Identity and Access Management Designer 実際試験問題と解答 - 模擬練習 - 受験自信を増やす

Question No : 1
Northern Trail Outfitters would like to automatically create new employee users in Salesforce with an appropriate profile that maps to its Active Directory Department.
How should an identity architect implement this requirement?

A.Use the createUser method in the Just-in-Time (JIT) provisioning registration handler to assign the appropriate profile.
B.Use the updateUser method in the Just-in-Time (JIT) provisioning registration handler to assign the appropriate profile.
C.Use a login flow to collect Security Assertion Markup Language attributes and assign the appropriate profile during Just-In-Time (JIT) provisioning.
D.Make a callout during the login flow to query department from Active Directory to assign the appropriate profile.

正解:

Question No : 2
Universal Containers (UC) uses Salesforce as a CRM and identity provider (IdP) for their Sales Team to seamlessly login to intemaJ portals. The IT team at UC is now evaluating Salesforce to act as an IdP for its remaining employees.
Which Salesforce license is required to fulfill this requirement?

A.External Identity
B.Identity Verification
C.Identity Connect
D.Identity Only

正解:

Question No : 3
Which three types of attacks would a 2-Factor Authentication solution help garden against?

A.Key logging attacks
B.Network perimeter attacks
C.Phishing attacks
D.Dictionary attacks
E.Man-in-the-middle attacks

正解:

Question No : 4
A financial services company uses Salesforce and has a compliance requirement to track information about devices from which users log in. Also, a Salesforce Security Administrator needs to have the ability to revoke the device from which users log in.
What should be used to fulfill this requirement?

A.Use multi-factor authentication (MFA) to meet the compliance requirement to track device information.
B.Use the Activations feature to meet the compliance requirement to track device information.
C.Use the Login History object to track information about devices from which users log in.
D.Use Login Flows to capture device from which users log in and store device and user information in a custom object.

正解:

Question No : 5
Universal containers (UC) is setting up Delegated Authentication to allow employees to log in using their corporate credentials. UC's security team is concerned about the risk of exposing the corporate login service on the Internet and has asked that a reliable trust mechanism be put in place between the login service and salesforce .
What mechanism should an architect put in place to enable a trusted connection between the login services and salesforce?

A.Include client ID and client secret in the login header callout.
B.Set up a proxy server for the login service in the DM
C.Require the use of Salesforce security Tokens on password.
D.Enforce mutual Authentication between systems using SS

正解:

Question No : 6
Universal Containers (UC) has an existing Salesforce org configured for SP-Initiated SAML SSO with their Idp. A second Salesforce org is being introduced into the environment and the IT team would like to ensure they can use the same Idp for new org .
What action should the IT team take while implementing the second org?

A.Use the same SAML Identity location as the first org.
B.Use a different Entity ID than the first org.
C.Use the same request bindings as the first org.
D.Use the Salesforce Username as the SAML Identity Type.

正解:

Question No : 7
Universal containers (UC) wants to integrate a Web application with salesforce. The UC team has implemented the Oauth web-server Authentication flow for authentication process .
Which two considerations should an architect point out to UC? Choose 2 answers

A.The web application should be hosted on a secure server.
B.The web server must be able to protect consumer privacy
C.The flow involves passing the user credentials back and forth.
D.The flow will not provide an Oauth refresh token back to the server.

正解:

Question No : 8
Universal containers (UC) has decided to build a new, highly sensitive application on Force.com platform. The security team at UC has decided that they want users to provide a fingerprint in addition to username/Password to authenticate to this application .
How can an architect support fingerprints as a form of identification for salesforce Authentication?

A.Use salesforce Two-factor Authentication with callouts to a third-party fingerprint scanning application.
B.Use Delegated Authentication with callouts to a third-party fingerprint scanning application.
C.Use an appexchange product that does fingerprint scanning with native salesforce identity confirmation.
D.Use custom login flows with callouts to a third-party fingerprint scanning application.

正解:

Question No : 9
Universal Containers (UC) is looking to build a Canvas app and wants to use the corresponding Connected App to control where the app is visible .
Which two options are correct in regards to where the app can be made visible under the Connected App setting for the Canvas app? Choose 2 answers

A.As part of the body of a Salesforce Knowledge article.
B.In the mobile navigation menu on Salesforce for Android.
C.The sidebar of a Salesforce Console as a console component.
D.Included in the Call Control Tool that's part of Open CT

正解:

Question No : 10
Which two things should be done to ensure end users can only use single sign-on (SSO) to login in to Salesforce? Choose 2 answers

A.Enable My Domain and select "Prevent login from https://login.salesforce.com".
B.Request Salesforce Support to enable delegated authentication.
C.Once SSO is enabled, users are only able to login using Salesforce credentials.
D.Assign user "is Single Sign-on Enabled" permission via profile or permission set.

正解:

Question No : 11
Universal containers uses an Employee portal for their employees to collaborate. employees access the portal from their company's internal website via SSO. It is set up to work with Active Directory .
What is the role of Active Directory in this scenario?

A.Identity store
B.Authentication store
C.Identity provider
D.Service provider

正解:

Question No : 12
customer service representatives at Universal containers (UC) are complaining that whenever they click on links to case records and are asked to login with SAML SSO, they are being redirected to the salesforce home tab and not the specific case record .
What item should an architect advise the identity team at UC to investigate first?

A.My domain is configured and active within salesforce.
B.The salesforce SSO settings are using http post
C.The identity provider is correctly preserving the Relay state
D.The users have the correct Federation ID within salesforce.

正解:

Question No : 13
Universal Containers (UC) would like its community users to be able to register and log in with Linkedin or Facebook Credentials. UC wants users to clearly see Facebook &Linkedin Icons when they register and login .
What are the two recommended actions UC can take to achieve this Functionality? Choose 2 answers

A.Enable Facebook and Linkedin as Login options in the login section of the Community configuration.
B.Create custom Registration Handlers to link Linkedin and facebook accounts to user records.
C.Store the Linkedin or Facebook user IDs in the Federation ID field on the Salesforce User record.
D.Create custom buttons for Facebook and inkedin using JAVAscript/CSS on a custom Visualforce page.

正解:

Question No : 14
Northern Trail Outfitters (NTO) is planning to build a new customer service portal and wants to use password less login, allowing customers to login with a one-time passcode sent to them via email or SMS.
How should the quantity of required Identity Verification Credits be estimated?

A.Each community comes with 10,000 Identity Verification Credits per month and only customers with more than 10,000 logins a month should estimate additional SMS verifications needed.
B.Identity Verification Credits are consumed with each SMS (text message) sent and should be estimated based on the number of login verification challenges for SMS verification users.
C.Identity Verification Credits are consumed with each verification sent and should be estimated based on the number of logins that will incur a verification challenge.
D.Identity Verification Credits are a direct add-on license based on the number of existing member-based or login-based Community licenses.

正解:

Question No : 15
Northern Trail Outfitters (NTO) uses a Security Assertion Markup Language (SAML)-based Identity Provider (idP) to authenticate employees to all systems. The IdP authenticates users against a Lightweight Directory Access Protocol (LDAP) directory and has access to user information. NTO wants to minimize Salesforce license usage since only a small percentage of users need Salesforce.
What is recommended to ensure new employees have immediate access to Salesforce using their current IdP?

A.Install Salesforce Identity Connect to automatically provision new users in Salesforce the first time they attempt to login.
B.Build an integration that queries LDAP periodically and creates new active users in Salesforce.
C.Configure Just-in-Time provisioning using SAML attributes to create new Salesforce users as necessary when a new user attempts to login to Salesforce.
D.Build an integration that queries LDAP and creates new inactive users in Salesforce and use a login flow to activate the user at first login.

正解:

Salesforce Identity and Access Management Designer 問題練習