Free Salesforce Identity-and-Access-Management-Designer Exam Dumps Questions & Answers

Universal containers (UC) wants to implement Delegated Authentication for a certain subset of Salesforce users. Which three items should UC take into consideration while building the Web service to handle the Delegated Authentication request? Choose 3 answers

• A.The web service can be written using either the soap or rest protocol.
• B.UC should whitelist all salesforce ip ranges on their corporate firewall.
• C.The return type of the Web service method should be a Boolean value
• D.The web service needs to include Source IP as a method parameter.
• E.Delegated Authentication is enabled for the system administrator profile.

Universal Containers allows employees to use a mobile device to access Salesforce for daily operations using a hybrid mobile app. This app uses Mobile software development kits (SDK), leverages refresh token to regenerate access token when required and is distributed as a private app.
The chief security officer is rolling out an org wide compliance policy to enforce re-venfication of devices if an employee has not logged in from that device in the last week.
Which connected app setting should be leveraged to comply with this policy change?

• A.Refresh Token Policy - Expire the refresh token if it has not been used for 7 days.
• B.Session Policy - Set timeout value of the connected app to 7 days.
• C.Scope - Deny refresh_token scope for this connected app.
• D.Permitted User - Ask admins to maintain a list of users who are permitted based on last login date.

Universal Containers (UC) uses a home-grown Employee portal for their employees to collaborate. UC decides to use Salesforce Ideas to allow employees to post Ideas from the Employee portal. When users click on some of the links in the Employee portal, the users should be redirected to Salesforce, authenticated, and presented with the relevant pages. What OAuth flow is best suited for this scenario?

• A.Web Application flow
• B.Web Server flow
• C.User-Agent flow
• D.SAML Bearer Assertion flow

Universal containers wants salesforce inbound Oauth-enabled integration clients to use SAML-BASED single Sign-on for authentication. What Oauth flow would be recommended in this scenario?

• A.SAML assertion Oauth flow
• B.User-Agent Oauth flow
• C.User-Token Oauth flow
• D.Web server Oauth flow

Universal Containers (UC) has built a custom token-based Two-factor authentication (2FA) system for their existing on-premise applications. They are now implementing Salesforce and would like to enable a Two-factor login process for it, as well. What is the recommended solution as Architect should consider?

• A.Use the custom 2FA system for on-premise applications and native 2FA for Salesforce.
• B.Use Custom Login Flows to connect to the existing custom 2FA system for use in Salesforce.
• C.Replace the custom 2FA system with an AppExchange App that supports on premise application and salesforce.
• D.Replace the custom 2FA system with Salesforce 2FA for on-premise applications and Salesforce.