support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Salesforce
  4. Certified Identity and Access Management Architect

Free Certified Identity and Access Management Architect Exam Braindumps
Salesforce Certified Identity and Access Management Architect Questions 56–60 (page: 13)

Updated On: 10-Feb-2026
Page 13 of 51
PDF with 248 Questions

Universal Containers is considering using Delegated Authentication as the sole means of Authenticating of Salesforce users. A Salesforce Architect has been brought in to assist with the
implementation. What two risks Should the Architect point out? Choose 2 answers

  1. Delegated Authentication is enabled or disabled for the entire Salesforce org.
  2. UC will be required to develop and support a custom SOAP web service.
  3. Salesforce users will be locked out of Salesforce if the web service goes down.
  4. The web service must reside on a public cloud service, such as Heroku.

Answer(s): B,C



Containers (UC) has implemented SAML-based single Sign-on for their Salesforce application and is planning to provide access to Salesforce on mobile devices using the Salesforce1 mobile app. UC wants to ensure that Single Sign-on is used for accessing the Salesforce1 mobile App. Which two recommendations should the Architect make? Choose 2 Answers

  1. Configure the Embedded Web Browser to use My Domain URL.
  2. Configure the Salesforce1 App to use the MY Domain URL.
  3. Use the existing SAML-SSO flow along with User Agent Flow.
  4. Use the existing SAML SSO flow along with Web Server Flow.

Answer(s): B,C



Universal Containers (UC) has implemented SAML-based SSO solution for use with their multi-org Salesforce implementation, utilizing one of the orgs as the Identity Provider. One user is reporting that they can log in to the Identity Provider org but get a generic SAML error message when accessing the other orgs. Which two considerations should the architect review to troubleshoot the issue? Choose 2 answers

  1. The Federation ID must be a valid Salesforce Username
  2. The Federation ID must is case sensitive
  3. The Federation ID must be in the form of an email address.
  4. The Federation ID must be populated on the user record.

Answer(s): B,D



Universal Containers (UC) wants to integrate a third-party Reward Calculation system with Salesforce to calculate Rewards. Rewards will be calculated on a schedule basis and update back into Salesforce. The integration between Salesforce and the Reward Calculation System needs to be secure. Which are two recommended practices for using OAuth flow in this scenario. choose 2 answers

  1. OAuth Refresh Token Flow
  2. OAuth Username-Password Flow
  3. OAuth SAML Bearer Assertion Flow
  4. OAuth JWT Bearer Token Flow

Answer(s): C,D



Which two are valid choices for digital certificates when setting up two-way SSL between Salesforce and an external system. Choose 2 answers

  1. Use a trusted CA-signed certificate for salesforce and a trusted CA-signed cert for the external system
  2. Use a trusted CA-signed certificate for salesforce and a self-signed cert for the external system
  3. Use a self-signed certificate for salesforce and a self-signed cert for the external system
  4. Use a self-signed certificate for salesforce and a trusted CA-signed cert for the external system

Answer(s): C,D



  PDF
Viewing page 13 of 51
Viewing questions 61 - 65 out of 248 questions


Post your Comments and Discuss Salesforce Certified Identity and Access Management Architect exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!