Instant Access Salesforce.Identity-and-Access-Management-Architect.v2026-07-12.q101 Actual Practice Test Engine for Free (Page 18)

Question 81

Universal Containers (UC) wants to provide single sign-on (SSO) for a business-to-consumer (B2C) application using Salesforce Identity.
Which Salesforce license should UC utilize to implement this use case?

A.Identity Only
B.External Identity
C.Partner Community
D.Salesforce Platform

Question 82

A financial services company uses Salesforce and has a compliance requirement to track information about devices from which users log in. Also, a Salesforce Security Administrator needs to have the ability to revoke the device from which users log in.
What should be used to fulfill this requirement?

A.Use the Activations feature to meet the compliance requirement to track device information.
B.Use Login Flows to capture device from which users log in and store device and user information in a custom object.
C.Use the Login History object to track information about devices from which users log in.
D.Use multi-factor authentication (MFA) to meet the compliance requirement to track device information.

Question 83

Universal Containers (UC) is using Active Directory as its corporate identity provider and Salesforce as its CRM for customer care agents, who use SAML based sign sign-on to login to Salesforce. The default agent profile does not include the Manage User permission. UC wants to dynamically update the agent role and permission sets.
Which two mechanisms are used to provision agents with the appropriate permissions?
Choose 2 answers

A.Use Login Flow in User Context to update role and permission sets.
B.Use Login Flow in System Context to update role and permission sets.
C.Use SAML Just-m-Time (JIT) Handler class run as current user to update role and permission sets.
D.Use SAML Just-in-Time (JIT) handler class run as an admin user to update role and permission sets.

Question 84

Northern Trail Outfitters (NTO) wants to give customers the ability to submit and manage issues with their purchases. It is important for NTO to give its customers the ability to login with their Amazon credentials.
What should an identity architect recommend to meet these requirements?

A.Create a custom external authentication provider for Amazon.
B.Configure Amazon as & connected app.
C.Configure an OpenlD Connect Authentication Provider for Amazon.
D.Configure a predefined authentication provider for Amazon.

Question 85

What are three capabilities of Delegated Authentication? Choose 3 answers

A.It can be assigned by Custom Permissions.
B.It can connect to SOAP services.
C.It can be assigned by Permission Sets.
D.It can be assigned by Profiles.
E.It can connect to REST services.

Correct Answer: B,C,E

Explanation
The three capabilities of delegated authentication are:
It can connect to SOAP services. Delegated authentication is a feature that allows Salesforce to delegate the authentication process to an external service by making a SOAP callout to a web service that verifies the user's credentials. This feature enables Salesforce to integrate with existing identity stores or authentication methods that support SOAP services.
It can be assigned by permission sets. Permission sets are collections of settings and permissions that give users access to various tools and functions in Salesforce. Permission sets can be used to assign delegated authentication to users by enabling the "Is Single Sign-on Enabled" permission. This permission allows users to log in with delegated authentication instead of their Salesforce username and password.
It can connect to REST services. REST services are web services that use HTTP methods to access or manipulate resources on a server. REST services can be used for delegated authentication by creating a custom login page that makes a REST callout to an external service that verifies the user's credentials.
This approach requires custom code and configuration, but it provides more flexibility and control over the authentication process.
The other options are not capabilities of delegated authentication. Delegated authentication cannot be assigned by custom permissions or profiles. Custom permissions are settings that can be used in Apex code or validation rules to check whether a user has access to a custom feature or functionality. Custom permissions cannot be used to enable delegated authentication for users. Profiles are collections of settings and permissions that determine what users can do in Salesforce. Profiles cannot be used to enable delegated authentication for users, as this feature is controlled by permission sets. References: [Delegated Authentication], [Permission Sets], [Enable 'Delegated Authentication'], [REST Services], [Custom Login Page for Delegated Authentication], [Custom Permissions], [Profiles]

Question 81

Question 82

Question 83

Question 84

Question 85

Download PDF File