Salesforce Certified Platform Identity and Access Management Architect 認定 Plat-Arch-203 試験問題:

1. Which three are capabilities of SAML-based Federated authentication? Choose 3 answers

A) Centralized federation provides single point of access, control and auditing.
B) Trust relationships between Identity Provider and Service Provider are required.
C) Web applications with no passwords are more secure and stronger against attacks.
D) SAML tokens can be in XML or JSON format and can be used interchangeably.
E) Access tokens are used to access resources on the server once the user is authenticated.

2. When designing a multi-branded Customer Identity and Access Management solution on the Salesforce Platform, how should an identity architect ensure a specific brand experience in Salesforce is presented?

A) The Experience ID, which can be included in OAuth/Open ID flows and Security Assertion Markup Language (SAML) flows as a URL parameter.
B) The Audience ID, which can be set in a shared cookie.
C) Add a custom parameter to the service provider's OAuth/SAML call and implement logic on its login page to apply branding based on the parameters value.
D) Provide a brand picker that the end user can use to select its sub-brand when they arrive on salesforce.

3. An identity architect's client has a homegrown identity provider (IdP). Salesforce is used as the service provider (SP). The head of IT is worried that during a SP initiated single sign-on (SSO), the Security Assertion Markup Language (SAML) request content will be altered.
What should the identity architect recommend to make sure that there is additional trust between the SP and the IdP?

A) Ensure that there is an HTTPS connection between IDP and SP.
B) Ensure that on the SSO settings page, the "Request Signing Certificate" field has a self-signed certificate.
C) Encrypt the SAML Request using certification authority (CA) signed certificate and decrypt on IdP.
D) Ensure that the Issuer and Assertion Consumer service (ACS) URL is property configured between SP and IDP.

4. Universal containers (UC) wants to integrate a Web application with salesforce. The UC team has implemented the Oauth web-server Authentication flow for authentication process. Which two considerations should an architect point out to UC? Choose 2 answers

A) The flow involves passing the user credentials back and forth.
B) The web server must be able to protect consumer privacy
C) The web application should be hosted on a secure server.
D) The flow will not provide an Oauth refresh token back to the server.

5. Universal containers (UC) is building a mobile application that will make calls to the salesforce REST API. Additionally UC would like to provide the optimal experience for its mobile users. Which two OAuth scopes should UC configure in the connected App? Choose 2 answers

A) API
B) Web
C) full
D) Refresh token

質問と回答：