Free IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER Exam Braindumps
Salesforce Certified Identity and Access Management Designer Questions 61–65 (page: 14)

Updated On: 10-Feb-2026

An identity architect is implementing a mobile-first Consumer Identity Access Management (CIAM) for external users. User authentication is the only requirement. The users email or mobile phone number should be supported as a username.

Which two licenses are needed to meet this requirement?

Choose 2 answers

  1. External Identity Licenses
  2. Identity ConnectLicenses
  3. Email Verification Credits
  4. SMS verification Credits

Answer(s): A,D



Universal containers uses an Employee portal for their employees to collaborate. employees access the portal from their company's internal website viaSSO. It is set up to work with Active Directory.
What is the role of Active Directory in this scenario?

  1. Identity store
  2. Authentication store
  3. Identity provider
  4. Service provider

Answer(s): C



A multinational industrial products manufacturer is planning to implement Salesforce CRM to manage their business. They have the following requirements:

1. They plan to implement Partner communities to provide access to their partner network .

2. They have operations in multiple countries and are planning to implement multiple Salesforce orgs.

3. Some of their partners do business in multiple countries and will need information from multiple Salesforce communities.

4. They would like to provide a single login for their partners.

How should an Identity Architect solution this requirement with limited custom development?

  1. Create a partner login for the countryof their operation and use SAML federation to provide access to other orgs.
  2. Consolidate Partner related information in a single org and provide access through Salesforce community.
  3. Allow partners to choose the Salesforce org they need information from and use login flows to authenticate access.
  4. Register partners in one org and access information from other orgs using APIs.

Answer(s): A



Universal containers (UC) has built a custom based Two-factor Authentication (2fa) system for their existing on-premise applications. Thru are now implementing salesforce and would like to enable a Two-factor login process forit, as well.
What is the recommended solution an architect should consider?

  1. Replace the custom 2fa system with salesforce 2fa for on-premise application and salesforce.
  2. Use the custom 2fa system for on-premise applications and native 2fa for salesforce.
  3. Replace the custom 2fa system with an app exchange app that supports on-premise applications and salesforce.
  4. Use custom login flows to connect to the existing custom 2fa system for use in salesforce.

Answer(s): D



An identity architect has built a native mobile application and plans to integrate it with a Salesforce Identity solution. The following are the requirements for the solution:

1. Users should not have to login every time they use the app.

2. The app should be able tomake calls to the Salesforce REST API.

3. End users should NOT see the OAuth approval page.

How should the identity architect configure the Salesforce connected app to meet the requirements?

  1. Enable the API Scope and Offline Access Scope, upload a certificate so JWT Bearer Flow can be used and then set the connected app access settings to "Admin Pre- Approved".
  2. Enable the API Scope and Offline Access Scope on the connected app, and then set the connected app to access settings to 'Admin Pre-Approved".
  3. Enable the Full Access Scope and then set the connected app access settings to "Admin Pre-Approved".
  4. Enable the API Scope and Offline Access Scope on the connected app, and then set the Connected App access settings to "User may self authorize".

Answer(s): A



Viewing page 14 of 48
Viewing questions 66 - 70 out of 230 questions


Post your Comments and Discuss Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!