A company with 15,000 employees is using Salesforce and would like to take the necessary steps to highlight or curb fraudulent activity.
Which tool should be used to track login data, such as the average number of logins, who logged in more than the average number of times and who logged in during non-business hours?

• A.Login Inspector
• B.Login History
• C.Login Forensics
• D.Login Report

Comment: *

Name: *

Email: *

Verification: *

Which two capabilities does My Domain enable in the context of a SAML SSO configuration? Choose 2 answers

• A.Login Forensics
• B.SSO from Salesforce Mobile App
• C.App Launcher
• D.Resource deep linking

Comment: *

Name: *

Email: *

Verification: *

The security team at Universal Containers has identified exporting reports as a high-risk action and would like to require users to be logged into Salesforce with their Active Directory (AD) credentials when doing so.
For all other uses of Salesforce, users should be allowed to use AD credentials or Salesforce credentials.
What solution should be recommended to prevent exporting reports except when logged in using AD credentials while maintaining the ability to view reports when logged in with Salesforce credentials?

• A.Use SAML Federated Authentication with a Login Flow to dynamically add or remove a Permission Set that grants the Export Reports permission.
• B.Use SAML Federated Authentication and Custom SAML JIT Provisioning to dynamically add or remove a Permission Set that grants the Export Reports permission.
• C.Use SAML Federated Authentication and block access to reports when accessed through a Standard Assurance session.
• D.Use SAML Federated Authentication, treat SAML Sessions as High Assurance, and raise the session level required for exporting reports.

Comment: *

Name: *

Email: *

Verification: *

After a recent audit, universal containers was advised to implement Two-factor Authentication for all of their critical systems, including salesforce. Which two actions should UC consider to meet this requirement?
Choose 2 answers

• A.Require users to use a biometric reader as well as their password
• B.Require users to enter a second password after the first Authentication
• C.Require users to supply their email and phone number, which gets validated.
• D.Require users to provide their RSA token along with their credentials.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) wants its users to access Salesforce and other SSO-enabled applications from a custom web page that UC magnets. UC wants its users to use the same set of credentials to access each of the applications. what SAML SSO flow should an Architect recommend for UC?

• A.SP-Initiated
• B.IdP-Initiated
• C.User-Agent
• D.SP-Initiated with Deep Linking

Comment: *

Name: *

Email: *

Verification: *