[2026] Salesforce Certified Platform Identity and Access Management Architect

문제1

The CIO of universal containers(UC) wants to start taking advantage of the refresh token capability for the UC applications that utilize Oauth 2.0. UC has listed an architect to analyze all of the applications that use Oauth flows to. See where refresh Tokens can be applied. Which two OAuth flows should the architect consider in their evaluation? Choose 2 answers

A. Web server

B. Username-password

C. User-Agent

D. Jwt bearer token

정답: A,C

문제2

Universal Containers has multiple Salesforce instances where users receive emails from different instances. Users should be logged into the correct Salesforce instance authenticated by their IdP when clicking on an email link to a Salesforce record.
What should be enabled in Salesforce as a prerequisite?

A. External Identity

B. My Domain

C. Identity Provider

D. Multi-Factor Authentication

정답: B

문제3

Universal Containers is implementing a new Experience Cloud site and the identity architect wants to use dynamic branding features as of the login process.
Which two options should the identity architect recommend to support dynamic branding for the site?
Choose 2 answers

A. To use dynamic branding, the community must be built with the Visuaiforce + Salesforce Tabs template.

B. An external content management system (CMS) must be used for dynamic branding on Experience Cloud sites.

C. An experience ID (expid) or placeholder parameter must be used in the URL to represent the brand.

D. To use dynamic branding, the community must be built with the Customer Account Portal template.

정답: C,D

문제4

Universal Containers (UC) is using a custom application that will act as the Identity Provider and will generate SAML assertions used to log in to Salesforce. UC is considering including custom parameters in the SAML assertion. These attributes contain sensitive data and are needed to authenticate the users. The assertions are submitted to salesforce via a browser form post. The majority of the users will only be able to access Salesforce via UC's corporate network, but a subset of admins and executives would be allowed access from outside the corporate network on their mobile devices. Which two methods should an Architect consider to ensure that the sensitive data cannot be tampered with, nor accessible to anyone while in transit?

A. Use Salesforce's Certificate to digitally sign the SAML Assertion and a Mobile Device Management client on the users' mobile devices.

B. Use the Identity Provider's certificate to digitally sign and Salesforce's Certificate to encrypt the payload.

C. Use the Identity provider's certificate to digitally Sign and the Identity provider's certificate to encrypt the payload.

D. Use a custom login flow to retrieve sensitive data using an Apex callout without including the attributes in the assertion.

정답: B,C

문제5

Universal Containers (UC) is considering a Customer 360 initiative to gain a single source of the truth for its customer data across disparate systems and services. UC wants to understand the primary benefits of Customer 360 Identity and how it contributes ato successful Customer 360 Truth project.
What are two are key benefits of Customer 360 Identity as it relates to Customer 360?
Choose 2 answers

A. Customer 360 Identity automatically integrates with Customer 360 Data Manager and Customer 360 Audiences to seamlessly populate all user data.

B. Customer 360 Identity not only provides a unified sign up and sign in experience, but also tracks anonymous user activity prior to signing up so organizations can understand user activity before and after the users identify themselves.

C. Customer 360 Identity enables an organization to build a single login for each of its customers, giving the organization an understanding of the user's login activity across all its digital properties and applications.

D. Customer 360 Identity supports multiple brands so you can deliver centralized identity services and correlation of user activity,

정답: C,D

문제6

Northern Trail Outfitters want to allow its consumer to self-register on it business-to-consumer (B2C) portal that is built on Experience Cloud. The identity architect has recommended to use Person Accounts.
Which three steps need to be configured to enable self-registration using person accounts?
Choose 3 answers

A. Enable access to person and business account record types under Public Access Settings.

B. Contact Salesforce Support to enable person accounts.

C. Contact Salesforce Support to enable business accounts.

D. Under Login and Registration settings, ensure that the default account field is empty.

E. Set organization-wide default sharing for Contact to Public Read Only.

정답: A,B,D

문제7

A university is planning to set up an identity solution for its alumni. A third-party identity provider will be used for single sign-on Salesforce will be the system of records. Users are getting error messages when logging in.
Which Salesforce feature should be used to debug the issue?

A. View Setup Audit Trail

B. Debug Logs

C. Apex Exception Email

D. Login History

정답: D

문제8

Universal Containers (UC) is rolling out its new Customer Identity and Access Management Solution built on top of its existing Salesforce instance. UC wants to allow customers to login using Facebook, Google, and other social sign-on providers.
How should this functionality be enabled for UC, assuming ail social sign-on providers support OpenID Connect?

A. Configure an authentication provider and a Just-In-Time (JIT) handler for each social sign-on provider.

B. Configure a single sign-on setting and a registration handler for each social sign-on provider.

C. Configure an authentication provider and a registration handler for each social sign-on provider.

D. Configure a single sign-on setting and a JIT handler for each social sign-on provider.

정답: C

문제9

Universal Container's (UC) is using Salesforce Experience Cloud site for its container wholesale business. The identity architect wants to an authentication provider for the new site.
Which two options should be utilized in creating an authentication provider?
Choose 2 answers

A. The default login user can be set.

B. The default authentication provider certificate can be set.

C. A custom registration handier can be set.

D. A custom error URL can be set.

정답: C,D

문제10

Universal containers (UC) has implemented a multi-org strategy and would like to centralize the management of their salesforce user profiles. What should the architect recommend to allow salesforce profiles to be managed from a central system of record?

A. Implement Delegated Authentication that will update the user profiles as necessary.

B. Implement jit provisioning on the SAML IDP that will pass the profile id in each assertion.

C. Create an apex scheduled job in one org that will synchronize the other orgs profile.

D. Implement an Oauthjwt flow to pass the profile credentials between systems.

정답: B

문제11

Containers (UC) uses an internal system for recruiting and would like to have the candidates' info available in the Salesforce automatically when they are selected. UC decides to use OAuth to connect to Salesforce from the recruiting system and would like to do the authentication using digital certificates. Which two OAuth flows should be considered to meet the requirement? Choose 2 answers

A. SAML Bearer Assertion flow

B. Refresh Token flow

C. Web Service flow

D. JWT Bearer Token flow

정답: A,D

Salesforce Certified Platform Identity and Access Management Architect - Plat-Arch-203무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트