Online Access Free Salesforce.Identity-and-Access-Management-Architect.v2023-08-09.q105 Practice Test (Page 5)

Identity-and-Access-Management-Architect Exam Question 16

Universal containers wants to build a custom mobile app connecting to salesforce using Oauth, and would like to restrict the types of resources mobile users can access. What Oauth feature of Salesforce should be used to achieve the goal?

A.Scopes

B.Access Tokens

C.Refresh Tokens

D.Mobile pins

Identity-and-Access-Management-Architect Exam Question 17

Which two security risks can be mitigated by enabling Two-Factor Authentication (2FA) in Salesforce?
Choose 2 answers

A.Users creating simple-to-guess password reset questions.

B.Users accessing Salesforce from a public Wi-Fi access point.

C.Users choosing passwords that are the same as their Facebook password.

D.Users leaving laptops unattended and not logging out of Salesforce.

Identity-and-Access-Management-Architect Exam Question 18

Universal Containers wants to allow its customers to log in to its Experience Cloud via a third party authentication provider that supports only the OAuth protocol.
What should an identity architect do to fulfill this requirement?

A.Contact Salesforce Support and enable delegate single sign-on.

B.Configure OpenID Connect authentication provider.

C.Use certificate-based authentication.

D.Create a custom external authentication provider.

Identity-and-Access-Management-Architect Exam Question 19

Universal Containers (UC) plans to use a SAML-based third-party IdP serving both of the Salesforce Partner Community and the corporate portal. UC partners will log in 65* to the corporate portal to access protected resources, including links to Salesforce resources. What would be the recommended way to configure the IdP so that seamless access can be achieved in this scenario?

A.Set up the corporate portal as a Connected App in Salesforce and use the User Agent OAuth flow.

B.Set up the corporate portal as a Connected App in Salesforce and use the Web server OAuth flow.

C.Configure IdP-initiated SSO that passes the SAML token upon Salesforce resource access request.

D.Configure SP-initiated SSO that passes the SAML token upon Salesforce resource access request.

Identity-and-Access-Management-Architect Exam Question 20

A global company's Salesforce Identity Architect is reviewing its Salesforce production org login history and is seeing some intermittent Security Assertion Markup Language (SAML SSO) 'Replay Detected and Assertion Invalid' login errors.
Which two issues would cause these errors?
Choose 2 answers

A.The assertion sent to 5alesforce contains an assertion ID previously used.

B.The certificate loaded into SSO configuration does not match the certificate used by the IdP.

C.The current time setting of the company's identity provider (IdP) and Salesforce platform is out of sync by more than eight minutes.

D.The subject element is missing from the assertion sent to salesforce.

Premium Bundle

Newest Identity-and-Access-Management-Architect Exam PDF Dumps shared by Actual4test.com for Helping Passing Identity-and-Access-Management-Architect Exam! Actual4test.com now offer the updated Identity-and-Access-Management-Architect exam dumps, the Actual4test.com Identity-and-Access-Management-Architect exam questions have been updated and answers have been corrected get the latest Actual4test.com Identity-and-Access-Management-Architect pdf dumps with Exam Engine here:

Access Identity-and-Access-Management-Architect Premium Version

(112 Q&As Dumps, 30%OFF Special Discount: Freepdfdumps)

Other Version: 1929Salesforce.Identity-and-Access-Management-Architect.v2026-03-04.q111; 3883Salesforce.Identity-and-Access-Management-Architect.v2024-01-05.q118

Latest Upload: 135Cisco.200-301.v2026-11-10.q603; 138CheckPoint.156-215.82.v2026-11-10.q79; 132Microsoft.DP-600.v2026-11-10.q86; 144Fortinet.NSE6_FNC_AD-7.6.v2026-11-09.q39; 162Salesforce.AP-222.v2026-11-09.q64; 136VMware.3V0-12.26.v2026-11-09.q29; 271Cisco.350-901.v2026-11-07.q332; 305Cisco.200-201.v2026-11-07.q272; 216Microsoft.AI-901.v2026-11-07.q56; 243Microsoft.AZ-700.v2026-11-06.q141