QUESTION: 65

Universal containers (UC) has a mobile application that it wants to deploy to all of its salesforce users, including customer Community users. UC would like to minimize the administration overhead, which two items should an architect recommend? Choose 2 answers

Enable the "Refresh Tokens is valid until revoked " setting in the Connected App.
Enable the "Enforce Ip restrictions" settings in the connected App.
Enable the "All users may self-authorize" setting in the Connected App.
Enable the "High Assurance session required" setting in the Connected App.

Answer(s): A,C

Reveal Solution Next Question

QUESTION: 66

The security team at Universal Containers (UC) has identified exporting reports as a high-risk action and would like to require users to be logged into Salesforce with their Active Directory (AD) credentials when doing so. For all other users of Salesforce, users should be allowed to use AD Credentials or Salesforce credentials. What solution should be recommended to prevent exporting reports except when logged in using AD credentials while maintaining the ability to view reports when logged in with Salesforce credentials?

Use SAML Federated Authentication and block access to reports when accessed through a Standard Assurance session.
Use SAML Federated Authentication and Custom SAML JIT Provisioning to dynamically and or remove a permission set that grants the Export Reports Permission.
Use SAML federated Authentication, treat SAML Sessions as High Assurance, and raise the session level required for exporting reports.
Use SAML federated Authentication with a Login Flow to dynamically add or remove a Permission Set that grants the Export Reports Permission.

Answer(s): C

Reveal Solution Next Question

QUESTION: 67

Universal Containers (UC) wants its users to access Salesforce and other SSO-enabled applications from a custom web page that UC magnets. UC wants its users to use the same set of credentials to access each of the applications. what SAML SSO flow should an Architect recommend for UC?

SP-Initiated with Deep Linking
SP-Initiated
IdP-Initiated
User-Agent

Answer(s): C

Reveal Solution Next Question

QUESTION: 68

Universal Containers (UC) uses a home-grown Employee portal for their employees to collaborate. UC decides to use Salesforce Ideas to allow employees to post Ideas from the Employee portal. When users click on some of the links in the Employee portal, the users should be redirected to Salesforce, authenticated, and presented with the relevant pages. What OAuth flow is best suited for this scenario?

Web Application flow
SAML Bearer Assertion flow
User-Agent flow
Web Server flow

Answer(s): D

Reveal Solution Next Question

Free Certified Identity and Access Management Architect Exam Braindumps (page: 17)

QUESTION: 65

QUESTION: 66

QUESTION: 67

QUESTION: 68