Which three different attributes can be used to identifythe user in a SAML 65> assertion when Salesforce is acting as a Service Provider? Choose 3 answers

• A.User Email Address
• B.Salesforce User ID
• C.Federation ID
• D.User Full Name
• E.Salesforce Username

Comment: *

Name: *

Email: *

Verification: *

Universal Containers allows employees to use a mobile device to access Salesforce for daily operations using a hybrid mobile app. This app uses Mobile software development kits (SDK), leverages refresh token to regenerate access token when required and is distributed as a private app.
The chief security officer is rolling out an org wide compliance policy to enforce re-venfication of devices if an employee has not logged in from that device in the last week.
Which connected app setting should be leveraged to comply with this policy change?

• A.Permitted User - Ask admins to maintain a list of users who are permitted based on last login date.
• B.Session Policy - Set timeout value of the connected app to 7 days.
• C.Refresh Token Policy - Expire the refresh token if it has not been used for 7 days.
• D.Scope - Deny refresh_token scope for this connected app.

Comment: *

Name: *

Email: *

Verification: *

Universal containers(UC) has a custom, internal-only, mobile billing application for users who are commonly out of the office. The app is configured as a connected App in salesforce. Due to the nature of this app, UC would like to take the appropriate measures to properly secure access to the app. Which two are recommendations to make the UC? Choose 2 answers

• A.Require high assurance sessions in order to use the connected App
• B.Disallow the use of single Sign-on for any users of the mobile app.
• C.Set login IP ranges to the internal network for all of the app users profiles.
• D.Use Google Authenticator as an additional part of the logical processes.

Comment: *

Name: *

Email: *

Verification: *

Universal Container's (UC) is using Salesforce Experience Cloud site for its container wholesale business. The identity architect wants to an authentication provider for the new site.
Which two options should be utilized in creating an authentication provider?
Choose 2 answers

• A.The default authentication provider certificate can be set.
• B.A custom registration handier can be set.
• C.The default login user can be set.
• D.A custom error URL can be set.

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters (NTO) has a number of employees who do NOT need access Salesforce objects. Trie employees should sign in to a custom Benefits web app using their Salesforce credentials.
Which license should the identity architect recommend to fulfill this requirement?

• A.Identity Verification Credits Add-on License
• B.Identity Connect License
• C.External Identity License
• D.Identity Only License

Comment: *

Name: *

Email: *

Verification: *