The security team at Universal containers(UC) has identified exporting reports as a high-risk action and would like to require users to be logged into salesforce with their active directory (AD) credentials when doing so.
For all other uses of Salesforce, Users should be allowed to use AD credentials or salesforce credentials. What solution should be recommended to prevent exporting reports except when logged in using AD credentials while maintaining the ability to view reports when logged in with salesforce credentials?

• A.Use SAML Federated Authentication and Custom SAML jit provisioning to dynamically add or remove a permission set that grants the Export Reports permission.
• B.Use SAML Federated Authentication, treat SAML sessions as high assurance, and raise the session level required for exporting reports.
• C.Use SAML Federated Authentication and block access to reports when accesses through a standard assurance session.
• D.Use SAML Federated Authentication with a login flow to dynamically add or remove a permission set that grants the export reports permission.

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters (NTO) has an existing custom business-to-consumer (B2C) website that does NOT support single sign-on standards, such as Security Assertion Markup Language (SAMi) or OAuth. NTO wants to use Salesforce Identity to register and authenticate new customers on the website.
Which two Salesforce features should an identity architect use in order to provide username/password authentication for the website?
Choose 2 answers

• A.Identity Connect
• B.Delegated Authentication
• C.Connected Apps
• D.Embedded Login

Comment: *

Name: *

Email: *

Verification: *

A service provider (SP) supports both Security Assertion Narkup Language (SAML) and OpenID Connect (OIDC).
When Salesforce is acting as Identity Provider for this SP, which use case is the determining factor when choosing OIDC or SAML?

• A.OIDC is more secure than SAML and therefore is the obvious choice.
• B.the SP needs to perform our calls back to Salesforce on behalf of the user after the user logs in to the service provider.
• C.They are equivalent protocols and there is no real reason to choose one over the other.
• D.If the user has a session on Salesforce, you do not want them to be promoted for a username and password when they login to the SP.

Comment: *

Name: *

Email: *

Verification: *

Universal containers(UC) wants to integrate a third-party reward calculation system with salesforce to calculate rewards. Rewards will be calculated on a schedule basis and update back into salesforce. The integration between Salesforce and the reward calculation system needs to be secure. Which are the recommended best practices for using Oauth flows in this scenario? Choose 2 answers

• A.Oauth refresh token flow
• B.Oauth SAML bearer assertion flow
• C.Oauthjwt bearer token flow
• D.Oauth Username-password flow

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters (NTO) wants to give customers the ability to submit and manage issues with their purchases. It is important for to give its customers the ability to login with their Facebook and Twitter credentials.
Which two actions should an identity architect recommend to meet these requirements?
Choose 2 answers

• A.Create a custom external authentication provider for Facebook.
• B.Configure a predefined authentication provider for Facebook.
• C.Create a custom external authentication provider for Twitter.
• D.Configure a predefined authentication provider for Twitter.

Comment: *

Name: *

Email: *

Verification: *