QUESTION: 53

Which two statements are capable of Identity Connect? Choose 2 answers

Synchronization of Salesforce Permission Set Licence Assignments.
Supports both Identity-Provider-Initiated and Service-Provider-Initiated SSO.
Support multiple orgs connecting to multiple Active Directory servers.
Automated user synchronization and de-activation.

Answer(s): B,D

Universal Containers (UC) employees have Salesforce access from restricted IP ranges only, to protect against unauthorized access. UC wants to roll out the Salesforce1 mobile app and make it accessible from any location. Which two options should an Architect recommend? Choose 2 answers

Relax the IP restriction with a second factor in the Connect App settings for Salesforce1 mobile app.
Remove existing restrictions on IP ranges for all types of user access.
Relax the IP restrictions in the Connect App settings for the Salesforce1 mobile app.
Use Login Flow to bypass IP range restriction for the mobile app.

Answer(s): A,C

Reveal Solution Next Question

QUESTION: 55

Universal Containers (UC) uses Global Shipping (GS) as one of their shipping vendors. Regional leads of GS need access to UC's Salesforce instance for reporting damage of goods using Cases. The regional leads also need access to dashboards to keep track of regional shipping KPIs. UC internally uses a third-party cloud analytics tool for capacity planning and UC decided to provide access to this tool to a subset of GS employees. In addition to regional leads, the GS capacity planning team would benefit from access to this tool. To access the analytics tool, UC IT has set up Salesforce as the Identity provider for Internal users and would like to follow the same approach for the GS users as well. What are the most appropriate license types for GST reginal Leads and the GS Capacity Planners? Choose 2 Answers

Customer Community Plus license for GS Regional Leads and External Identity for GS Capacity Planners.
Customer Community Plus license for GS Regional Leads and Customer Community license for GS Capacity Planners.
Identity Licence for GS Regional Leads and External Identity license for GS capacity Planners.
Customer Community license for GS Regional Leads and Identity license for GS Capacity Planners.

Answer(s): B,D

Reveal Solution Next Question

QUESTION: 56

Universal Containers is considering using Delegated Authentication as the sole means of Authenticating of Salesforce users. A Salesforce Architect has been brought in to assist with the
implementation. What two risks Should the Architect point out? Choose 2 answers

Delegated Authentication is enabled or disabled for the entire Salesforce org.
UC will be required to develop and support a custom SOAP web service.
Salesforce users will be locked out of Salesforce if the web service goes down.
The web service must reside on a public cloud service, such as Heroku.

Answer(s): B,C

Reveal Solution Next Question

Free Certified Identity and Access Management Architect Exam Braindumps (page: 14)

QUESTION: 53

QUESTION: 54

QUESTION: 55

QUESTION: 56