QUESTION: 97

Universal containers (UC) has decided to use identity connect as it's identity provider. UC uses active directory(AD) and has a team that is very familiar and comfortable with managing ad groups. UC would like to use AD groups to help configure salesforce users. Which three actions can AD groups control through identity connect? Choose 3 answers

Public Group Assignment
Granting report folder access
Role Assignment
Custom permission assignment
Permission sets assignment

Answer(s): A,C,E

Reveal Solution Next Question

QUESTION: 98

Universal containers wants to set up SSO for a selected group of users to access external applications from salesforce through App launcher. Which three steps must be completed in salesforce to accomplish the goal?

Associate user profiles with the connected Apps.
Complete my domain and Identity provider setup.
Create connected apps for the external applications.
Complete single Sign-on settings in security controls.
Create named credentials for each external system.

Answer(s): A,B,C

Reveal Solution Next Question

QUESTION: 99

Universal containers (UC) is concerned that having a self-registration page will provide a means for "bots" or unintended audiences to create user records, thereby consuming licences and adding dirty data. Which two actions should UC take to prevent unauthorised form submissions during the selfregistration process? Choose 2 answers

Use open-ended security questions and complex password requirements
Primarily use lookup and picklist fields on the self registration page.
Require a captcha at the end of the self-registration process.
Use hidden fields populated via java script events in the self-registration page.

Answer(s): C,D

Reveal Solution Next Question

QUESTION: 100

Universal containers (UC) has implemented a multi-org strategy and would like to centralize the management of their salesforce user profiles. What should the architect recommend to allow salesforce profiles to be managed from a central system of record?

Implement jit provisioning on the SAML IDP that will pass the profile id in each assertion.
Create an apex scheduled job in one org that will synchronize the other orgs profile.
Implement Delegated Authentication that will update the user profiles as necessary.
Implement an Oauthjwt flow to pass the profile credentials between systems.

Answer(s): A

Reveal Solution Next Question

Free Certified Identity and Access Management Architect Exam Braindumps (page: 25)

QUESTION: 97

QUESTION: 98

QUESTION: 99

QUESTION: 100