support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Salesforce
  4. Certified Identity and Access Management Architect

Free Certified Identity and Access Management Architect Exam Braindumps
Salesforce Certified Identity and Access Management Architect Questions 86–90 (page: 19)

Updated On: 10-Feb-2026
Page 19 of 51
PDF with 248 Questions

Universal Containers (UC) uses middleware to integrate multiple systems with Salesforce. UC has a strict, new requirement that usernames and passwords cannot be stored in any UC system. How can UC's middleware authenticate to Salesforce while adhering to this requirement?

  1. Create a Connected App that supports the JWT Bearer Token OAuth Flow.
  2. Create a Connected App that supports the Refresh Token OAuth Flow
  3. Create a Connected App that supports the Web Server OAuth Flow.
  4. Create a Connected App that supports the User-Agent OAuth Flow.

Answer(s): A



In a typical SSL setup involving a trusted party and trusting party, what consideration should an Architect take into account when using digital certificates?

  1. Use of self-signed certificate leads to lower maintenance for trusted party because multiple selfsigned certs need to be maintained.
  2. Use of self-signed certificate leads to higher maintenance for trusted party because they have to act as the trusted CA
  3. Use of self-signed certificate leads to lower maintenance for trusting party because there is no trusted CA cert to maintain.
  4. Use of self-signed certificate leads to higher maintenance for trusting party because the cert needs to be added to their truststore.

Answer(s): C



After a recent audit, universal containers was advised to implement Two-factor Authentication for all of their critical systems, including salesforce. Which two actions should UC consider to meet this requirement? Choose 2 answers

  1. Require users to provide their RSA token along with their credentials.
  2. Require users to supply their email and phone number, which gets validated.
  3. Require users to enter a second password after the first Authentication
  4. Require users to use a biometric reader as well as their password

Answer(s): A,D



Universal containers (UC) uses an internal company portal for their employees to collaborate. UC decides to use salesforce ideas and provide the ability for employees to post ideas from the company portal. They use SAML-BASED SSO to get into the company portal and would like to leverage it to access salesforce. Most of the users don't exist in salesforce and they would like the user records created in salesforce communities the first time they try to access salesforce. What recommendation should an architect make to meet this requirement?

  1. Use on-the-fly provisioning
  2. Use just-in-time provisioning
  3. Use salesforce APIs to create users on the fly
  4. Use Identity connect to sync users

Answer(s): B



Universal containers (UC) has an e-commerce website while customers can buy products, make payments, and manage their accounts. UC decides to build a customer Community on Salesforce and wants to allow the customers to access the community for their accounts without logging in again. UC decides to implement ansp-Initiated SSO using a SAML-BASED complaint IDP. In this scenario where salesforce is the service provider, which two activities must be performed in salesforce to make sp-Initiated SSO work? Choose 2 answers

  1. Configure SAML SSO settings.
  2. Configure Delegated Authentication
  3. Create a connected App
  4. Set up my domain

Answer(s): A,D



  PDF
Viewing page 19 of 51
Viewing questions 91 - 95 out of 248 questions


Post your Comments and Discuss Salesforce Certified Identity and Access Management Architect exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!