Salesforce Certified Platform Identity and Access Management Architect 認定 Plat-Arch-203 試験問題:

1. Universal Containers (UC) has built a custom token-based Two-factor authentication (2FA) system for their existing on-premise applications. They are now implementing Salesforce and would like to enable a Two-factor login process for it, as well. What is the recommended solution as Architect should consider?

A) Replace the custom 2FA system with an AppExchange App that supports on premise application and salesforce.
B) Use the custom 2FA system for on-premise applications and native 2FA for Salesforce.
C) Use Custom Login Flows to connect to the existing custom 2FA system for use in Salesforce.
D) Replace the custom 2FA system with Salesforce 2FA for on-premise applications and Salesforce.

2. A technology enterprise is planning to implement single sign-on login for users. When users log in to the Salesforce User object custom field, data should be populated for new and existing users.
Which two steps should an identity architect recommend?
Choose 2 answers

A) Implement RegistrationHandler Interface.
B) Implement SesslonManagement Class.
C) Create and update methods.
D) Implement Auth.SamlJitHandler Interface.

3. Universal Containers (UC) uses middleware to integrate multiple systems with Salesforce. UC has a strict, new requirement that usernames and passwords cannot be stored in any UC system. How can UC's middleware authenticate to Salesforce while adhering to this requirement?

A) Create a Connected App that supports the Refresh Token OAuth Flow
B) Create a Connected App that supports the Web Server OAuth Flow.
C) Create a Connected App that supports the JWT Bearer Token OAuth Flow.
D) Create a Connected App that supports the User-Agent OAuth Flow.

4. Northern Trail Outfitters (NTO) employees use a custom on-premise helpdesk application to request, approve, notify, and track access granted to various on-premises and cloud applications, including Salesforce. Salesforce is currently used to authenticate users.
How should NTO provision Salesforce users as soon as they are approved in the helpdesk application with the approved profiles and permission sets?

A) Have the helpdesk initiate an IdP-initiated Just-m-Time provisioning Security Assertion Markup Language flow.
B) Use Salesforce Connect to integrate with the helpdesk application.
C) Use a login flow to query the helpdesk to validate user status.
D) Build an integration that performs a remote call-in to the Salesforce SOAP or REST API.

5. Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the OAuth 2.0 user-agent flow. Application users will authenticate using username and password. They should not be forced to approve API access in the mobile app or reauthenticate for 3 months.
Which two connected app options need to be configured to fulfill this use case?
Choose 2 answers

A) Set Permitted Users to "Admin approved users are pre-authorized".
B) Set the Refresh Token Policy to expire refresh token after 3 months.
C) Set the Session Timeout value to 3 months.
D) Set Permitted Users to "All users may self-authorize".

質問と回答：