An identity architect has built a native mobile application and plans to integrate it with a Salesforce Identity solution. The following are the requirements for the solution:
1. Users should not have to login every time they use the app.
2. The app should be able to make calls to the Salesforce REST API.
3. End users should NOT see the OAuth approval page.
How should the identity architect configure the Salesforce connected app to meet the requirements?

• A.Enable the API Scope and Offline Access Scope on the connected app, and then set the Connected App access settings to "User may self authorize".
• B.Enable the Full Access Scope and then set the connected app access settings to "Admin Pre-Approved".
• C.Enable the API Scope and Offline Access Scope on the connected app, and then set the connected app to access settings to 'Admin Pre-Approved".
• D.Enable the API Scope and Offline Access Scope, upload a certificate so JWT Bearer Flow can be used and then set the connected app access settings to "Admin Pre-Approved".

Comment: *

Name: *

Email: *

Verification: *

Universal Containers allows employees to use a mobile device to access Salesforce for daily operations using a hybrid mobile app. This app uses Mobile software development kits (SDK), leverages refresh token to regenerate access token when required and is distributed as a private app.
The chief security officer is rolling out an org wide compliance policy to enforce re-venfication of devices if an employee has not logged in from that device in the last week.
Which connected app setting should be leveraged to comply with this policy change?

• A.Session Policy - Set timeout value of the connected app to 7 days.
• B.Scope - Deny refresh_token scope for this connected app.
• C.Permitted User - Ask admins to maintain a list of users who are permitted based on last login date.
• D.Refresh Token Policy - Expire the refresh token if it has not been used for 7 days.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) is both a Salesforce and Google Apps customer. The UC IT team would like to manage the users for both systems in a single place to reduce administrative burden.
Which two recommended ways can the IT team provision users and allow Single Sign-on between Salesforce and Google Apps? (Choose two.)

• A.Build a custom app running on Heroku as the Identity Provider that can sync user information between Salesforce and Google Apps.
• B.Use Salesforce as the Identity Provider and Google Apps as a Service Provider and configure User Provisioning for Connected Apps.
• C.Use Identity Connect as the Identity Provider for both Salesforce and Google Apps and manage the provisioning from there.
• D.Use a third-party product as the Identity Provider for both Salesforce and Google Apps and manage the provisioning from there.

Comment: *

Name: *

Email: *

Verification: *

A public sector agency is setting up an identity solution for its citizens using a Community built on Experience Cloud and requires the new user registration functionality to capture first name, last name, and phone number. The phone number will be used for identity verification.
Which feature should an identity architect recommend to meet the requirements?

• A.Use Login Discovery
• B.Integrate with social websites (Facebook, Linkedin. Twitter)
• C.Use an external Identity Provider
• D.Create a custom Lightning Web Component

Comment: *

Name: *

Email: *

Verification: *

Universal containers (UC) employees have salesforce access from restricted ip ranges only, to protect against unauthorised access. UC wants to rollout the salesforce1 mobile app and make it accessible from any location. Which two options should an architect recommend? Choose 2 answers

• A.Remove existing restrictions on ip ranges for all types of user access.
• B.Relax the ip restriction with a second factor in the connect app settings for salesforce1 mobile app
• C.Use login flow to bypass ip range restriction for the mobile app.
• D.Relax the ip restriction in the connect app settings for the salesforce1 mobile app

Comment: *

Name: *

Email: *

Verification: *