Plat-Arch-203 試験問題を無料オンラインアクセス

Universal Containers (UC) has Active Directory (AD) as their enterprise identity store and would like to use it for Salesforce user authentication. UC expects to synchronize user data between Salesforce and AD and Assign the appropriate Profile and Permission Sets based on AD group membership. What would be the optimal way to implement SSO?

• A.Use Microsoft Access control Service as the Authentication provider.
• B.Use Active Directory with Reverse Proxy as the Identity Provider.
• C.Use Salesforce Identity Connect as the Identity Provider.
• D.Use Active Directory Federation Service (ADFS) as the Identity Provider.

The CMO of an advertising company has invited an Identity and Access Management (IAM) specialist to discuss Salesforce out-of-box capabilities for configuring the company*s login and registration experience on Salesforce Experience Cloud.
The CMO is looking to brand the login page with the company's logo, background color, login button color, and dynamic right-frame from an external URL.
Which two solutions should the IAM specialist recommend?
Choose 2 answers

• A.Build custom pages for branding requirements in Experience Cloud.
• B.Login & Registration pages can be branded in the Community Administration settings.
• C.Build custom site pages for reset and forgot password features.
• D.Use Experience Builder to build branded Reset and Forgot Password pages.

Universal containers (UC) has multiple salesforce orgs and would like to use a single identity provider to access all of their orgs. How should UC'S architect enable this behavior?

• A.Ensure that users have the same Federation ID value in their user records in all of UC's salesforce orgs.
• B.Ensure that users have the same alias value in their user records in all of UC's salesforce orgs.
• C.Ensure that users have the same email value in their user records in all of UC's salesforce orgs.
• D.Ensure the same username is allowed in multiple orgs by contacting salesforce support.

The security team at Universal containers(UC) has identified exporting reports as a high-risk action and would like to require users to be logged into salesforce with their active directory (AD) credentials when doing so. For all other uses of Salesforce, Users should be allowed to use AD credentials or salesforce credentials. What solution should be recommended to prevent exporting reports except when logged in using AD credentials while maintaining the ability to view reports when logged in with salesforce credentials?

• A.Use SAML Federated Authentication, treat SAML sessions as high assurance, and raise the session level required for exporting reports.
• B.Use SAML Federated Authentication and Custom SAML jit provisioning to dynamically add or remove a permission set that grants the Export Reports permission.
• C.Use SAML Federated Authentication and block access to reports when accesses through a standard assurance session.
• D.Use SAML Federated Authentication with a login flow to dynamically add or remove a permission set that grants the export reports permission.

A financial services company uses Salesforce and has a compliance requirement to track information about devices from which users log in. Also, a Salesforce Security Administrator needs to have the ability to revoke the device from which users log in.
What should be used to fulfill this requirement?

• A.Use the Activations feature to meet the compliance requirement to track device information.
• B.Use multi-factor authentication (MFA) to meet the compliance requirement to track device information.
• C.Use the Login History object to track information about devices from which users log in.
• D.Use Login Flows to capture device from which users log in and store device and user information in a custom object.