IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER Exam Questions and Answers (Page: 2)

QUESTION: 6

Universal Containers (UC) is looking to build a Canvas app and wants to use thecorresponding Connected App to control where the app is visible.
Which two options are correct in regards to where the app can be made visible under the Connected App setting for the Canvas app? Choose 2 answers

As part of the body of a Salesforce Knowledge article.
In the mobile navigation menu on Salesforce for Android.
The sidebar of a Salesforce Console as a console component.
Included in the Call Control Tool that's part of Open CTI.

Answer(s): A,C

Reveal Solution Next Question

QUESTION: 7

Containers (UC) has decided to implement a federated single Sign-on solution using a third-party Idp. In reviewing the third-party products, they would like to ensurethe product supports the automated provisioning and deprovisioning of users.
What are the underlining mechanisms that the UC Architect must ensure are part of the product?

SOAP API for provisioning; Just-in-Time (JIT) for Deprovisioning.
Just-In-time (JIT) for Provisioning; SOAP API for Deprovisioning.
Provisioning API for both Provisioning and Deprovisioning.
Just-in-Time (JIT) for both Provisioning and Deprovisioning.

Answer(s): D

Reveal Solution Next Question

QUESTION: 8

Northern Trail Outfitters would like to automatically create new employee users in Salesforce with an appropriate profile that maps to its Active Directory Department.

How should an identity architectimplement this requirement?

Use the createUser method in the Just-in-Time (JIT) provisioning registration handler to assign the appropriate profile.
Use the updateUser method in the Just-in-Time (JIT) provisioning registration handler to assign the appropriate profile.
Use a login flow to collect Security Assertion Markup Language attributes and assign the appropriate profile during Just-In-Time
(JIT) provisioning.
Make a callout during the login flow to query department from Active Directory toassign the appropriate profile.

Answer(s): B

Reveal Solution Next Question

QUESTION: 9

After a recent audit, universal containers was advised to implement Two-factor Authentication for all of their critical systems, including salesforce.
Which two actions should UC consider to meet this requirement? Choose 2 answers

Require users to provide their RSA token along with their credentials.
Require users to supply their email and phone number, which getsvalidated.
Require users to enter a second password after the first Authentication
Require users to use a biometric reader as well as their password

Answer(s): A,D

Reveal Solution Next Question

QUESTION: 10

Universal containers (UC) has decided to use identity connect as it's identity provider. UC usesactive directory(AD) and has a team that is very familiar and comfortable with managing ad groups. UC would like to use AD groups to help configure salesforce users.
Which three actions can AD groups control through identity connect? Choose 3 answers

Public Group Assignment
Granting report folder access
Role Assignment
Custom permission assignment
Permission sets assignment

Answer(s): A,C,E

Reveal Solution Next Question

Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER Exam (page: 2) Salesforce Certified Identity and Access Management Designer Updated on: 07-Feb-2026

QUESTION: 6

QUESTION: 7

QUESTION: 8

QUESTION: 9

QUESTION: 10

Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER Exam (page: 2)
Salesforce Certified Identity and Access Management Designer
Updated on: 07-Feb-2026