Identity-and-Access-Management-Designer 試験問題を無料オンラインアクセス

Universal containers uses an Employee portal for their employees to collaborate. employees access the portal from their company's internal website via SSO. It is set up to work with Active Directory. What is the role of Active Directory in this scenario?

• A.Identity store
• B.Service provider
• C.Identity provider
• D.Authentication store

How should an Architect force users to authenticate with Two-factor Authentication (2FA) for Salesforce only when not connected to an internal company network?

• A.Add the list of company's network IP addresses to the Login Range list under 2FA Setup.
• B.Use Custom Login Flows with Apex to detect the user's IP address and prompt for 2FA if needed.
• C.Apply the "Two-factor Authentication for User Interface Logins" permission and Login IP Ranges for all Profiles.
• D.Use an Apex Trigger on the UserLogin object to detect the user's IP address and prompt for 2FA if needed.

Universal Containers (UC) uses Salesforce for its customer service agents. UC has a proprietary system for order tracking which supports Security Assertion Markup Language (SAML) based single sign-on. The VP of customer service wants to ensure only active Salesforce users should be able to access the order tracking system which is only visible within Salesforce.
What should be done to fulfill the requirement?
Choose 2 answers

• A.Customize Order Tracking to initiate a REST call to validate users in Salesforce after login.
• B.Set up the Corporate Identity store as an identity provider (IdP) for Order Tracking,
• C.Setup Order Tracking as a Canvas app in Salesforce to POST IdP initiated SAML assertion.
• D.Setup Salesforce as an identity provider (IdP) for order Tracking.

Universal Containers (UC) has implemented SAML-based SSO solution for use with their multi-org Salesforce implementation, utilizing one of the the orgs as the Identity Provider. One user is reporting that they can log in to the Identity Provider org but get a generic SAML error message when accessing the other orgs. Which two considerations should the architect review to troubleshoot the issue? Choose 2 answers

• A.The Federation ID must be a valid Salesforce Username
• B.The Federation ID must is case sensitive
• C.The Federation ID must be populated on the user record.
• D.The Federation ID must be in the form of an email address.

Universal containers (UC) has a custom, internal-only, mobile billing application for users who are commonly out of the office. The app is configured as a connected App in salesforce. Due to the nature of this app, UC would like to take the appropriate measures to properly secure access to the app. Which two are recommendations to make the UC? Choose 2 answers

• A.Disallow the use of single Sign-on for any users of the mobile app.
• B.Require high assurance sessions in order to use the connected App
• C.Use Google Authenticator as an additional part of the logical processes.
• D.Set login IP ranges to the internal network for all of the app users profiles.