Universal Containers (UC) wants to use Salesforce for sales orders and a legacy of system for order fulfillment. The legacy system must update the status of orders in 65* Salesforce in real time as they are fulfilled. UC decides to use OAuth for connecting the legacy system to Salesforce. What OAuth flow should be considered that doesn't require storing credentials, client secret or refresh tokens?

• A.Username-Password flow
• B.User Agent flow
• C.Web Server flow
• D.JWT Bearer Token flow

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) is concerned that having a self-registration page will provide a means for "bots" or unintended audiences to create user records, thereby consuming licenses and adding dirty data.
Which two actions should UC take to prevent unauthorized form submissions during the self-registration process? (Choose two.)

• A.Primarily use lookup and picklist fields on the self-registration page.
• B.Use hidden fields populated via JavaScript events in the self-registration page.
• C.Use open-ended security questions and complex password requirements.
• D.Require a CAPTCHA at the end of the self-registration process.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) is building a customer community and will allow customers to authenticate using Facebook credentials. The First time the user authenticating using facebook, UC would like a customer account created automatically in their Accounting system. The accounting system has a web service accessible to Salesforce for the creation of accounts. How can the Architect meet these requirements?

• A.Create a custom application on Heroku that manages the sign-on process from Facebook.
• B.Use JIT Provisioning to automatically create the account in the accounting system.
• C.Add an Apex callout in the registration handler of the authorization provider.
• D.Use OAuth JWT flow to pass the data from Salesforce to the Accounting System.

Comment: *

Name: *

Email: *

Verification: *

Universalcontainers wants salesforce inbound Oauth-enabled integration clients to use SAML-BASED single Sign-on for authentication. What Oauth flow would be recommended in this scenario?

• A.User-Token Oauth flow
• B.SAML assertion Oauth flow
• C.User-Agent Oauth flow
• D.Web server Oauth flow

Comment: *

Name: *

Email: *

Verification: *

Universal containers (UC) employees have salesforce access from restricted ip ranges only, to protect against unauthorised access. UC wants to rollout the salesforce1 mobile app and make it accessible from any location.
Which two options should an architect recommend? Choose 2 answers

• A.Relax the ip restriction with a second factor in the connect app settings for salesforce1 mobile app
• B.Use login flow to bypass ip range restriction for the mobile app.
• C.Relax the ip restriction in the connect app settings for the salesforce1 mobile app
• D.Remove existing restrictions on ip ranges for all types of user access.

Comment: *

Name: *

Email: *

Verification: *