Online Access Free Identity-and-Access-Management-Architect Exam Questions

A multinational company using the Salesforce platform wants to implement robust user activity verification capabilities to detect unauthorized access and unusual login patterns.
They need real-time monitoring and alerting functionalities to respond promptly to security incidents.
Which Salesforce tool should be utilized to achieve these requirements?

• A.Salesforce Profiles
• B.Salesforce Event Monitoring and Event Log Files
• C.Salesforce Data Loader
• D.Salesforce Platform Encryption

Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the OAuth 2.0 user-agent flow. Application users will authenticate using username and password. They should not be forced to approve API access in the mobile app or reauthenticate for 3 months.
Which two connected app options need to be configured to fulfill this use case?
Choose 2 answers

• A.Set the Sealston Timeout value to 3 months.
• B.Set the Refresh Token Policy to expire refresh token after 3 months.
• C.Set Permitted Users to " All users may self-authorize " .
• D.Set Permitted Users to " Admin approved users are pre-authorized " .

Universal Containers is designing an identity architecture that involves integrating Salesforce with an external directory service. The external directory service will act as the central repository for user authentication and authorization across multiple systems within the organization.
Which approach should be evaluated to establish trust between Salesforce and the external directory service?

• A.Enforcing IP-based access restrictions for Salesforce and the external directory service.
• B.Using a shared database table to synchronize user credentials between the two systems.
• C.Implementing a federated identity solution based on SANL (Security Assertion Markup Language).
• D.Utilizing email-based verification for user authentication across the systems.

Universal Containers would like its customers to register and log in to a portal built on Salesforce Experience Cloud. Customers should be able to use their Facebook or LinkedIn credentials for ease of use.
Which three steps should an identity architect take to implement social sign-on?
Choose 3 answers

• A.Register both Facebook and LinkedIn as connected apps.
• B.Update the default registration handlers to create and update users.
• C.Enable " Facebook " and " LinkedIn " under Login Page Setup.
• D.Enable " Federated Single Sign-On Using SAML " .
• E.Create authentication providers for both Facebook and LinkedIn.

Northern Trail Outfitters (NTO) has a number of employees who do NOT need access Salesforce objects. The employees should sign in to a custom Benefits web app using their Salesforce credentials.
Which license should the identity architect recommend to fulfill this requirement?

• A.External Identity License
• B.Identify Verification Credits Add-On License
• C.Identify Only License
• D.Identify Connect License