Online Access Free Identity-and-Access-Management-Architect Exam Questions

An identity architect has been asked to recommend a solution that allows administrators to configure personalized alert messages to users before they land on the Experience Cloud site (formerly known as Community) homepage.
What is recommended to fulfill this requirement with the least amount of customization?

• A.Use Login Flows to add a screen that shows personalized alerts.
• B.Customize the registration handler Apex class to create a routing logic navigating to different home pages based on the user profile.
• C.Create custom metadata that stores user alerts and use a LWC to display alerts.
• D.Build a Lightning Web Component (LWC) for a homepage that shows custom alerts.

Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the OAuth 2.0 user-agent flow. Application users will authenticate using username and password. They should not be forced to approve API access in the mobile app or reauthenticate for 3 months.
Which two connected app options need to be configured to fulfill this use case?
Choose 2 answers

• A.Set the Refresh Token Policy to expire refresh token after 3 months.
• B.Set Permitted Users to " All users may self-authorize " .
• C.Set the Sealston Timeout value to 3 months.
• D.Set Permitted Users to " Admin approved users are pre-authorized " .

The CMO of an advertising company has invited an Identity and Access Management (IAM) specialist to discuss Salesforce out-of-box capabilities for configuring the company ' s login and registration experience on Salesforce Experience Cloud.
The CMO is looking to brand the login page with the company ' s logo, background color, login button color, and dynamic right-frame from an external URL.
Which two solutions should the IAM specialist recommend?
Choose 2 answers:

• A.Build custom site pages for reset and forget password features.
• B.Build custom pages for handling requirements as Experienced Cloud.
• C.Use Experience Builder to build branded Reset and Forget Password pages.
• D.Login & Registration pages can be branded in the Community Administration settings.

An identity architect has built a native mobile application and plans to integrate it with a Salesforce Identity solution. The following are the requirements for the solution:
1. Users should not have to login every time they use the app.
2. The app should be able to make calls to the Salesforce REST API.
3. End users should NOT see the OAuth approval page.
How should the identity architect configure the Salesforce connected app to meet the requirements?

• A.Enable the Full Access Scope and then set the connected app access settings to " Admin Pre-Approved
  " .
• B.Enable the API Scope and Offline Access Scope on the connected app, and then set the connected app to access settings to " Admin Pre-Approved " .
• C.Enable the API Scope and Offline Access Scope on the connected app, and then set the Connected App access settings to " User may self authorize " .
• D.Enable the API Scope and Offline Access Scope, upload a certificate so JWT Bearer Flow can be used and then set the connected app access settings to " Admin Pre-Approved " .

Northern Trail Outfitters (NTO) utilizes a third-party cloud solution for an employee portal. NTO also owns Salesforce Service Cloud and would like employees to be able to login to Salesforce with their third-party portal credentials for a seamless experience. The third-party employee portal only supports OAuth.
What should an Identity architect recommend to enable single sign-on (SSO) between the portal and Salesforce?

• A.Configure Salesforce for Delegated Authentication.
• B.Add the third-party portal as a connected app.
• C.Configure SSO with OpenlD Connect and leverage the third party portal as an identity provider.
• D.Create a custom external authentication provider.