Universal Containers (UC) is building a custom Innovation platform on their Salesforce instance. The Innovation platform will be written completely in Apex and Visualforce and will use custom objects to store the Data. UC would like all users to be able to access the system without having to log in with Salesforce credentials. UC will utilize a third-party idp using SAML SSO. What is the optimal Salesforce licence type for all of the UC employees?

• A.Identity Licence.
• B.Salesforce Licence.
• C.External Identity Licence.
• D.Salesforce Platform Licence.

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters (NTO) is planning to implement a community for its customers using Salesforce Experience Cloud. Customers are not able to self-register. NTO would like to have customers set their own passwords when provided access to the community.
Which two recommendations should an identity architect make to fulfill this requirement?
Choose 2 answers

• A.Enable Welcome emails while configuring the Experience Cloud site.
• B.Use Login Flows to allow users to reset password in Experience Cloud site.
• C.Allow Password reset using the API to update Experience Cloud site membership.
• D.Add customers as contacts and add them to Experience Cloud site.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers allows employees to use a mobile device to access Salesforce for daily operations using a hybrid mobile app. This app uses Mobile software development kits (SDK), leverages refresh token to regenerate access token when required and is distributed as a private app.
The chief security officer is rolling out an org wide compliance policy to enforce re verification of devices if an employee has not logged in from that device in the last week.
Which connected app setting should be leveraged to comply with this policy change?

• A.Scope - Deny refresh_token scope for this connected app.
• B.Permitted User - Ask admins to maintain a list of users who are permitted based on last login date.
• C.Session Policy - Set timeout value of the connected app to 7 days.
• D.Refresh Token Policy - Expire the refresh token if it has not been used for 7 days.

Comment: *

Name: *

Email: *

Verification: *

Universal containers (UC) is successfully using Delegated Authentication for their salesforce users. The service supporting Delegated Authentication is written in Java. UC has a new CIO that is requiring all company Web services be RESR-ful andwritten in. NET. Which two considerations should the UC Architect provide to the new CIO? Choose 2 answers

• A.Delegated Authentication will not work with a.net service.
• B.Delegated Authentication will continue to work with rest services.
• C.Delegated Authentication will continue to work with a.net service.
• D.Delegated Authentication will not work with rest services.

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters (NTO) is planning to roll out a partner portal for its distributors using Experience Cloud. NTO would like to use an external identity provider (idP) and for partners to register for access to the portal. Each partner should be allowed to register only once to avoid duplicate accounts with Salesforce.
What should a identity architect recommend to create partners?

• A.Allow partners to register through the IdP and create partner users in Salesforce through an API.
• B.Create a custom web page in the Portal and create users in the IdP and Experience Cloud using published APIs.
• C.On successful creation of Partners using Self Registration page in Experience Cloud, create identity in Ping.
• D.Create a custom page m Experience Cloud to self register partner with Experience Cloud and Ping identity store.

Comment: *

Name: *

Email: *

Verification: *