IDENTITY-AND-ACCESS-MANAGEMENT-ARCHITECT Exam Questions and Answers (Page: 5)

QUESTION: 21

Universal containers (UC) employees have salesforce access from restricted ip ranges only, to protect against unauthorised access. UC wants to rollout the salesforce1 mobile app and make it accessible from any location. Which two options should an architect recommend? Choose 2 answers

Relax the ip restriction in the connect app settings for the salesforce1 mobile app
Use login flow to bypass ip range restriction for the mobile app.
Relax the ip restriction with a second factor in the connect app settings for salesforce1 mobile app
Remove existing restrictions on ip ranges for all types of user access.

Answer(s): A,B

Reveal Solution Next Question

QUESTION: 22

Universal containers(UC) has a customer Community that uses Facebook for authentication. UC would like to ensure that changes in the Facebook profile are reflected on the appropriate customer Community user. How can this requirement be met?

Use the updateuser() method on the registration handler class.
Use SAML just-in-time provisioning between Facebook and Salesforce
Use information in the signed request that is received from Facebook.
Develop a schedule job that calls out to Facebook on a nightly basis.

Answer(s): A

Reveal Solution Next Question

QUESTION: 23

Universal containers(UC) wants to integrate a third-party reward calculation system with salesforce to calculate rewards. Rewards will be calculated on a schedule basis and update back into salesforce. The integration between Salesforce and the reward calculation system needs to be secure. Which are the recommended best practices for using Oauth flows in this scenario? Choose 2 answers

Oauth refresh token flow
Oauth SAML bearer assertion flow
Oauth jwt bearer token flow
Oauth Username-password flow

Answer(s): B,C

Reveal Solution Next Question

QUESTION: 24

Universal Containers (UC) is looking to build a Canvas app and wants to use the corresponding Connected App to control where the app is visible. Which two options are correct in regards to where the app can be made visible under the Connected App setting for the Canvas app? Choose 2 answers

As part of the body of a Salesforce Knowledge article.
In the mobile navigation menu on Salesforce for Android.
The sidebar of a Salesforce Console as a console component.
Included in the Call Control Tool that's part of Open CTI.

Answer(s): A,C

Reveal Solution Next Question

QUESTION: 25

Universal Containers (UC) has an existing Salesforce org configured for SP-Initiated SAML SSO with their Idp. A second Salesforce org is being introduced into the environment and the IT team would like to ensure they can use the same Idp for new org. What action should the IT team take while implementing the second org?

Use the same SAML Identity location as the first org.
Use a different Entity ID than the first org.
Use the same request bindings as the first org.
Use the Salesforce Username as the SAML Identity Type.

Answer(s): B

Reveal Solution Next Question

Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-ARCHITECT Exam (page: 5) Salesforce Certified Identity and Access Management Architect Updated on: 15-Feb-2026

QUESTION: 21

QUESTION: 22

QUESTION: 23

QUESTION: 24

QUESTION: 25

Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-ARCHITECT Exam (page: 5)
Salesforce Certified Identity and Access Management Architect
Updated on: 15-Feb-2026