Itcertkr Identity-and-Access-Management-Architect 최신 PDF 버전 시험 문제집을 무료로 Google Drive에서 다운로드하세요: https://drive.google.com/open?id=1aAtrCPe0ZC7eer_anexcymauGOimHxLz
Pass4Tes가 제공하는 제품을 사용함으로 여러분은 IT업계하이클래스와 멀지 않았습니다. Pass4Tes 가 제공하는 인증시험덤프는 여러분을Salesforce인증Identity-and-Access-Management-Architect시험을 안전하게 통과는 물론 관연전업지식장악에도 많은 도움이 되며 또한 우리는 일년무료 업뎃서비스를 제공합니다.
Salesforce Identity-and-Access-Management-Architect (Salesforce Certified Identity and Access Management Architect) 시험은 Salesforce 기술을 이용하여 Identity와 Access Management 솔루션을 설계하고 구현하는 전문가들을 위한 자격증 시험입니다. 이 시험은 복잡한 Salesforce 환경에서 사용자 인증, 승인 및 Identity Federation을 관리하는 솔루션을 설계, 구축 및 배포 경험이 있는 아키텍트, 엔지니어 및 개발자를 대상으로 합니다. 이 자격증은 안전하고 효율적인 Identity와 Access Management 전략을 구현하고 관리하기 위해 필요한 기술과 지식을 검증합니다.
>> Identity-and-Access-Management-Architect인증덤프공부문제 <<
Salesforce인증 Identity-and-Access-Management-Architect시험은 빨리 패스해야 되는데 어디서부터 어떻게 시험준비를 시작해야 하는지 갈피를 잡을수 없는 분들은Itcertkr가 도와드립니다. Itcertkr의 Salesforce인증 Identity-and-Access-Management-Architect덤프만 공부하면 시험패스에 자신이 생겨 불안한 상태에서 벗어날수 있습니다.덤프는 시장에서 가장 최신버전이기에 최신 시험문제의 모든 시험범위와 시험유형을 커버하여Salesforce인증 Identity-and-Access-Management-Architect시험을 쉽게 패스하여 자격증을 취득하여 찬란한 미래에 더 가깝도록 도와드립니다.
Salesforce Certified Identity and Access Management Architect 자격증 시험은 사용자 인증, 승인, 신원 관리, 접근 제어 및 데이터 보안을 포함한 다양한 주제를 다룹니다. 이 자격증 시험에 합격한 후보자는 조직의 요구 사항을 충족하는 안전한 솔루션을 설계하고 구현할 수 있는 능력을 입증합니다.
Salesforce Identity-and-Access-Management-Architect (Salesforce Certified Identity and Access Management Architect) 시험은 Salesforce 애플리케이션에 대한 액세스 관리와 보안을 책임지는 IT 전문가들을 대상으로하는 인증 프로그램입니다. 이 시험은 인증, 권한 부여, 사용자 관리와 같은 다양한 자격 증명 및 액세스 관리 관련 주제를 다룹니다. Salesforce의 복잡한 자격 증명 및 액세스 관리 솔루션을 설계하고 구현할 수 있는 아키텍트의 기술과 지식을 검증하기 위해 설계되었습니다.
질문 # 103
Northern Trail Outfitters (NTO) utilizesa third-party cloud solution for an employee portal. NTO also owns Salesforce Service Cloud and would like employees to be able to login to Salesforce with their third-party portal credentials for a seamless experience. The third-party employee portal onlysupports OAuth.
What should an identity architect recommend to enable single sign-on (SSO) between the portal and Salesforce?
정답：A
설명：
Configuring SSO to use the third-party portal as an identity provider is the best option to enable SSO between the portal and Salesforce. The portal can use OAuth as the protocol to authenticate users and redirect them to Salesforce. The other options are either not feasible or not relevant for this use case. References:
Single Sign-On for Desktop and Mobile Applications using SAML and OAuth, Single Sign-On with SAML on Force.com
질문 # 104
A company wants to provide its employees with a custom mobile app that accesses Salesforce. Users are required to download the internal native IOS mobile app from corporate intranet on their mobile device. The app allows flexibility to access other non-Salesforce internal applications once users authenticate with Salesforce. The apps self-authorize, and users are permitted to use the apps once they have logged into Salesforce.
How should an identity architect meet the above requirements with the privately distributed mobile app?
정답：A
설명：
Explanation
Configuring Mobile App settings in connected app and Salesforce as identity provider for non-Salesforce internal apps is the best way to meet the requirements with the privately distributed mobile app. The Mobile App settings allow users to download the app from a private URL and use it with Salesforce credentials. The identity provider settings allow users to access other internal apps with SSO using Salesforce as the IdP. The other options are either not feasible or not optimal for this use case. References: Mobile App Settings, Single Sign-On for Desktop and Mobile Applications using SAML and OAuth
질문 # 105
Which three types of attacks would a 2-Factor Authentication solution help garden against?
정답：A,B,D,E
설명：
Explanation
A 2-Factor Authentication (2FA) solution is a type of multi-factor authentication (MFA) that requires users to provide two verification factors to access a system or application. The verification factors can be something the user knows (e.g., password), something the user has (e.g., phone), or something the user is (e.g., fingerprint). A 2FA solution can help prevent common cyberattacks that rely on stealing or guessing passwords, such as:
Key logging attacks: These are attacks where a malicious program records the keystrokes of a user, including their passwords, and sends them to the attacker. A 2FA solution can prevent this attack by requiring an additional factor that is not typed by the user, such as a verification code sent to their phone or a biometric scan.
Phishing attacks: These are attacks where an attacker sends a fake email or website that looks like it came from a trusted source, and tricks the user into providing their credentials or other sensitive information. A 2FA solution can prevent this attack by requiring an additional factor that is not known by the attacker, such as a verification code generated by an authenticator app or a hardware token.
Dictionary attacks: These are attacks where an attacker tries to guess a user's password by using a list of common or likely passwords, such as "password" or "123456". A 2FA solution can prevent this attack by requiring an additional factor that is not based on a password, such as a fingerprint scan or a facial recognition.
A man-in-the-middle attack is when an attacker intercepts and alters the communication between two parties, such as a user and a website. A 2-Factor Authentication solution can help prevent this type of attack by requiring a second factor of authentication that the attacker cannot access or spoof, such as a code sent to the user's phone or a hardware token References: 1: What Is Two-Factor Authentication (2FA)? | Microsoft Security 2: What type of attacks does Multi-Factor Authentication prevent?
질문 # 106
Universal Containers (UC) is building a customer community and will allow customers to authenticate using Facebook credentials. The First time the user authenticating using Facebook, UC would like acustomer account created automatically in their accounting system. The accounting system has a web service accessible to Salesforce for the creation of accounts. How can the Architect meet these requirements?
정답：B
설명：
The best option for UC to meet the requirements is to add an Apex callout in the registration handler of the authorization provider. An authorization provider is a configuration in Salesforce that allows usersto log in with an external authentication provider, such as Facebook. A registration handler is an Apex class that implements the Auth.RegistrationHandler interface and defines the logic for creating or updating a user account when a user logs in with anexternal authentication provider. An Apex callout is a method that invokes an external web service from Apex code. By adding an Apex callout in the registration handler, UC can create a customer account in their accounting system by calling the web servicethat is accessible to Salesforce. This option enables UC to automate the account creation process and integrate with their existing accounting system. The other options are not optimal for this scenario. Creating a custom application on Heroku that manages the sign-on process from Facebook would require UC to develop and maintain a separate application and infrastructure, which could increase complexity and cost. Using JIT provisioning to automatically create the account in the accounting system would require UC to configure Facebook as a SAML identity provider, which is not supported by Facebook. Using OAuth JWT flow to pass the data from Salesforce to the accounting system would require UC to obtain anOAuth token from the accounting system and use it tomake API calls, which could introduce security and performance issues. References: [Authorization Providers],
[Create a Registration Handler Class], [Auth.RegistrationHandler Interface], [Apex Callouts], [Facebook as SAML Identity Provider], [OAuth 2.0 JWTBearer Flow for Server-to-Server Integration]
질문 # 107
Universal containers (UC) has a classifiedinformation system that it's call centre team uses only when they are working on a case with a record type of "classified". They are only allowed to access the system when they own an open "classified" case, and their access to the system is removed at allother times. They would like to implement SAML SSO with salesforce as the IDP, and automatically allow or deny the staff's access to the classified information system based on whether they currently own an open "classified" case record when they try to access the system using SSO. What is the recommended solution for automatically allowing or denying access to the classified information system based on the open "classified" case record criteria?
정답：C
설명：
Use a custom connected app handler using Apex to dynamically allow access to the system based on whether the staff owns any open "classified" cases is the recommended solution for this scenario. A custom connected app handler is an Apex class that implements the ConnectedAppPlugin interface and can customize the behavior of a connected app. The custom handler can support new protocols or respondto user attributes in a way that benefits a business process. In this case, the custom handler can query the user's open "classified" cases and grant or deny access to the classified information system accordingly. Use Apex trigger on case to dynamically assign permission sets that grant access when a user is assigned with an open "classified" case, and remove it when the case is closed is not a good solution, as permission sets are not related to SSO and cannot control access to external systems. Use custom SAML JIT provisioning to dynamicallyquery the user's open "classified" cases when attempting to access the classified information system is not feasible, as JIT provisioning is used to create or update user records in Salesforce, not in external systems. Use Salesforce reports to identify users that currently own open "classified" cases and should be granted access to the classified information system is not an automated solution, as it requires manual intervention and does not leverage SSO.
References: Certification - Identity and Access Management Architect - Trailhead, Create a Custom Connected App Handler, Manage Access Through a Custom Connected App Handler
질문 # 108
......
Identity-and-Access-Management-Architect유효한 인증공부자료: https://www.itcertkr.com/Identity-and-Access-Management-Architect_exam.html
참고: Itcertkr에서 Google Drive로 공유하는 무료, 최신 Identity-and-Access-Management-Architect 시험 문제집이 있습니다: https://drive.google.com/open?id=1aAtrCPe0ZC7eer_anexcymauGOimHxLz