Identity-and-Access-Management-Architect 試験問題を無料オンラインアクセス

Northern Trail Outfitters (NTO) has an existing business-to-consumer (B2C) website that does NOT support single sign-on standards, such as Security Assertion Markup Language (SAML) or OAuth. NTO wants to use Salesforce Identity to register and authenticate new customers on the website.
Which three Salesforce features should an Identity architect use in order to provide social sign-in capabilities for the website?
Choose 3 answers

• A.Delegated Authentication
• B.Authentication Providers
• C.Connected Apps
• D.Identity Connect
• E.Embedded Login

Universal Containers want users to be able to log in to the Salesforce mobile app with their Active Directory password. Employees are unable to use mobile VPN.
Which two options should an identity architect recommend to meet the requirement?
Choose 2 answers

• A.Salesforce Identity Connect
• B.Configure Cloud Provider Load Balancer
• C.Salesforce Trigger & Field on Contact Object
• D.Active Directory Password Since Plugin

Northern Trail Outfitters (NTO) believes a specific user account may have been compromised. NTO inactivated the user account and needs to perform a forensic analysis and identify signals that could indicate a breach has occurred.
What should NTO's first step be in gathering signals that could indicate account compromise?

• A.download the Setup Audit Trail and review all recent activities performed by the user.
• B.download the identity provider Event log and contact the details of activities performed by the user.
• C.Review the User record and evaluate the login and transaction history.
• D.download the Login history and evaluate the details of topics performed by the user.

An identity architect ' s client has a homegrown identity provider (IdP). Salesforce is used as the service provider (SP). The head of IT is worried that during a SP initiated single sign-on (SSO), the Security Assertion Markup Language (SAML) request content will be altered.
What should the identity architect recommend to make sure that there is additional trust between the SP and the IdP?

• A.Ensure that the Issuer and Assertion Consumer Service (ACS) URL is properly configured between SP and IDP.
• B.Ensure that on the SSO settings page, the " Request Signing Certificate " field has a selfsigned certificate.
• C.Encrypt the SAML Request using certification authority (CA) signed certificate and decrypt on IdP.
• D.Ensure that there is an HTTPS connection between IDP and SP.

A farming enterprise offers smart farming technology to its farmer customers, which includes a variety of sensors for livestock tracking, pest monitoring, climate monitoring etc.
They plan to store all the data in Salesforce. They would also like to ensure timely maintenance of the installed sensors. They have engaged a Salesforce Architect to propose an appropriate way to send an alert when something goes wrong.
Which OAuth flow should the architect recommend?

• A.OAuth 2.0 SAML Bearer Assertion Flow
• B.OAuth 2.0 Asset Token Flow
• C.OAuth 2.0 JWT Bearer Token Flow
• D.OAuth 2.0 Device Authentication Flow