How should an Architect force users to authenticate with Two-factor Authentication (2FA) for Salesforce only when not connected to an internal company network?

• A.Use an Apex Trigger on the UserLogin object to detect the user's IP address and prompt for 2FA if needed.
• B.Apply the "Two-factor Authentication for User Interface Logins" permission and Login IP Ranges for all Profiles.
• C.Add the list of company's network IP addresses to the Login Range list under 2FA Setup.
• D.Use Custom Login Flows with Apex to detect the user's IP address and prompt for 2FA if needed.

Comment: *

Name: *

Email: *

Verification: *

Universal containers (UC) is setting up their customer Community self-registration process. They are uncomfortable with the idea of assigning new users to a default account record. What will happen when customers self-register in the community?

• A.The self-registration page will ask user to select an account.
• B.The self-registration process will produce an error to the user.
• C.The self-registration page will create a new account record.
• D.The self-registration process will create a person Account record.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) has implemented SAML-based SSO solution for use with their multi-org Salesforce implementation, utilizing one of the the orgs as the Identity Provider. One user is reporting that they can log in to the Identity Provider org but get a generic SAML error message when accessing the other orgs. Which two considerations should the architect review to troubleshoot the issue? Choose 2 answers

• A.The Federation ID must be populated on the user record.
• B.The Federation ID must be a valid Salesforce Username
• C.The Federation ID must is case sensitive
• D.The Federation ID must be in the form of an email address.

Comment: *

Name: *

Email: *

Verification: *

A public sector agency is setting up an identity solution for its citizens using a Community built on Experience Cloud and requires the new user registration functionality to capture first name, last name, and phone number. The phone number will be used for identity verification.
Which feature should an identity architect recommend to meet the requirements?

• A.Create a custom Lightning Web Component
• B.Use an external Identity Provider
• C.Integrate with social websites (Facebook, Linkedin. Twitter)
• D.Use Login Discovery

Comment: *

Name: *

Email: *

Verification: *

Universal containers wants to build a custom mobile app connecting to salesforce using Oauth, and would like to restrict the types of resources mobile users can access. What Oauth feature of Salesforce should be used to achieve the goal?

• A.Mobile pins
• B.Access Tokens
• C.Scopes
• D.Refresh Tokens

Comment: *

Name: *

Email: *

Verification: *