QUESTION: 69

Universal Containers (UC) is planning to deploy a custom mobile app that will allow users to get esignatures from its customers on their mobile devices. The mobile app connects to Salesforce to upload the e-signature as a file attachment and uses OAuth protocol for both authentication and authorization. What is the most recommended and secure OAuth scope setting that an Architect should recommend?

Id
Web
Api
Custom_permissions

Answer(s): D

Reveal Solution Next Question

QUESTION: 70

IT security at Universal Containers (UC) us concerned about recent phishing scams targeting its users and wants to add additional layers of login protection. What should an Architect recommend to address the issue?

Use the Salesforce Authenticator mobile app with two-step verification
Lock sessions to the IP address from which they originated.
Increase Password complexity requirements in Salesforce.
Implement Single Sign-on using a corporate Identity store.

Answer(s): A

Reveal Solution Next Question

QUESTION: 71

Universal Containers (UC) has an existing web application that it would like to access from Salesforce without requiring users to re-authenticate. The web application is owned UC and the UC team that is responsible for it is willing to add new JavaScript code and/or libraries to the application. What implementation should an Architect recommend to UC?

Create a Canvas app and use Signed Requests to authenticate the users.
Rewrite the web application as a set of Visualforce pages and Apex code.
Configure the web application as an item in the Salesforce App Launcher.
Add the web application as a ConnectedApp using OAuth User-Agent flow.

Answer(s): A

Reveal Solution Next Question

QUESTION: 72

Universal containers wants to implement SAML SSO for their internal salesforce users using a thirdparty IDP. After some evaluation, UC decides not to set up my domain for their salesforce.org. How does that decision impact their SSO implementation?

Neithersp - nor IDP - initiated SSO will work
Either sp - or IDP - initiated SSO will work
IDP - initiated SSO will not work
Sp-Initiated SSO will not work

Answer(s): D

Reveal Solution Next Question

Free Certified Identity and Access Management Architect Exam Braindumps (page: 18)

QUESTION: 69

QUESTION: 70

QUESTION: 71

QUESTION: 72