Plat-Arch-203 試験問題を無料オンラインアクセス

Universal containers (UC) employees have salesforce access from restricted ip ranges only, to protect against unauthorised access. UC wants to rollout the salesforce1 mobile app and make it accessible from any location. Which two options should an architect recommend? Choose 2 answers

• A.Relax the ip restriction with a second factor in the connect app settings for salesforce1 mobile app
• B.Use login flow to bypass ip range restriction for the mobile app.
• C.Remove existing restrictions on ip ranges for all types of user access.
• D.Relax the ip restriction in the connect app settings for the salesforce1 mobile app

Universal Containers (UC) uses middleware to integrate multiple systems with Salesforce. UC has a strict, new requirement that usernames and passwords cannot be stored in any UC system. How can UC's middleware authenticate to Salesforce while adhering to this requirement?

• A.Create a Connected App that supports the Web Server OAuth Flow.
• B.Create a Connected App that supports the Refresh Token OAuth Flow
• C.Create a Connected App that supports the JWT Bearer Token OAuth Flow.
• D.Create a Connected App that supports the User-Agent OAuth Flow.

Universal containers (UC) has a mobile application that it wants to deploy to all of its salesforce users, including customer Community users. UC would like to minimize the administration overhead, which two items should an architect recommend? Choose 2 answers

• A.Enable the "Enforce Ip restrictions" settings in the connected App.
• B.Enable the "Refresh Tokens is valid until revoked " setting in the Connected App.
• C.Enable the "All users may self-authorize" setting in the Connected App.
• D.Enable the "High Assurance session required" setting in the Connected App.

Universal containers (UC) has implemented ansp-Initiated SAML flow between an external IDP and salesforce. A user at UC is attempting to login to salesforce1 for the first time and is being prompted for salesforce credentials instead of being shown the IDP login page. What is the likely cause of the issue?

• A.The user has not configured the salesforce1 mobile app to use my domain for login
• B.The "Redirect to identity provider" option has not been selected the SAML configuration.
• C.The user has not been granted the "Enable single Sign-on" permission
• D.The "Redirect to Identity Provider" option has been selected in the my domain configuration.

Universal containers (UC) does my domain enable in the context of a SAML SSO configuration? Choose 2 answers

• A.Resource deep linking
• B.App launcher
• C.Login forensics
• D.SSO from salesforce1 mobile app.