Universal Containers (UC) has an Experience Cloud site (Customer Community) where customers can authenticate and place orders, view the status of orders, etc. UC allows guest checkout.
Mow can a guest register using data previously collected during order placement?

• A.Enable self-registration and customize a self-registration page to collect only order details to retrieve customer data.
• B.Use a Connected App Handler Apex Plugin class to collect only order details to retrieve customer data.
• C.Enable Security Assertion Markup Language Sign-On and use a login flow to collect only order details to retrieve customer data.
• D.Enable Facebook as an authentication provider and use a registration handler to collect only order details to retrieve customer data.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) is building a custom Innovation platform on their Salesforce instance. The Innovation platform will be written completely in Apex and Visualforce and will use custom objects to store the Data. UC would like all users to be able to access the system without having to log in with Salesforce credentials. UC will utilize a third-party idp using SAML SSO. What is the optimal Salesforce licence type for all of the UC employees?

• A.Salesforce Licence.
• B.External Identity Licence.
• C.Salesforce Platform Licence.
• D.Identity Licence.

Comment: *

Name: *

Email: *

Verification: *

A service provider (SP) supports both Security Assertion Markup Language (SAML) and OpenID Connect (OIDC).
When integrating this SP with Salesforce, which use case is the determining factor when choosing OIDC or SAML?

• A.OIDC is more secure than SAML and therefore is the obvious choice.
• B.The SP needs to perform API calls back to Salesforce on behalf of the user after the user logs in to the service provider.
• C.They are equivalent protocols and there is no real reason to choose one over the other.
• D.If the user has a session on Salesforce, you do not want them to be prompted for a username and password when they login to the SP.

Comment: *

Name: *

Email: *

Verification: *

An Identity and Access Management (IAM) architect is tasked with unifying multiple B2C Commerce sites and an Experience Cloud community with a single identity. The solution needs to support more than 1,000 logins per minute.
What should the IAM do to fulfill this requirement?

• A.Confirm performance considerations with Salesforce Customer Support due to high peaks.
• B.Configure community as a Security Assertion Markup Language (SAML) identity provider and enable Just-in-Time Provisioning to B2C Commerce.
• C.Configure both the community and the commerce sites as OAuth2 RPs (relying party) with an external identity provider.
• D.Create a default account for capturing all ecommerce contacts registered on the community because personAccount is not supported for this case.

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters (NTO) believes a specific user account may have been compromised. NTO inactivated the user account and needs U perform a forensic analysis and identify signals that could Indicate a breach has occurred.
What should NTO's first step be in gathering signals that could indicate account compromise?

• A.Download the Identity Provider Event Log and evaluate the details of activities performed by the user.
• B.Download the Login History and evaluate the details of logins performed by the user.
• C.Review the User record and evaluate the login and transaction history.
• D.Download the Setup Audit Trail and review all recent activities performed by the user.

Comment: *

Name: *

Email: *

Verification: *