support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Salesforce
  4. IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER

Free IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER Exam Braindumps
Salesforce Certified Identity and Access Management Designer Questions 106–110 (page: 23)

Updated On: 10-Feb-2026
Page 23 of 48
PDF with 230 Questions

Northern Trail Outfitters is implementing a busmess-to-business (B2B) collaboration siteusing Salesforce Experience Cloud. The partners will authenticate with an existing identity provider and the solution will utilize Security Assertion Markup Language (SAML) to provide single sign-on to Salesforce. Delegated administration will be used in the Expenence Cloud site to allow the partners to administer their users' access.

How should a partner identity be provisioned in Salesforce for this solution?

  1. Create only a contact.
  2. Create a contactless user.
  3. Create a user and a related contact.
  4. Create a person account.

Answer(s): C



In a typical SSL setup involving a trusted party and trustingparty, what consideration should an Architect take into account when using digital certificates?

  1. Use of self-signed certificate leads to lower maintenance for trusted party because multiple self-signed certs need to be maintained.
  2. Use of self-signedcertificate leads to higher maintenance for trusted party because they have to act as the trusted CA
  3. Use of self-signed certificate leads to lower maintenance for trusting party because there is no trusted CA cert to maintain.
  4. Use of self-signed certificate leads to higher maintenance for trusting party because the cert needs to be added to their truststore.

Answer(s): C



Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the OAuth 2.0 user-agent flow. Application users will authenticate using username and password. They should not be forced to approve API access in themobile app or reauthenticate for 3 months.

Which two connected app options need to be configured to fulfill this use case?

Choose 2 answers

  1. Set Permitted Users to "Admin approved users are pre-authorized".
  2. Set Permitted Users to "All users may self-authorize".
  3. Set the Session Timeout value to 3 months.
  4. Set the Refresh Token Policy to expire refresh token after 3 months.

Answer(s): B,D



Universal Containers built a custom mobile app for their field repsto create orders in Salesforce. OAuth is used for authenticating mobile users. The app is built in such a way that when a user session expires after Initial login, a new access token is obtained automatically without forcing the user to log in again. While that improved the field reps' productivity, UC realized that they need a "logout" feature.

What should the logout function perform in this scenario, where user sessions are refreshed automatically?

  1. Invoke the revocation URL and pass the refresh token.
  2. Clear out the client Id to stop auto session refresh.
  3. Invoke the revocation URL and pass the access token.
  4. Clear out all the tokens to stop auto session refresh.

Answer(s): A



A global company's Salesforce Identity Architect is reviewing its Salesforce production org login history and is seeing someintermittent Security Assertion Markup Language (SAML SSO) 'Replay Detected and Assertion Invalid' login errors.

Which two issues would cause these errors?

Choose 2 answers

  1. The subject element is missing from the assertion sent to salesforce.
  2. The certificate loaded into SSO configuration does not match the certificate used by the IdP.
  3. The current time setting of the company's identity provider (IdP) and Salesforce platform is out of sync by more than eight minutes.
  4. The assertion sent to 5alesforce contains an assertion ID previously used.

Answer(s): A,D



  PDF
Viewing page 23 of 48
Viewing questions 111 - 115 out of 230 questions


Post your Comments and Discuss Salesforce IDENTITY-AND-ACCESS-MANAGEMENT-DESIGNER exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!