Identity-and-Access-Management-Architect参考資料 & Identity-and-Access-Management-Architect日本語版復習資料

さらに、CertShiken Identity-and-Access-Management-Architectダンプの一部が現在無料で提供されています：https://drive.google.com/open?id=1rrg_U6zTLY3uhNJ2AiGi8exxJgopNmIS

当社の製品よりも高いプロファイルと低価格を備えた他の学習教材もあるかもしれませんが、Identity-and-Access-Management-Architect学習教材の合格率は彼らのものよりもはるかに高いことを保証できます。そしてこれが最も重要です。以前のデータによると、Identity-and-Access-Management-Architectトレーニング質問を使用する人の98％〜99％が試験に合格しました。あなたが私たちに信頼を与えてくれるなら、私たちはあなたに成功を与えます。

Salesforce Identity-and-Access-Management-Architect Exam Syllabus Topics:

SectionObjectives
Directory Services- Given a scenario, recommend the appropriate directory service solution
  • 1. LDAP
  • 2. Active Directory
- Given a scenario, configure directory services
  • 1. Configuration steps
  • 2. Integration settings
Identity Management- Given a scenario, recommend the appropriate Salesforce authentication mechanism
  • 1. Security tokens
  • 2. Connected Apps
  • 3. Authentication mechanisms
- Given a scenario, troubleshoot common authentication issues
  • 1. Login issues
  • 2. Authentication flow issues
- Describe the role(s) Identity Management plays in the enterprise
  • 1. Identity Management solutions
  • 2. Identity Management concepts
- Describe the risks to enterprise security associated with Identity Management
  • 1. Identity threats
  • 2. Mitigation strategies
Access Management- Given a scenario, troubleshoot common access management issues
  • 1. Configuration errors
  • 2. Access errors
- Given a scenario, describe how to configure access management
  • 1. Configuration settings
  • 2. Access control implementation
- Given a scenario, recommend the appropriate access management solution
  • 1. Roles and Sharing Rules
  • 2. Profiles and Permission Sets
  • 3. Enterprise territory management
Single Sign-On (SSO)- Given a scenario, troubleshoot common SSO issues
  • 1. OpenID Connect issues
  • 2. SAML issues
- Given a scenario, recommend the appropriate SSO strategy
  • 1. Federated SSO
  • 2. SSO strategies
- Given a scenario, configure SSO
  • 1. SAML Configuration
  • 2. OpenID Connect Configuration

>> Identity-and-Access-Management-Architect参考資料 <<

抜群にわかりやすいIdentity-and-Access-Management-Architect問題

CertShikenは SalesforceのIdentity-and-Access-Management-Architect認定試験の認証に対して特別な教育ツールで、あなたに多くの時間とお金が使わないようにIT技術にも身につけさせるサイトでございます。CertShikenは専門家チームが自分の知識と経験をを利用してSalesforceのIdentity-and-Access-Management-Architect「Salesforce Certified Identity and Access Management Architect」認証試験の問題集を研究したものでございます。

Salesforce Certified Identity and Access Management Architect 認定 Identity-and-Access-Management-Architect 試験問題 (Q19-Q24):

質問 # 19
Universal containers uses an Employee portal for their employees to collaborate. employees access the portal from their company's internal website via SSO. It is set up to work with Active Directory. What is the role of Active Directory in this scenario?

正解：B


質問 # 20
Universal Containers (UC) built an integration for their employees to post, view, and vote for ideas in Salesforce from an internal Company portal. When ideas are posted in Salesforce, links to the ideas are created in the company portal pages as part of the integration process. The Company portal connects to Salesforce using OAuth. Everything is working fine, except when users click on links to existing ideas, they are always taken to the Ideas home page rather than the specific idea, after authorization. Which OAuth URL parameter can be used to retain the original requested page so that a user can be redirected correctly after OAuth authorization?

正解：A

解説：
Explanation
The redirect_uri parameter is used to specify the URL that the user should be redirected to after OAuth authorization1. The redirect_uri should match the one that was registered with the OAuth client application2.
By using the redirect_uri parameter, the user can be redirected to the original requested page instead of the Ideas home page.


質問 # 21
Northern Trail Outfitters (NTO) is planning to roll out a partner portal for its distributors using Experience Cloud. NTO would like to use an external identity provider (idP) and for partners to register for access to the portal. Each partner should be allowed to register only once to avoid duplicate accounts with Salesforce.
What should a identity architect recommend to create partners?

正解：B

解説：
Explanation
To create partners using an external identity provider (IdP) and avoid duplicate accounts with Salesforce, the identity architect should recommend creating a custom page in Experience Cloud to self register partner with Experience Cloud and Ping identity store. Ping is an IdP that supports OpenID Connect protocol, which allows users to sign in with an external identity provider and access Salesforce resources. By creating a custom page in Experience Cloud, the identity architect can use a custom registration handler to link the partner's Ping identity with their Salesforce identity and prevent duplicate accounts. The custom page can also provide a seamless user experience for the partners. References: OpenID Connect Authentication Providers, Social Sign-On with OpenID Connect, Create a Custom Registration Handler


質問 # 22
Universal Containers (UC) wants to build a custom mobile app for their field reps to create orders in salesforce. After the first time the users log in, they must be able to access salesforce upon opening the mobile app without being prompted to log in again. What Oauth flows should be considered to support this requirement?

正解：B、C

解説：
The OAuth 2.0 user-agent flow and the OAuth 2.0 web server flow are both suitable for building a custom mobile app that can access Salesforce data without prompting the user to log in again1. Both ofthese flows use a refresh token that can be used to obtain a new access token when the previous one expires2. The user- agent flow uses theCanvas JavaScript SDK to obtain an OAuth token by using the login function in the SDK2. The web server flow redirects the user to the Salesforce OAuth authorizationendpoint and then obtains an OAuth access token by making a POST request to the Salesforce OAuth token endpoint2. The mobile agent flow and the SAML assertion flow are not valid OAuth flows for Salesforce3.
References: OAuth Authorization Flows, Mastering Salesforce CanvasApps, Access Data with API Integration


質問 # 23
A security architect is rolling out a new multi-factor authentication (MFA) mandate, where all employees must go through a secure authentication process before accessing Salesforce. There are multiple Identity Providers (IdP) in place and the architect is considering how the "Authentication Method Reference" field (AMR) in the Login History can help.
Which two considerations should the architect keep in mind?
Choose 2 answers

正解：A、C


質問 # 24
......

当社CertShikenは、無料の更新サービスに添付されているIdentity-and-Access-Management-Architect練習資料のすべてのバージョンをコミットしました。 Identity-and-Access-Management-Architect試験準備に新しい更新がある場合、カスタマーサービススタッフから最新バージョンが送信されます。したがって、最高のサービスとIdentity-and-Access-Management-Architect実践教材を提供するペースを止めることはありません。そして、お支払い前に品質を確認するためのIdentity-and-Access-Management-Architect学習教材の無料デモを提供します。数万人の候補者がIdentity-and-Access-Management-Architect学習教材を使用して学習能力を育成し、間違いなくその1つになることができます。

Identity-and-Access-Management-Architect日本語版復習資料: https://www.certshiken.com/Identity-and-Access-Management-Architect-shiken.html

ちなみに、CertShiken Identity-and-Access-Management-Architectの一部をクラウドストレージからダウンロードできます：https://drive.google.com/open?id=1rrg_U6zTLY3uhNJ2AiGi8exxJgopNmIS