P.S. Free & New Identity-and-Access-Management-Architect dumps are available on Google Drive shared by Pass4guide: https://drive.google.com/open?id=1E_s70yZGbX-Lj60nWnCWJq6u9dtm4b8T
Firstly, our company always feedbacks our candidates with highly-qualified Identity-and-Access-Management-Architect study guide and technical excellence and continuously developing the most professional Identity-and-Access-Management-Architect exam materials. Secondly, our Identity-and-Access-Management-Architect study materials persist in creating a modern service oriented system and strive for providing more preferential activities for your convenience. Come and buy our Identity-and-Access-Management-Architect Exam Materials, you will get more than you can imagine!
Salesforce Certified Identity and Access Management Architect exam is a proctored exam that consists of 60 multiple-choice questions. The test-taker has two hours to complete the exam and must score 63% or higher to pass. Identity-and-Access-Management-Architect Exam can be taken online or at a proctored testing center. The cost of the exam is $400, and candidates can take the exam up to ten times in a year.
>> Dumps Identity-and-Access-Management-Architect Free <<
Our service tenet is to let the clients get the best user experiences and be satisfied. From the research, compiling, production to the sales, after-sale service, we try our best to provide the conveniences to the clients and make full use of our Identity-and-Access-Management-Architect study materials. We organize the expert team to compile the Identity-and-Access-Management-Architect Study Materials elaborately and constantly update them. To let the clients have a fundamental understanding of our Identity-and-Access-Management-Architect study materials, we provide the free trials before their purchasing.
Salesforce IAM certification exam covers a wide range of topics, including identity management, access management, authentication protocols, authorization models, security standards, and regulatory compliance. Identity-and-Access-Management-Architect Exam Format comprises 60 multiple-choice questions, and individuals have 120 minutes to complete the exam. Salesforce Certified Identity and Access Management Architect certification exam is administered by Salesforce and can be taken in-person or remotely.
NEW QUESTION # 85
Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the OAuth 2.0 user-agent flow. Application users will authenticate using username and password. They should not be forced to approve API access in the mobile app or reauthenticate for 3 months.
Which two connected app options need to be configured to fulfill this use case?
Choose 2 answers
Answer: B,D
Explanation:
Explanation
To fulfill the use case of creating a mobile application that will be secured by Salesforce Identity using the OAuth 2.0 user-agent flow, where users will authenticate using username and password and not be forced to approve API access or reauthenticate for 3 months, the identity architect should configure two connected app options:
Set Permitted Users to "All users may self-authorize". Permitted Users is a setting that controls how users can access a connected app. By setting it to "All users may self-authorize", the identity architect can allow users to access the connected app without requiring administrator approval or API access confirmation.
Set the Refresh Token Policy to expire refresh token after 3 months. Refresh Token Policy is a setting that controls how long a refresh token can be used to obtain a new access token without requiring user authentication. By setting it to expire refresh token after 3 months, the identity architect can allow users to access the connected app for 3 months without reauthenticating, as long as they use the app at least once every 90 days. References: Connected Apps, OAuth 2.0 User-Agent Flow
NEW QUESTION # 86
Universal Containers (UC) is both a Salesforce and Google Apps customer. The UC IT team would like to manage the users for both systems in a single place to reduce administrative burden. Which two optimal ways can the IT team provision users and allow Single Sign-on between Salesforce and Google Apps ? Choose 2 answers
Answer: B,C
Explanation:
B is correct because a third-party product can act as an Identity Provider (IdP) for both Salesforce and Google Apps and manage the user provisioning from a single place12. This reduces the administrative burden and provides a consistent user experience.
D is correct because Salesforce can act as an IdP and Google Apps can act as a Service Provider (SP) and they can use SAML or OpenID Connect for Single Sign-on (SSO)34. Salesforce also supports User Provisioning for Connected Apps, which allows the creation, update, and deactivation of users in Google Apps based on changes in Salesforce.
A is incorrect because building a custom app on Heroku as an IdP is not an optimal way to provision users and allow SSO. It would require more development and maintenanceeffort than using a third-party product or Salesforce as an IdP.
C is incorrect because Identity Connect is a tool that synchronizes users between Active Directory and Salesforce. It does not support Google Apps as a target system for user provisioning orSSO.
References:
1: Architect Journey: Identity and Access Management Trailmix - Trailhead
2: Free Salesforce Identity-and-Access-Management-Architect Questions ...
3: [SingleSign-On Implementation Guide Developer Documentation]
4: [Social Single Sign-On with OpenID Connect Salesforce Developer YouTube]
5: [Authorize Apps with OAuth Trailblazer Community Documentation]
6: Identity Connect Implementation Guide Developer Documentation
NEW QUESTION # 87
Universal Containers (UC) wants to integrate a third-party Reward Calculation system with Salesforce to calculate Rewards. Rewards will be calculated on a schedule basis and update back into Salesforce. The integration between Salesforce and the Reward Calculation System needs to be secure. Which are two recommended practices for using OAuth flow in this scenario. choose 2 answers
Answer: A,B
Explanation:
Explanation
OAuth is an open-standard protocol that allows a client app to access protected resources on a resource server, such as Salesforce API, by obtaining an access token from an authorization server. OAuth supports different types of flows, which are ways of obtaining an access token. For integrating a third-party Reward Calculation system with Salesforce securely, two recommended practices for using OAuth flow are:
OAuth SAML Bearer Assertion Flow, which allows the client app to use a SAML assertion issued by a trusted identity provider to request an access token from Salesforce. This flow does not require the client app to store any credentials or secrets, and leverages the existing SSO infrastructure between Salesforce and the identity provider.
OAuth JWT Bearer Token Flow, which allows the client app to use a JSON Web Token (JWT) signed by a private key to request an access token from Salesforce. This flow does not require any user interaction or consent, and uses a certificate to verify the identity of the client app.
Verified References: [OAuth 2.0 SAML Bearer Assertion Flow for Server-to-Server Integration], [OAuth 2.0 JWT Bearer Token Flow for Server-to-Server Integration]
NEW QUESTION # 88
Universal Containers allows employees to use a mobile device to access Salesforce for daily operations using a hybrid mobile app. This app uses Mobile software development kits (SDK), leverages refresh token to regenerate access token when required and is distributed as a private app.
The chief security officer is rolling out an org wide compliance policy to enforce re verification of devices if an employee has not logged in from that device in the last week.
Which connected app setting should be leveraged to comply with this policy change?
Answer: C
Explanation:
When a mobile application uses refresh tokens to preserve login state, the strongest control for forcing re- verification after inactivity is the refresh token policy. Salesforce lets administrators define when refresh tokens expire, including inactivity-based expiration. That is more aligned with the stated requirement than a generic session timeout, because the app renews access through the refresh token even after individual access tokens expire. Denying refresh_token scope would break the usability requirement, and manually maintaining permitted users would be operationally weak. The architecture question is about reauthentication after the device has been idle from an OAuth perspective. In Salesforce connected apps, that control sits with the refresh token policy, especially the "expire if not used for X days" style setting. This is why option D is the best answer in Salesforce terms.
NEW QUESTION # 89
Northern Trail Outfitters (NTO) wants its customers to use phone numbers to log into their new digital portal, which was designed and built using Salesforce Experience Cloud. In order to access the portal, the user will need to do the following:
1. Enter a phone number and/or email address
2. Enter a verification code that is to be sent via email or text.
What is the recommended approach to fulfill this requirement?
Answer: B
Explanation:
To allowcustomers to use phone numbers to log in to their new digital portal, the identity architect should create a Login Discovery page and provide a Login Discovery Handler Apex class. A Login Discovery page is a custom page that allows users to enter their phone number or email address and receive a verification code via email or text. A Login Discovery Handler is a class that implements the Auth.
LoginDiscoveryHandler interface and defines how to handle the user input and verification code. This approach can provide a passwordless login experience for the customers. References: Login Discovery, Create a Login Discovery Page
NEW QUESTION # 90
......
Certification Identity-and-Access-Management-Architect Sample Questions: https://www.pass4guide.com/Identity-and-Access-Management-Architect-exam-guide-torrent.html
BTW, DOWNLOAD part of Pass4guide Identity-and-Access-Management-Architect dumps from Cloud Storage: https://drive.google.com/open?id=1E_s70yZGbX-Lj60nWnCWJq6u9dtm4b8T