Universal Containers (UC) is building an integration between Salesforce and a legacy web application using the Canvas framework. The security team for UC has determined that a signed request from Salesforce is not an adequate authentication solution for the third-party app.
Which two options should the Architect consider for authenticating the third-party app using the Canvas framework? (Choose two.)

• A.Utilize Authorization Providers to allow the third-party application to authenticate itself against Salesforce as the IdP.
• B.Utilize the Canvas OAuth flow to allow the third-party application to authenticate itself against Salesforce as the IdP.
• C.Utilize the SAML Single Sign-on flow to allow the third-party to authenticate itself against UC's IdP.
• D.Create a registration handler Apex class to allow the third-party application to authenticate itself against Salesforce as the IdP.

Comment: *

Name: *

Email: *

Verification: *

A global company has built an external application that uses data from its Salesforce org via an OAuth 2.0 authorization flow. Upon logout, the existing Salesforce OAuth token must be invalidated.
Which action will accomplish this?

• A.Use a HTTP POST to the System for Cross-domain Identity Management (SCIM) endpoint, including the current OAuth token.
• B.Use a HTTP POST to request the refresh token for the current user.
• C.Use a HTTP POST to make a call to the revoke token endpoint.
• D.Enable Single Logout with a secure logout URL.

Comment: *

Name: *

Email: *

Verification: *

A farming enterprise offers smart farming technology to rts farmer customers, which includes a variety of sensors for livestock tracking, pest monitoring, climate monitoring etc. They plan to store all the data in Salesforce. They would also like to ensure timely maintenance of the Installed sensors. They have engaged a salesforce Architect to propose an appropnate way to generate sensor Information In Salesforce.
Which OAuth flow should the architect recommend?

• A.OAuth 2.0 SAML Bearer Assertion Flow
• B.OAuth 2.0 JWT Bearer Token Flow
• C.OAuth 2.0 Asset Token Flow
• D.OAuth 2.0 Device Authentication Row

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) uses an internal system for recruiting and would like to have the candidates' info available in Salesforce automatically when they are selected. UC decides to use OAuth to connect to Salesforce from the recruiting system and would like to do the authentication using digital certificates.
Which two OAuth flows should be considered to meet the requirement? (Choose two.)

• A.Refresh Token flow
• B.JWT Bearer Token flow
• C.SAML Bearer Assertion flow
• D.Web Server flow

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) has aCustomer Community that uses Facebook for Authentication. UC would like to ensure that Changes in the Facebook profile are reflected on the appropriate Customer Community user:
How can this requirement be met?

• A.Use the updateUser method on the registration Handler Class.
• B.Develop a scheduled job that calls out to Facebook on a nightly basis.
• C.Use SAML Just-In-Time Provisioning between Facebook and Salesforce.
• D.Use information in the signed Request that is received from facebook.

Comment: *

Name: *

Email: *

Verification: *