support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Salesforce
  4. Certified Identity and Access Management Architect

Free Certified Identity and Access Management Architect Exam Braindumps
Salesforce Certified Identity and Access Management Architect Questions 111–115 (page: 24)

Updated On: 10-Feb-2026
Page 24 of 51
PDF with 248 Questions

Containers (UC) uses an internal system for recruiting and would like to have the candidates' info available in the Salesforce automatically when they are selected. UC decides to use OAuth to connect to Salesforce from the recruiting system and would like to do the authentication using digital certificates. Which two OAuth flows should be considered to meet the requirement? Choose 2 answers

  1. JWT Bearer Token flow
  2. Refresh Token flow
  3. SAML Bearer Assertion flow
  4. Web Service flow

Answer(s): A,C



Universal Containers (UC) is building an authenticated Customer Community for its customers. UC does not want customer credentials stored in Salesforce and is confident its customers would be willing to use their social media credentials to authenticate to the community. Which two actions should an Architect recommend UC to take?

  1. Use Delegated Authentication to call the Twitter login API to authenticate users.
  2. Configure an Authentication Provider for LinkedIn Social Media Accounts.
  3. Create a Custom Apex Registration Handler to handle new and existing users.
  4. Configure SSO Settings For Facebook to serve as a SAML Identity Provider.

Answer(s): B,C



How should an Architect force users to authenticate with Two-factor Authentication (2FA) for Salesforce only when not connected to an internal company network?

  1. Use Custom Login Flows with Apex to detect the user's IP address and prompt for 2FA if needed.
  2. Add the list of company's network IP addresses to the Login Range list under 2FA Setup.
  3. Use an Apex Trigger on the UserLogin object to detect the user's IP address and prompt for 2FA if needed.
  4. Apply the "Two-factor Authentication for User Interface Logins" permission and Login IP Ranges for all Profiles.

Answer(s): A



What is one of the roles of an Identity Provider in a Single Sign-on setup using SAML?

  1. Validate token
  2. Create token
  3. Consume token
  4. Revoke token

Answer(s): B



Which two security risks can be mitigated by enabling Two-Factor Authentication (2FA) in Salesforce? Choose 2 answers

  1. Users leaving laptops unattended and not logging out of Salesforce.
  2. Users accessing Salesforce from a public Wi-Fi access point.
  3. Users choosing passwords that are the same as their Facebook password.
  4. Users creating simple-to-guess password reset questions.

Answer(s): B,C



  PDF
Viewing page 24 of 51
Viewing questions 116 - 120 out of 248 questions


Post your Comments and Discuss Salesforce Certified Identity and Access Management Architect exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!