Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the OAuth 2.0 user-agent flow (this flow uses the OAuth 2.0 implicit grant type).
Which three OAuth concepts apply to this flow?
Choose 3 answers

• A.Authorization Code
• B.Refresh Token
• C.Scopes
• D.Client ID
• E.Verification Code

Comment: *

Name: *

Email: *

Verification: *

Which two security risks can be mitigated by enabling Two-Factor Authentication (2FA) in Salesforce?
Choose 2 answers

• A.Users leaving laptops unattended and not logging out of Salesforce.
• B.Users choosing passwords that are the same as their Facebook password.
• C.Users creating simple-to-guess password reset questions.
• D.Users accessing Salesforce from a public Wi-Fi access point.

Comment: *

Name: *

Email: *

Verification: *

A technology enterprise is planning to implement single sign-on login for users. When users log in to the Salesforce User object custom field, data should be populated for new and existing users.
Which two steps should an identity architect recommend?
Choose 2 answers

• A.Implement SesslonManagement Class.
• B.Implement RegistrationHandler Interface.
• C.Create and update methods.
• D.Implement Auth.SamlJitHandler Interface.

Comment: *

Name: *

Email: *

Verification: *

Uwversal Containers (UC) is building a custom employee hut) application on Amazon Web Services (AWS) and would like to store their users' credentials there. Users will also need access to Salesforce for internal operations. UC has tasked an identity architect with evaluating Afferent solutions for authentication and authorization between AWS and Salesforce.
How should an identity architect configure AWS to authenticate and authorize Salesforce users?

• A.Configure the custom employee app as a connected app.
• B.Create a custom external authentication provider.
• C.Develop a custom Auth server in AWS.
• D.Configure AWS as an OpenID Connect Provider.

Comment: *

Name: *

Email: *

Verification: *

A financial services company uses Salesforce and has a compliance requirement to track information about devices from which users log in. Also, a Salesforce Security Administrator needs to have the ability to revoke the device from which users log in.
What should be used to fulfill this requirement?

• A.Use the Activations feature to meet the compliance requirement to track device information.
• B.Use multi-factor authentication (MFA) to meet the compliance requirement to track device information.
• C.Use Login Flows to capture device from which users log in and store device and user information in a custom object.
• D.Use the Login History object to track information about devices from which users log in.

Comment: *

Name: *

Email: *

Verification: *