Plat-Arch-203 by Salesforce Actual Free Exam Questions And Answers

Question 1

Universal containers uses an Employee portal for their employees to collaborate. employees access the portal from their company's internal website via SSO. It is set up to work with Active Directory. What is the role of Active Directory in this scenario?

A. Identity store

B. Service provider

C. Identity provider

D. Authentication store

Discussion 0

Correct Answer: C Vote an answer

Question 2

Universal Containers (UC) is considering a Customer 360 initiative to gain a single source of the truth for its customer data across disparate systems and services. UC wants to understand the primary benefits of Customer 360 Identity and how it contributes ato successful Customer 360 Truth project.
What are two are key benefits of Customer 360 Identity as it relates to Customer 360?
Choose 2 answers

A. Customer 360 Identity not only provides a unified sign up and sign in experience, but also tracks anonymous user activity prior to signing up so organizations can understand user activity before and after the users identify themselves.

B. Customer 360 Identity enables an organization to build a single login for each of its customers, giving the organization an understanding of the user's login activity across all its digital properties and applications.

C. Customer 360 Identity supports multiple brands so you can deliver centralized identity services and correlation of user activity,

D. Customer 360 Identity automatically integrates with Customer 360 Data Manager and Customer 360 Audiences to seamlessly populate all user data.

Discussion 0

Correct Answer: B,C Vote an answer

Question 3

Universal Containers (UC) is building an authenticated Customer Community for its customers. UC does not want customer credentials stored in Salesforce and is confident its customers would be willing to use their social media credentials to authenticate to the community. Which two actions should an Architect recommend UC to take?

A. Use Delegated Authentication to call the Twitter login API to authenticate users.

B. Create a Custom Apex Registration Handler to handle new and existing users.

C. Configure SSO Settings For Facebook to serve as a SAML Identity Provider.

D. Configure an Authentication Provider for LinkedIn Social Media Accounts.

Discussion 0

Correct Answer: B,D Vote an answer

Question 4

Universal containers wants to implement SAML SSO for their internal salesforce users using a third-party IDP. After some evaluation, UC decides not to set up my domain for their salesforce.org. How does that decision impact their SSO implementation?

A. Neithersp - nor IDP - initiated SSO will work

B. IDP - initiated SSO will not work

C. Either sp - or IDP - initiated SSO will work

D. Sp-Initiated SSO will not work

Discussion 0

Correct Answer: D Vote an answer

Question 5

Universal Containers (UC) has built a custom token-based Two-factor authentication (2FA) system for their existing on-premise applications. They are now implementing Salesforce and would like to enable a Two-factor login process for it, as well. What is the recommended solution as Architect should consider?

A. Use Custom Login Flows to connect to the existing custom 2FA system for use in Salesforce.

B. Replace the custom 2FA system with Salesforce 2FA for on-premise applications and Salesforce.

C. Replace the custom 2FA system with an AppExchange App that supports on premise application and salesforce.

D. Use the custom 2FA system for on-premise applications and native 2FA for Salesforce.

Discussion 0

Correct Answer: B Vote an answer

Question 6

Universal Containers (UC) has a desktop application to collect leads for marketing campaigns. UC wants to extend this application to integrate with Salesforce to create leads. Integration between the desktop application and Salesforce should be seamless. What Authorization flow should the Architect recommend?

A. Username and Password Flow

B. Web Server Authentication Flow

C. JWT Bearer Token Flow

D. User Agent Flow

Discussion 0

Correct Answer: D Vote an answer

Question 7

Containers (UC) has an existing Customer Community. UC wants to expand the self-registration capabilities such that customers receive a different community experience based on the data they provide during the registration process. What is the recommended approach an Architect Should recommend to UC?

A. Create separate login flows corresponding to the different community user personas.

B. Modify the existing Communities registration controller to assign different profiles.

C. Create an After Insert Apex trigger on the user object to assign specific custom permissions.

D. Modify the Community pages to utilize specific fields on the User and Contact records.

Discussion 0

Correct Answer: D Vote an answer

Question 8

A financial enterprise is planning to set up a user authentication mechanism to login to the Salesforce system. Due to regulatory requirements, the CIO of the company wants user administration, including passwords and authentication requests, to be managed by an external system that is only accessible via a SOAP webservice.
Which authentication mechanism should an identity architect recommend to meet the requirements?

A. Delegated Authentication

B. OAuth Web-Server Flow

C. Just-in-Time Provisioning

D. Identity Connect

Discussion 0

Correct Answer: A Vote an answer

Question 9

Universal containers (UC) wants to implement a partner community. As part of their implementation, UC would like to modify both the Forgot password and change password experience with custom branding for their partner community users. Which 2 actions should an architect recommend to UC? Choose 2 answers

A. Build a community builder page for the change password experience and Custom Visualforce page for the Forgot password experience.

B. Build a custom visualforce page for both the change password and Forgot password experiences.

C. Build a custom visualforce page for the change password experience and a community builder page for the Forgot password experience.

D. Build a community builder page for both the change password and Forgot password experiences.

Discussion 0

Correct Answer: B,C Vote an answer

Question 10

An Enterprise is using a Lightweight Directory Access Protocol (LDAP ) server as the only point for user authentication with a username/password. Salesforce delegated authentication is configured to integrate Salesforce under single sign-on (SSO).
Mow can end users change their password?

A. Users can change it on the enterprise LDAP authentication portal.

B. Users once logged In, can go to the Change Password screen in Salesforce.

C. Users can click on the "Forgot your Password" link on the Salesforce.com login page.

D. Users can request the Salesforce Admin to reset their password.

Discussion 0

Correct Answer: D Vote an answer

Question 11

In a typical SSL setup involving a trusted party and trusting party, what consideration should an Architect take into account when using digital certificates?

A. Use of self-signed certificate leads to lower maintenance for trusted party because multiple self-signed certs need to be maintained.

B. Use of self-signed certificate leads to higher maintenance for trusted party because they have to act as the trusted CA

C. Use of self-signed certificate leads to higher maintenance for trusting party because the cert needs to be added to their truststore.

D. Use of self-signed certificate leads to lower maintenance for trusting party because there is no trusted CA cert to maintain.

Discussion 0

Correct Answer: D Vote an answer

Question 12

Northern Trail Outfitters want to allow its consumer to self-register on it business-to-consumer (B2C) portal that is built on Experience Cloud. The identity architect has recommended to use Person Accounts.
Which three steps need to be configured to enable self-registration using person accounts?
Choose 3 answers

A. Enable access to person and business account record types under Public Access Settings.

B. Contact Salesforce Support to enable business accounts.

C. Contact Salesforce Support to enable person accounts.

D. Under Login and Registration settings, ensure that the default account field is empty.

E. Set organization-wide default sharing for Contact to Public Read Only.

Discussion 0

Correct Answer: A,C,D Vote an answer

Question 13

An Identity and Access Management (IAM) Architect is recommending Identity Connect to integrate Microsoft Active Directory (AD) with Salesforce for user provisioning, deprovisioning and single sign-on (SSO).
Which feature of Identity Connect is applicable for this scenano?

A. If the number of provisioned users exceeds Salesforce licence allowances, identity Connect will start disabling the existing

B. When configured, Identity Connect acts as an identity provider to both Active Directory and Salesforce, thus providing SSO as a default feature.

C. When Identity Connect is in place, if a user is deprovisioned in an on-premise AD, the user's Salesforce session Is revoked Immediately.

D. Identity Connect can be deployed as a managed package on salesforce org, leveraging High Availability of Salesforce Platform out-of-the-box.

Discussion 0

Correct Answer: C Vote an answer

Question 14

After a recent audit, universal containers was advised to implement Two-factor Authentication for all of their critical systems, including salesforce. Which two actions should UC consider to meet this requirement? Choose 2 answers

A. Require users to enter a second password after the first Authentication

B. Require users to provide their RSA token along with their credentials.

C. Require users to supply their email and phone number, which gets validated.

D. Require users to use a biometric reader as well as their password

Discussion 0

Correct Answer: B,D Vote an answer

Salesforce Certified Platform Identity and Access Management Architect - Plat-Arch-203 Exam Practice Test

Contact Us

Useful Links

Latest Updated