identity Provider - Authentication mechanisms for external identities - Provisioning users from external identity stores |
| Topic 5: Federated Identity and SSO Design | 16% | - SAML, OAuth, OpenID Connect implementation - Identity provider integration patterns - Delegated authentication and social sign-on - SSO across multiple orgs and environments |
| Topic 6: Identity Management Concepts | 17% | - Troubleshooting SSO and identity issues - Authentication patterns and building blocks - User provisioning and lifecycle management - Trust establishment between systems |
>> Identity-and-Access-Management-Architect考題寶典 <<
希望成為擁有Identity-and-Access-Management-Architect認證的IT專業人士嗎？想減少獲得Identity-and-Access-Management-Architect認證的成本嗎？想通過所有的Salesforce認證嗎？如果“是”，Testpdf是考生最明智的選擇，為您提供涵蓋最新認證考試問題的最佳題庫學習資料。Identity-and-Access-Management-Architect題庫可以在您考前模擬真實的考試環境，也是最有效的考古題。利用Salesforce的Identity-and-Access-Management-Architect考古題，您將達到你的目的，得到最佳的效果，給您帶來無限大的利益，在您以后的IT行業道路上可以走的更遠。
問題 #21
Northern Trail Outfitters (NTO) is planning to build a new customer service portal and wants to use passwordlesslogin, allowing customers to login with a one-time passcode sent to them via email or SMS.
How should the quantity of required Identity Verification Credits be estimated?
答案：C
解題說明：
Identity Verification Credits are units that are consumed when Salesforce sends verification messages to users via email or SMS. To use passwordless login, customers need to receive a one-time passcode via email or SMS that they can use to log in to the customer service portal. Therefore, Identity Verification Credits are consumed with each SMS (text message) sent and should be estimated based on the number of login verification challenges for SMS verification users. Email verification does not consume Identity Verification Credits. References: Identity Verification Credits, Passwordless Login
問題 #22
Universal containers wants to set up SSO for a selected group of users to access external applications from salesforce through App launcher. Which three steps must be completed in salesforceto accomplish the goal?
答案：A,B,C
解題說明：
To set up SSO for a selected group of users to access external applications from Salesforce through App Launcher, UC must complete the following steps in Salesforce:
* Associate user profiles with theconnected apps. A connected app is a framework that enables an external application to integrate with Salesforce using APIs and standard protocols, such as SAML, OAuth, and OpenID Connect3. To access a connected app, usersmust have the appropriate permissions assigned to them, either through their profile or a permission set4. UC can associate user profiles with the connected apps to control which users can access which apps.
* Complete My Domain and identity provider setup. My Domain isa feature that lets UC create a custom domain name for their Salesforce org. It is required for setting up SSO with external identity providers.
An identity provider is a trusted system that authenticates users for other service providers. UC must set up an identity provider that supports SSO protocols such as SAML or OpenID Connect and configure it to communicate with Salesforce.
* Create connected apps for the external applications. UC must create connected apps for each external application that they wantto access from Salesforce through App Launcher. A connected app defines the attributes of the external application, such as its name, logo, description, and callback URL4. It also specifies the SSO protocol and settings thatare used to authenticate users and grant access tokens4.
References: Learn About Connected Apps, Create a Connected App, [Set Up My Domain], Single Sign-On,
[Identity Providers and Service Providers]
問題 #23
Universal containers (UC) wants users to authenticate into their salesforce org using credentials stored in a custom identity store. UC does not want to purchase or use a third-party Identity provider. Additionally, UC is extremely wary of social media and does not consider it to be trust worthy. Which two options should an architect recommend to UC? Choose 2 answers
答案：B,D
解題說明：
Explanation
The two options that an architect should recommend to UC are to build a custom web service that is supported by delegated authentication and to implement the OpenID protocol and configure an authentication provider. Delegated authentication is a feature that allows Salesforce to delegate user authentication to an external service instead of using Salesforce credentials3. A custom web service can be built to use the credentials stored in the custom identity store and validate them against Salesforce using SOAP or REST API3. OpenID is an open standard protocol that allows users to authenticate with various web services using an existing account4. An authentication provider can be configured in Salesforce to use OpenID and connect with the custom identity store5.
References: Delegated Authentication, OpenID, Authentication Providers
問題 #24
Universal Containers (UC) has an existing e-commerce platform and is implementing a new customer community. They do not want to force customers to register on both applications due to concern over the customers experience. It is expected that 25% ofthe e-commerce customers will utilize the customer community . The e-commerce platform is capable of generating SAML responses and has an existing REST- ful API capable of managing users. How should UC create the identities of its e-commerce users with thecustomer community?
答案：D
解題說明：
The best option for UC to create the identities of its e-commerce users with the customer community is to use SAML JIT in the customer community to create users when a user tries to login to the community from the e- commerce site. SAML JIT (Just-in-Time) is a feature that allows Salesforce to create or update user accounts based on the information provided in a SAML assertion from an identity provider (IdP). This feature enables UC to avoid duplicating user registration on both applications and provide a seamless single sign-on (SSO) experience for its customers. The other options are not optimal for this scenario. Using the e-commerce REST API to create users when a user self-registers on the customer communitywould require the user to register twice, once on the e-commerce site and once on the customer community, which would degrade the customer experience. Using a nightly batch ETL job to sync users between the customer community and the e- commerce platformwould introduce a delay in user creation and synchronization, which could cause errors or inconsistencies. Using the standard Salesforce API to create users in the community when a user is created in the e-commerce platform would require UC to write custom code and maintain API integration, which could increase complexity and cost. References: [Just-in-Time Provisioning for SAML], [Single Sign-On], [SAML SSO Flows]
問題 #25
Universal Containers uses Salesforce as an identity provider and Concur as the Employee Expense management system. The HR director wants to ensure Concur accounts for employees are created only after the appropriate approval in the Salesforce org.
Which three steps should the identity architect use to implement this requirement.
Choose 3 answers
答案：A,B,D
解題說明：
Salesforce connected-app user provisioning can be combined with internal approval so downstream accounts are created only after the right business authorization is complete. The connected app must have user provisioning enabled, and the target application must be represented as a connected app in Salesforce. To control timing, the approval process should be associated with the provisioning request object that participates in the provisioning lifecycle rather than with the generic User object. That allows the organization to hold or approve the provisioning action itself. This pattern is useful when HR or compliance wants a formal checkpoint before external accounts are created. The architecture separates identity eligibility from final outbound provisioning execution. This is why options B, C, D work together as the correct solution.
問題 #26
......
每個人都有自己的人生規劃，選擇不同得到的就不同，所以說選擇很重要。Testpdf Salesforce的Identity-and-Access-Management-Architect考試認證培訓資料是幫助每個IT人士實現自己人生宏偉目標的最好的方式方法，它包括了試題及答案，並且和真實的考試題目不相上下，真的是所謂稱得上是最好的別無二選的培訓資料。
Identity-and-Access-Management-Architect套裝: https://www.testpdf.net/Identity-and-Access-Management-Architect.html
P.S. Testpdf在Google Drive上分享了免費的、最新的Identity-and-Access-Management-Architect考試題庫：https://drive.google.com/open?id=1BkUcMlBYZNHBZp13unInfYGMfYPRy7WN