Northern Trail Outfitters would like to automatically create new employee users in Salesforce with an appropriate profile that maps to its Active Directory Department.
How should an identity architect implement this requirement?

• A.Use the createUser method in the Just-in-Time (JIT) provisioning registration handler to assign the appropriate profile.
• B.Use the updateUser method in the Just-in-Time (JIT) provisioning registration handler to assign the appropriate profile.
• C.Use a login flow to collect Security Assertion Markup Language attributes and assign the appropriate profile during Just-In-Time (JIT) provisioning.
• D.Make a callout during the login flow to query department from Active Directory to assign the appropriate profile.

Comment: *

Name: *

Email: *

Verification: *

Universal containers (UC) uses a home-grown employee portal for their employees to collaborate. UC decides to use salesforce ideas to allow the employees to post ideas from the employee portal. When clicking some links in the employee portal, the users should be redirected to salesforce, authenticated, and presented with relevant pages. What scope should be requested when using the Oauth token to meet this requirement?

• A.API
• B.Visualforce
• C.Full
• D.Web

Comment: *

Name: *

Email: *

Verification: *

A group of userstry to access one of universal containers connected apps and receive the following error message: "Failed : Not approved for access". what is most likely to cause of the issue?

• A.The use of high assurance sections are required for the connected App.
• B.The users do not have the correct permission set assigned to them.
• C.The connected App setting "All users may self-authorize" is enabled.
• D.The salesforce administrators gave revoked the Oauth authorization.

Comment: *

Name: *

Email: *

Verification: *

A manufacturer wants to provide registration for an Internet of Things (IoT) device with limited display input or capabilities.
Which Salesforce OAuth authorization flow should be used?

• A.OAuth 2.0 JWT Bearer How
• B.OAuth 2.0 Device Flow
• C.OAuth 2.0 User-Agent Flow
• D.OAuth 2.0 Asset Token Flow

Comment: *

Name: *

Email: *

Verification: *

A company's external applicationis protected by Salesforce through OAuth. The identity architect for the project needs to limit the level of access to the data of the protected resource in a flexible way.
What should be done to improve security?

• A.Select "Admin approved users arepre-authorized" and assign specific profiles.
• B.Create custom scopes and assign to the connected app.
• C.Define a permission set that grants access to the app and assign to authorized users.
• D.Leverage external objects and data classification policies.

Comment: *

Name: *

Email: *

Verification: *