Free IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER Exam Braindumps
Salesforce Certified Identity and Access Management Designer Questions 51–55 (page: 12)

Updated On: 10-Feb-2026

Whichtwo security risks can be mitigated by enabling Two-Factor Authentication (2FA) in Salesforce? Choose 2 answers

  1. Users leaving laptops unattended and not logging out of Salesforce.
  2. Users accessing Salesforce from a public Wi-Fi access point.
  3. Userschoosing passwords that are the same as their Facebook password.
  4. Users creating simple-to-guess password reset questions.

Answer(s): B,C



Universal Containers (UC)has an existing Salesforce org configured for SP-Initiated SAML SSO with their Idp. A second Salesforce org is being introduced into the environment and the IT team would like to ensure they can use the same Idp for new org.
What action should the IT teamtake while implementing the second org?

  1. Use the same SAML Identity location as the first org.
  2. Use a different Entity ID than the first org.
  3. Use the same request bindings as the first org.
  4. Use the Salesforce Username as the SAML Identity Type.

Answer(s): B



Universal Containers (UC) has built a custom token-based Two-factor authentication (2FA) system for their existing on-premise applications. They are now implementing Salesforce and would like to enable a Two-factor login process for it, as well.
What is the recommended solution as Architect should consider?

  1. Use the custom 2FA system for on-premise applications and native 2FA for Salesforce.
  2. Replace the custom 2FA system with an AppExchange App that supports on premise application and salesforce.
  3. Use Custom Login Flows to connect to the existing custom 2FA system for use in Salesforce.
  4. Replace the custom 2FA system with Salesforce 2FA for on-premise applications and Salesforce.

Answer(s): D



Universal Containers (UC) uses Salesforce for its customer service agents. UC has a proprietary system for order tracking which supports Security Assertion Markup Language (SAML) based singlesign-on. The VP of customer service wants to ensure only active Salesforce users should be able to access the order tracking system which is only visible within Salesforce.

What should be done to fulfill the requirement?

Choose 2 answers

  1. Setup Salesforce as an identity provider (IdP) for order Tracking.
  2. Set up the Corporate Identity store as an identity provider (IdP) for Order Tracking,
  3. Customize Order Tracking to initiate a REST call to validate users in Salesforce after login.
  4. Setup Order Tracking as a Canvas app in 5alesforce to POST IdP initiated SAML assertion.

Answer(s): A,B



Universal Containers (UC) wants its closed Won opportunities to be synced to a Data Warehouse innear real time. UC has implemented Outbound Message to enable near real- time data sync. UC wants to ensure that communication between Salesforce and Target System is Secure.
What Certificate is sent along with the Outbound Message?

  1. The CA-Signed Certificate from the Certificate and Key Management menu.
  2. The default Client Certificate from the Develop--> API Menu.
  3. The default Client Certificate or a Certificate from Certificate and Key Management menu.
  4. The Self-Signed Certificates from the Certificate & Key Management menu.

Answer(s): B



Viewing page 12 of 48
Viewing questions 56 - 60 out of 230 questions


Post your Comments and Discuss Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!