Salesforce Identity-and-Access-Management-Architect認證 & Identity-and-Access-Management-Architect考試指南

P.S. PDFExamDumps在Google Drive上分享了免費的、最新的Identity-and-Access-Management-Architect考試題庫：https://drive.google.com/open?id=17MActx80hBv6T9DngGO_6GVStDQ1dJBu

大家在準備考試的時候，可以結合本網站最新的 Salesforce Identity-and-Access-Management-Architect 擬真試題去認真地做練習，這樣的話，可以為你的考試節省很多的時間。Salesforce 的 Identity-and-Access-Management-Architect 考試整體來說還是不算複雜的，只要事先將擬真試題看好就沒有問題了。還有，做實驗題是要一定要多想想，這樣的話，才能將自身的一些素質提高上去。我們的考題網剛更新 Identity-and-Access-Management-Architect 題庫能確保考生能順利通過 Identity-and-Access-Management-Architect 考試，獲得 Salesforce 認證證照。

Salesforce Identity-and-Access-Management-Architect Exam Syllabus Topics:

SectionObjectives
Topic 1: Access Management- Given a scenario, recommend the appropriate access management solution
  • 1. Enterprise territory management
  • 2. Roles and Sharing Rules
  • 3. Profiles and Permission Sets
- Given a scenario, troubleshoot common access management issues
  • 1. Configuration errors
  • 2. Access errors
- Given a scenario, describe how to configure access management
  • 1. Configuration settings
  • 2. Access control implementation
Topic 2: Single Sign-On (SSO)- Given a scenario, troubleshoot common SSO issues
  • 1. OpenID Connect issues
  • 2. SAML issues
- Given a scenario, configure SSO
  • 1. OpenID Connect Configuration
  • 2. SAML Configuration
- Given a scenario, recommend the appropriate SSO strategy
  • 1. Federated SSO
  • 2. SSO strategies
Topic 3: Identity Management- Given a scenario, recommend the appropriate Salesforce authentication mechanism
  • 1. Authentication mechanisms
  • 2. Security tokens
  • 3. Connected Apps
- Describe the role(s) Identity Management plays in the enterprise
  • 1. Identity Management solutions
  • 2. Identity Management concepts
- Given a scenario, troubleshoot common authentication issues
  • 1. Authentication flow issues
  • 2. Login issues
- Describe the risks to enterprise security associated with Identity Management
  • 1. Mitigation strategies
  • 2. Identity threats
Topic 4: Directory Services- Given a scenario, configure directory services
  • 1. Configuration steps
  • 2. Integration settings
- Given a scenario, recommend the appropriate directory service solution
  • 1. Active Directory
  • 2. LDAP

>> Salesforce Identity-and-Access-Management-Architect認證 <<

Identity-and-Access-Management-Architect考試指南 - Identity-and-Access-Management-Architect認證資料

PDFExamDumps有強大的專家團隊不斷為你提供有效的培訓資源，他們不斷利用他們的豐富的經驗和知識研究過去幾年的試題。終於PDFExamDumps的有針對性的練習題和答案問世了，它們對很多參加IT認證考試的人起到了很大的幫助。你現在在網上可以免費下載PDFExamDumps提供的部分關於Salesforce Identity-and-Access-Management-Architect認證考試的模擬測試題和答案作為嘗試。通過很多IT專業人士的使用證明PDFExamDumps很可靠。一般如果你使用PDFExamDumps提供的針對性復習題，你可以100%通過Salesforce Identity-and-Access-Management-Architect 認證考試。快將PDFExamDumps加入你的購物車吧! 下一個IT行業的成功人士說不定就是你。

最新的 Identity and Access Management Designer Identity-and-Access-Management-Architect 免費考試真題 (Q53-Q58):

問題 #53
Universal Containers allows employees to use a mobile device to access Salesforce for daily operations using a hybrid mobile app. This app uses Mobile software development kits (SDK), leverages refresh token to regenerate access token when required and is distributed as a private app.
The chief security officer is rolling out an org wide compliance policy to enforcere-verification of devices if an employee has not logged in from that device in the last week.
Which connected app setting should be leveraged to comply with this policy change?

答案：C

解題說明：
Refresh Token Policy - Expire the refresh token if it has not been used for 7 days is the connected app setting that should be leveraged to comply with the policy change. This setting ensures that users have to re-verify their devices if they have not loggedin from that device in the last week. The other settings are either not relevant or not effective for this scenario. References: Connected App Basics, OAuth 2.0 Refresh Token Flow


問題 #54
Northern Trail Outfitters (NTO) utilizesa third-party cloud solution for an employee portal. NTO also owns Salesforce Service Cloud and would like employees to be able to login to Salesforce with their third-party portal credentials for a seamless experience. The third-party employee portal onlysupports OAuth.
What should an identity architect recommend to enable single sign-on (SSO) between the portal and Salesforce?

答案：A

解題說明：
Configuring SSO to use the third-party portal as an identity provider is the best option to enable SSO between the portal and Salesforce. The portal can use OAuth as the protocol to authenticate users and redirect them to Salesforce. The other options are either not feasible or not relevant for this use case. References:
Single Sign-On for Desktop and Mobile Applications using SAML and OAuth, Single Sign-On with SAML on Force.com


問題 #55
An identity architect has built a native mobile application and plans to integrate it with a Salesforce Identity solution. The following are the requirements for the solution:
1. Users should not have to login every time they use the app.
2. The app should be able to make calls to the Salesforce REST API.
3. End users should NOT see the OAuth approval page.
How should the identity architect configure the Salesforce connected app to meet the requirements?

答案：B

解題說明：
JWT Bearer Flow is an OAuth 2.0 flow that allows a client app to obtain an access token without user interaction. It requires a certificate to sign the JWT and the API and Offline Access scopes to access the Salesforce REST API and refresh the token. The connected app must also be pre-approved by the admin to avoid the OAuth approval page. References: OAuth 2.0 JWT Bearer Flow for Server-to-Server Integration, Authorize an Org Using the JWT Flow


問題 #56
A pharmaceutical company has an on-premise application (see illustration) that it wants to integrate with Salesforce.
The IT director wants to ensure that requests must include a certificate with a trusted certificate chain to access the company's on-premise application endpoint.
What should an Identity architect do to meet this requirement?

答案：A

解題說明：
To ensure that requests must include a certificate with a trusted certificate chain to access the company's on- premise application endpoint, the identity architect should generate a certificate authority-signed certificate in Salesforce and upload it to the on-premise application Truststore. A certificate authority-signed certificate is a certificate that is issued by a trusted third-party entity, such as VeriSign or Thawte, that verifies the identity and authenticity of the certificate holder. A Truststore is a repository that stores trusted certificates and public keys. By generating a certificate authority-signed certificate in Salesforce and uploading it to the on-premise application Truststore, the identity architect can enable mutual authentication and secure communication between Salesforce and the on-premise application. The other options are not recommended for this scenario, as they either donot provide a trusted certificate chain, do not enable mutual authentication, or do not secure the communication. References: Create Certificate Authority-Signed Certificates, Mutual Authentication


問題 #57
A global company's Salesforce Identity Architect is reviewing its Salesforce production org login history and is seeing some intermittent Security Assertion Markup Language (SAML SSO) 'Replay Detected and Assertion Invalid' login errors.
Which two issues would cause these errors?
Choose 2 answers

答案：B,D

解題說明：
A SAML SSO 'Replay Detected and Assertion Invalid' error occurs when Salesforce detects that the same assertion has been used more than oncewithin the validity period. This can happen if the assertion ID is reused by the IdP or if the assertion is resent by the user. Another possible cause is that the time settings of the IdP and Salesforce are not synchronized, which can result in an assertion being valid for a shorter or longer period than expected. References: SAML Single Sign-On Settings, Troubleshoot SAML Single Sign-On


問題 #58
......

PDFExamDumps 考題大師始終致力與為客戶提供 Salesforce 認證的全真考題及認證學習資料，該題庫根據 Salesforce 的 Identity-and-Access-Management-Architect 考試的變化動態更新，能夠時刻保持題庫最新、最全、最具權威性。能夠幫助您一次通過 Identity-and-Access-Management-Architect 認證考試。在購買Identity-and-Access-Management-Architect 考試題庫之前，你還可以下載免費的考古題樣本作為試用。這樣你就可以自己判斷這個資料是不是適合自己。

Identity-and-Access-Management-Architect考試指南: https://www.pdfexamdumps.com/Identity-and-Access-Management-Architect_valid-braindumps.html

順便提一下，可以從雲存儲中下載PDFExamDumps Identity-and-Access-Management-Architect考試題庫的完整版：https://drive.google.com/open?id=17MActx80hBv6T9DngGO_6GVStDQ1dJBu