IDENTITY-AND-ACCESS-MANAGEMENT-ARCHITECT Exam dumps PDF (Page: 2)

QUESTION: 6

Which three types of attacks would a 2-Factor Authentication solution help garden against?

Key logging attacks
Network perimeter attacks
Phishing attacks
Dictionary attacks
Man-in-the-middle attacks

Answer(s): A,B,D

Universal Containers (UC) plans to use a SAML-based third-party IdP serving both of the Salesforce Partner Community and the corporate portal. UC partners will log in 65* to the corporate portal to access protected resources, including links to Salesforce resources. What would be the recommended way to configure the IdP so that seamless access can be achieved in this scenario?

Set up the corporate portal as a Connected App in Salesforce and use the Web server OAuth flow.
Configure SP-initiated SSO that passes the SAML token upon Salesforce resource access request.
Set up the corporate portal as a Connected App in Salesforce and use the User Agent OAuth flow.
Configure IdP-initiated SSO that passes the SAML token upon Salesforce resource access request.

Answer(s): D

Reveal Solution Next Question

QUESTION: 8

Universal Containers (UC) wants to use Salesforce for sales orders and a legacy of system for order fulfillment. The legacy system must update the status of orders in 65* Salesforce in real time as they are fulfilled. UC decides to use OAuth for connecting the legacy system to Salesforce. What OAuth flow should be considered that doesn't require storing credentials, client secret or refresh tokens?

Web Server flow
JWT Bearer Token flow
Username-Password flow
User Agent flow

Answer(s): B

Reveal Solution Next Question

QUESTION: 9

Universal Containers (UC) has a Customer Community that uses Facebook for of authentication. UC would like to ensure that changes in the Facebook profile are 65. reflected on the appropriate Customer Community user. How can this requirement be met?

Use SAML Just-In-Time Provisioning between Facebook and Salesforce.
Use information in the Signed Request that is received from Facebook.
Develop a scheduled job that calls out to Facebook on a nightly basis.
Use the updateUser() method on the Registration Handler class.

Answer(s): D

Reveal Solution Next Question

QUESTION: 10

Universal Containers (UC) has five Salesforce orgs (UC1, UC2, UC3, UC4, UC5). of Every user that is in UC2, UC3, UC4, and UC5 is also in UC1, however not all users 65* have access to every org. Universal Containers would like to simplify the authentication process such that all Salesforce users need to remember one set of credentials. UC would like to achieve this with the least impact to cost and maintenance. What approach should an Architect recommend to UC?

Purchase a third-party Identity Provider for all five Salesforce orgs to use and set up JIT user provisioning on all other orgs.
Purchase a third-party Identity Provider for all five Salesforce orgs to use, but don't set up JIT user provisioning for other orgs.
Configure UC1 as the Identity Provider to the other four Salesforce orgs and set up JIT user provisioning on all other orgs.
Configure UC1 as the Identity Provider to the other four Salesforce orgs, but don't set up JIT user provisioning for other orgs.

Answer(s): B

Reveal Solution Next Question

Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-ARCHITECT Exam (page: 2)
Salesforce Certified Identity and Access Management Architect
Updated on: 31-Mar-2026

QUESTION: 6

QUESTION: 7

QUESTION: 8

QUESTION: 9

QUESTION: 10

Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-ARCHITECT Exam (page: 2) Salesforce Certified Identity and Access Management Architect Updated on: 31-Mar-2026

QUESTION: 6

QUESTION: 7

QUESTION: 8

QUESTION: 9

QUESTION: 10

Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-ARCHITECT Exam (page: 2)
Salesforce Certified Identity and Access Management Architect
Updated on: 31-Mar-2026