無料でクラウドストレージから最新のCertShiken Identity-and-Access-Management-Architect PDFダンプをダウンロードする：https://drive.google.com/open?id=1rrg_U6zTLY3uhNJ2AiGi8exxJgopNmIS
CertShikenのIdentity-and-Access-Management-Architect問題集には、PDF版およびソフトウェア版のバージョンがあります。それはあなたに最大の利便性を与えることができます。いつでもどこでも問題を学ぶことができるために、あなたはPDF版の問題集をダウンロードしてプリントアウトすることができます。そして、ソフトウェア版のIdentity-and-Access-Management-Architect問題集は実際試験の雰囲気を感じさせることができます。そうすると、受験するとき、あなたは試験を容易に対処することができます。
| Certification Vendor: | Salesforce |
|---|---|
| Exam Name: | Salesforce Certified Identity and Access Management Architect Exam |
| Exam Number: | Identity-and-Access-Management-Architect |
| Related Certifications: | Salesforce Certified Technical Architect Salesforce Certified Application Architect Salesforce Certified System Architect |
| Certificate Validity Period: | Valid indefinitely; requires maintenance modules per release cycle |
| Passing Score: | 67% |
| Exam Duration: | 120 minutes |
| Real Exam Qty: | 60 |
| Exam Price: | $400 USD |
| Available Languages: | Simplified Chinese, Japanese, English, Korean |
| Exam Format: | Multiple-choice, Multiple-select, Scenario-based |
| Recommended Training: | Salesforce Architect Certification Resources Trailhead: Identity and Access Management Architect Journey |
| Exam Registration: | Salesforce Certification Registration Pearson VUE Salesforce Exams |
| Sample Questions: | Salesforce Identity-and-Access-Management-Architect Sample Questions |
| Exam Way: | Online proctored or onsite proctored testing center |
| Pre Condition: | No mandatory prerequisites; recommended: 2–3 years of identity/access management experience, familiarity with SAML/OAuth/OIDC, experience with Salesforce security and identity features |
| Official Syllabus URL: | https://trailhead.salesforce.com/credentials/identity-and-access-management-architect |
>> Identity-and-Access-Management-Architect日本語版テキスト内容 <<
あなたはSalesforceのIdentity-and-Access-Management-Architectの資料を探すのに悩んでいますか。心配しないでください。私たちを見つけるのはあなたのSalesforceのIdentity-and-Access-Management-Architect試験に合格する保障からです。数年以来IT認証試験のためのソフトを開発している我々CertShikenチームは国際的に大好評を博しています。我々はSalesforceのIdentity-and-Access-Management-Architectのような重要な試験を準備しているあなたに一番全面的で有効なヘルプを提供します。
Salesforce Identity-and-Access-Management-Architect認定資格は、業界で高く評価されており、専門家のキャリアを進めたり、収入を増やしたりすることができます。この認定資格は、Salesforceのプラットフォームを使用してセキュアかつスケーラブルなアイデンティティとアクセス管理ソリューションを設計および実装するために必要な知識とスキルを持っていることを雇用主に証明します。
質問 # 98
Universal Containers (UC) is building a customer community and will allow customers to authenticate using Facebook credentials. The First time the user authenticating using Facebook, UC would like a customer account created automatically in their accounting system. The accounting system has a web service accessible to Salesforce for the creation of accounts. How can the Architect meet these requirements?
正解：D
解説：
Explanation
The best option for UC to meet the requirements is to add an Apex callout in the registration handler of the authorization provider. An authorization provider is a configuration in Salesforce that allows users to log in with an external authentication provider, such as Facebook. A registration handler is an Apex class that implements the Auth.RegistrationHandler interface and defines the logic for creating or updating a user account when a user logs in with an external authentication provider. An Apex callout is a method that invokes an external web service from Apex code. By adding an Apex callout in the registration handler, UC can create a customer account in their accounting system by calling the web service that is accessible to Salesforce. This option enables UC to automate the account creation process and integrate with their existing accounting system. The other options are not optimal for this scenario. Creating a custom application on Heroku that manages the sign-on process from Facebook would require UC to develop and maintain a separate application and infrastructure, which could increase complexity and cost. Using JIT provisioning to automatically create the account in the accounting system would require UC to configure Facebook as a SAML identity provider, which is not supported by Facebook. Using OAuth JWT flow to pass the data from Salesforce to the accounting system would require UC to obtain an OAuth token from the accounting system and use it to make API calls, which could introduce security and performance issues. References: [Authorization Providers],
[Create a Registration Handler Class], [Auth.RegistrationHandler Interface], [Apex Callouts], [Facebook as SAML Identity Provider], [OAuth 2.0 JWT Bearer Flow for Server-to-Server Integration]
質問 # 99
Universal Containers (UC) has decided to replace the homegrown customer portal with Salesforce Experience Cloud. UC will continue to use its third-party single sign-on (SSO) solution that stores all of its customer and partner credentials.
The first time a customer logs in to the Experience Cloud site through SSO, a user record needs to be created automatically.
Which solution should an identity architect recommend in order to automatically provision users in Salesforce upon login?
正解：D
質問 # 100
The security team at Universal Containers (UC) has identified exporting reports as a high-risk action and would like to require users to be logged into Salesforce with their Active Directory (AD) credentials when doing so. For all other users of Salesforce, users should be allowed to use AD Credentials or Salesforce credentials. What solution should be recommended to prevent exporting reports except when logged in using AD credentials while maintaining the ability to view reports when logged in with Salesforce credentials?
正解：C
解説：
Explanation
The best solution to prevent exporting reports except when logged in using AD credentials while maintaining the ability to view reports when logged in with Salesforce credentials is to use SAML federated authentication, treat SAML sessions as high assurance, and raise the session level required for exporting reports. SAML federated authentication is a process that allows users to log in to Salesforce with an external identity provider (IdP), such as AD, that authenticates the user and issues a security token to Salesforce. By treating SAML sessions as high assurance, Salesforce assigns a higher level of trust and security to the sessions that are established by SAML federated authentication. By raising the session level required for exporting reports, Salesforce requires users to have a high assurance session before they can export reports. This solution ensures that only users who log in with AD credentials can export reports, while users who log in with Salesforce credentials can still view reports but not export them.
The other options are not valid solutions for this scenario. Using SAML federated authentication and blocking access to reports when accessed through a standard assurance session would prevent users who log in with Salesforce credentials from viewing reports at all, which is not the desired outcome. Using SAML federated authentication and custom SAML JIT provisioning to dynamically add or remove a permission set that grants the export reports permission would require UC to write custom code and logic to implement the JIT provisioning and manage the permission set, which could increase complexity and cost. Using SAML federated authentication with a login flow to dynamically add or remove a permission set that grants the export reports permission would also require UC to write custom code and logic to implement the login flow and manage the permission set, which could introduce errors and performance issues. References: [SAML Single Sign-On], [Session Security Levels], [Set Session Security Levels for Your Org], [Just-in-Time Provisioning for SAML], [Login Flows]
質問 # 101
Northern Trail Outfitters want to allow its consumer to self-register on it business-to consumer (B2C) portal that is built on Experience Cloud. The identity architect has recommended to use Person Accounts.
Which three steps need to be configured to enable self-registration using person accounts?
Choose 3 answers
正解：B、C、E
解説：
For Experience Cloud self-registration with Person Accounts, Salesforce requires the org and site configuration to line up with how external users are created. Person Accounts must first be enabled at the org level. On the site, the default account field must be left blank so the self-registration process doesn't force users into a shared business account model. Public access settings also need access to the relevant Person Account and business account record types so the registration process can create the right record. This is the documented pattern when self-registration is meant to create people as customers rather than contacts under a standard account. The key idea is that registration must be allowed to create the correct account model from the start. This is why options B, C, D work together as the correct solution.
質問 # 102
Northern Trail Outfitters mar ages functional group permissions in a custom security application supported by a relational database and a REST service layer. Group permissions are mapped as permission sets in Salesforce.
Which action should an identity architect use to ensure functional group permissionsare reflected as permission set assignments?
正解：C
解説：
Using a Login Flow with invocable Apex to callout to the security application and set permission sets allows the identity architect to dynamically assign or remove permission sets based on the functional group permissions in the custom security application. This ensures that the permission set assignments are consistent with the group permissions. References: Login Flows, Invocable Apex
質問 # 103
......
Identity-and-Access-Management-Architect試験感想: https://www.certshiken.com/Identity-and-Access-Management-Architect-shiken.html
ちなみに、CertShiken Identity-and-Access-Management-Architectの一部をクラウドストレージからダウンロードできます：https://drive.google.com/open?id=1rrg_U6zTLY3uhNJ2AiGi8exxJgopNmIS