The CIO of Universal Containers (UC) wants to start taking advantage of the refresh token capability for the UC applications that utilize OAuth 2.0. UC has enlisted an Architect to analyze all of the applications that use OAuth flows to see where refresh tokens can be applied.
Which two OAuth flows should the Architect consider in their evaluation? (Choose two.)

• A.JWT Bearer Token
• B.Web Server
• C.Username-Password
• D.User-Agent

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) has a desktop application to collect leads for marketing campaigns. UC wants to extend this application to integrate with Salesforce to create leads. Integration between the desktop application and Salesforce should be seamless. What Authorization flow should the Architect recommend?

• A.Web Server Authentication Flow
• B.JWT Bearer Token Flow
• C.Username and Password Flow
• D.User Agent Flow

Comment: *

Name: *

Email: *

Verification: *

An Architect has successfully configured SAML-based SSO for Universal Containers. SSO has been working for 3 months when Universal Containers manually adds a batch of new users to Salesforce. The new users receive an error from Salesforce when trying to use SSO. Existing users are still able to successfully use SSO to access Salesforce.
What is the likely cause of this behavior?

• A.The My Domain capability is NOT enabled on the new user's profile.
• B.The new users do NOT have the SSO permission enabled on their profiles.
• C.The administrator forgot to reset the new user's Salesforce password.
• D.The Federation ID field on the new User records is NOT correctly set.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) is planning to add Wi-Fi enabled GPS tracking devices to its shipping containers so that the GPS coordinates data can be sent from the tracking device to its Salesforce production org via a custom API. The GPS devices have no direct user input or output capabilities.
Which OAuth flow should the identity architect recommend to meet the requirement?

• A.OAuth 2.0 Web Server Flow for Web App Integration
• B.OAuth 2.0 Username-Password Flow for Special Scenarios
• C.OAuth 2.0 Asset Token Flow for Securing Connected Devices
• D.OAuth 2.0 JWT Bearer Flow for Server-to-Server Integration

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) has a mobile application for its employees that uses data from Salesforce as well as uses Salesforce for authentication purposes. UC wants its mobile users to only enter their credentials the first time they run the app. The application has been live for a little over 6 months, and all of the users who were a part of the initial launch are complaining that they have to re-authenticate. UC has also recently changed the URI Scheme associated with the mobile app.
What should the Architect at UC first investigate?

• A.Verify that the Callback URL is correctly pointing to the new URI Scheme.
• B.Validate that the users are checking the box to remember their passwords.
• C.Check the Refresh Token Policy defined in the Salesforce Connected App.
• D.Confirm that the Access Token's Time-To-Live policy has been set appropriately.

Comment: *

Name: *

Email: *

Verification: *