support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Salesforce
  4. Certified Identity and Access Management Architect

Free Certified Identity and Access Management Architect Exam Braindumps
Salesforce Certified Identity and Access Management Architect Questions 66–70 (page: 15)

Updated On: 10-Feb-2026
Page 15 of 51
PDF with 248 Questions

The security team at Universal Containers (UC) has identified exporting reports as a high-risk action and would like to require users to be logged into Salesforce with their Active Directory (AD) credentials when doing so. For all other users of Salesforce, users should be allowed to use AD Credentials or Salesforce credentials. What solution should be recommended to prevent exporting reports except when logged in using AD credentials while maintaining the ability to view reports when logged in with Salesforce credentials?

  1. Use SAML Federated Authentication and block access to reports when accessed through a Standard Assurance session.
  2. Use SAML Federated Authentication and Custom SAML JIT Provisioning to dynamically and or remove a permission set that grants the Export Reports Permission.
  3. Use SAML federated Authentication, treat SAML Sessions as High Assurance, and raise the session level required for exporting reports.
  4. Use SAML federated Authentication with a Login Flow to dynamically add or remove a Permission Set that grants the Export Reports Permission.

Answer(s): C



Universal Containers (UC) wants its users to access Salesforce and other SSO-enabled applications from a custom web page that UC magnets. UC wants its users to use the same set of credentials to access each of the applications. what SAML SSO flow should an Architect recommend for UC?

  1. SP-Initiated with Deep Linking
  2. SP-Initiated
  3. IdP-Initiated
  4. User-Agent

Answer(s): C



Universal Containers (UC) uses a home-grown Employee portal for their employees to collaborate. UC decides to use Salesforce Ideas to allow employees to post Ideas from the Employee portal. When users click on some of the links in the Employee portal, the users should be redirected to Salesforce, authenticated, and presented with the relevant pages. What OAuth flow is best suited for this scenario?

  1. Web Application flow
  2. SAML Bearer Assertion flow
  3. User-Agent flow
  4. Web Server flow

Answer(s): D



Universal Containers (UC) is planning to deploy a custom mobile app that will allow users to get esignatures from its customers on their mobile devices. The mobile app connects to Salesforce to upload the e-signature as a file attachment and uses OAuth protocol for both authentication and authorization. What is the most recommended and secure OAuth scope setting that an Architect should recommend?

  1. Id
  2. Web
  3. Api
  4. Custom_permissions

Answer(s): D



IT security at Universal Containers (UC) us concerned about recent phishing scams targeting its users and wants to add additional layers of login protection. What should an Architect recommend to address the issue?

  1. Use the Salesforce Authenticator mobile app with two-step verification
  2. Lock sessions to the IP address from which they originated.
  3. Increase Password complexity requirements in Salesforce.
  4. Implement Single Sign-on using a corporate Identity store.

Answer(s): A



  PDF
Viewing page 15 of 51
Viewing questions 71 - 75 out of 248 questions


Post your Comments and Discuss Salesforce Certified Identity and Access Management Architect exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!