Salesforce Certified Platform Identity and Access Management Architect 認定 Plat-Arch-203 試験問題:

1. Universal Containers (UC) wants to build a few applications that leverage the Salesforce REST API. UC has asked its Architect to describe how the API calls will be authenticated to a specific user. Which two mechanisms can the Architect provide? Choose 2 Answers

A) Authentication Token
B) Session ID
C) Refresh Token
D) Access Token

2. Universal containers (UC) wants to implement a partner community. As part of their implementation, UC would like to modify both the Forgot password and change password experience with custom branding for their partner community users. Which 2 actions should an architect recommend to UC? Choose 2 answers

A) Build a custom visualforce page for both the change password and Forgot password experiences.
B) Build a community builder page for the change password experience and Custom Visualforce page for the Forgot password experience.
C) Build a community builder page for both the change password and Forgot password experiences.
D) Build a custom visualforce page for the change password experience and a community builder page for the Forgot password experience.

3. Universal containers (UC) has an e-commerce website while customers can buy products, make payments, and manage their accounts. UC decides to build a customer Community on Salesforce and wants to allow the customers to access the community for their accounts without logging in again. UC decides to implement ansp-Initiated SSO using a SAML-BASED complaint IDP. In this scenario where salesforce is the service provider, which two activities must be performed in salesforce to make sp-Initiated SSO work? Choose 2 answers

A) Create a connected App
B) Configure Delegated Authentication
C) Set up my domain
D) Configure SAML SSO settings.

4. IT security at Unversal Containers (UC) us concerned about recent phishing scams targeting its users and wants to add additional layers of login protection. What should an Architect recommend to address the issue?

A) Increase Password complexity requirements in Salesforce.
B) Implement Single Sign-on using a corporate Identity store.
C) Use the Salesforce Authenticator mobile app with two-step verification
D) Lock sessions to the IP address from which they originated.

5. Universal containers (UC) would like to enable SAML-BASED SSO for a salesforce partner community. UC has an existing ldap identity store and a third-party portal. They would like to use the existing portal as the primary site these users access, but also want to allow seamless access to the partner community. What SSO flow should an architect recommend?

A) IDP-initiated
B) Sp-Initiated
C) User-Agent
D) Web server

質問と回答：