Free Certified Identity and Access Management Architect Exam Braindumps
Salesforce Certified Identity and Access Management Architect Questions 76–80 (page: 17)

Updated On: 10-Feb-2026

Universal containers (UC) is setting up Delegated Authentication to allow employees to log in using their corporate credentials. UC's security team is concerned about the risk of exposing the corporate login service on the Internet and has asked that a reliable trust mechanism be put in place between the login service and salesforce. What mechanism should an architect put in place to enable a trusted connection between the login services and salesforce?

  1. Include client ID and client secret in the login header callout.
  2. Set up a proxy server for the login service in the DMZ.
  3. Require the use of Salesforce security Tokens on password.
  4. Enforce mutual Authentication between systems using SSL.

Answer(s): C



Universal containers (UC) has a mobile application that calls the salesforce REST API. In order to prevent users from having to enter their credentials every time they use the app, UC has enabled the use of refresh Tokens as part of the salesforce connected App and updated their mobile app to take advantage of the refresh token. Even after enabling the refresh token, Users are still complaining that they have to enter their credentials once a day. What is the most likely cause of the issue?

  1. The Oauth authorizations are being revoked by a nightly batch job.
  2. The refresh token expiration policy is set incorrectly in salesforce
  3. The app is requesting too many access Tokens in a 24-hour period
  4. The users forget to check the box to remember their credentials.

Answer(s): B



Universal containers (UC) wants users to authenticate into their salesforce org using credentials stored in a custom identity store. UC does not want to purchase or use a third-party Identity provider. Additionally, UC is extremely wary of social media and does not consider it to be trust worthy. Which two options should an architect recommend to UC? Choose 2 answers

  1. Use a professional social media such as LinkedIn as an Authentication provider
  2. Build a custom web page that uses the identity store and calls frontdoor.jsp
  3. Build a custom Web service that is supported by Delegated Authentication.
  4. Implement the Openid protocol and configure an Authentication provider

Answer(s): C,D



Universal containers uses an Employee portal for their employees to collaborate. employees access the portal from their company's internal website via SSO. It is set up to work with Active Directory. What is the role of Active Directory in this scenario?

  1. Identity store
  2. Authentication store
  3. Identity provider
  4. Service provider

Answer(s): C



Universal containers (UC) wants to implement a partner community. As part of their implementation, UC would like to modify both the Forgot password and change password experience with custom branding for their partner community users. Which 2 actions should an architect recommend to UC? Choose 2 answers

  1. Build a community builder page for the change password experience and Custom Visualforce page for the Forgot password experience.
  2. Build a custom visualforce page for both the change password and Forgot password experiences.
  3. Build a custom visualforce page for the change password experience and a community builder page for the Forgot password experience.
  4. Build a community builder page for both the change password and Forgot password experiences.

Answer(s): B,C



Viewing page 17 of 51
Viewing questions 81 - 85 out of 248 questions


Post your Comments and Discuss Salesforce Certified Identity and Access Management Architect exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!