Online Access Free Salesforce.Identity-and-Access-Management-Architect.v2023-08-09.q105 Practice Test (Page 6)

Identity-and-Access-Management-Architect Exam Question 21

A group of users try to access one of universal containers connected apps and receive the following error message : "Failed : Not approved for access". what is most likely to cause of the issue?

A.The users do not have the correct permission set assigned to them.

B.The salesforce administrators gave revoked the Oauth authorization.

C.The use of high assurance sections are required for the connected App.

D.The connected App setting "All users may self-authorize" is enabled.

Identity-and-Access-Management-Architect Exam Question 22

Universal Containers (UC) has Active Directory (AD) as their enterprise identity store and would like to use it for Salesforce user authentication. UC expects to synchronize user data between Salesforce and AD and Assign the appropriate Profile and Permission Sets based on AD group membership. What would be the optimal way to implement SSO?

A.Use Salesforce Identity Connect as the Identity Provider.

B.Use Microsoft Access control Service as the Authentication provider.

C.Use Active Directory with Reverse Proxy as the Identity Provider.

D.Use Active Directory Federation Service (ADFS) as the Identity Provider.

Identity-and-Access-Management-Architect Exam Question 23

A pharmaceutical company has an on-premise application (see illustration) that it wants to integrate with Salesforce.
The IT director wants to ensure that requests must include a certificate with a trusted certificate chain to access the company's on-premise application endpoint.
What should an Identity architect do to meet this requirement?

A.Generate a certificate authority-signed certificate in Salesforce and uploading it to the on-premise application Truststore.

B.Configure the company firewall to allow traffic from Salesforce IP ranges.

C.Use open SSL to generate a Self-signed Certificate and upload it to the on-premise app.

D.Upload a third-party certificate from Salesforce into the on-premise server.

Identity-and-Access-Management-Architect Exam Question 24

Northern Trail Outfitters (NTO) wants its customers to use phone numbers to log in to their new digital portal, which was designed and built using Salesforce Experience Cloud. In order to access the portal, the user will need to do the following:
1. Enter a phone number and/or email address
2. Enter a verification code that is to be sent via email or text.
What is the recommended approach to fulfill this requirement?

A.Create a custom login flow that uses an Apex controller to verify the phone numbers with the company's verification service.

B.Create a custom login page with an Apex controller. The controller has logic to send and verify the identity.

C.Create an Authentication provider and implement a self-registration handler class.

D.Create a Login Discovery page and provide a Login Discovery Handler Apex class.

Identity-and-Access-Management-Architect Exam Question 25

Universal Containers (UC) is using Active Directory as its corporate identity provider and Salesforce as its CRM for customer care agents, who use SAML based sign sign-on to login to Salesforce. The default agent profile does not include the Manage User permission. UC wants to dynamically update the agent role and permission sets.
Which two mechanisms are used to provision agents with the appropriate permissions?
Choose 2 answers

A.Use Login Flow in User Context to update role and permission sets.

B.Use Login Flow in System Context to update role and permission sets.

C.Use SAML Just-in-Time (JIT) handler class run as an admin user to update role and permission sets.

D.Use SAML Just-m-Time (JIT) Handler class run as current user to update role and permission sets.

Premium Bundle

Newest Identity-and-Access-Management-Architect Exam PDF Dumps shared by Actual4test.com for Helping Passing Identity-and-Access-Management-Architect Exam! Actual4test.com now offer the updated Identity-and-Access-Management-Architect exam dumps, the Actual4test.com Identity-and-Access-Management-Architect exam questions have been updated and answers have been corrected get the latest Actual4test.com Identity-and-Access-Management-Architect pdf dumps with Exam Engine here:

Access Identity-and-Access-Management-Architect Premium Version

(112 Q&As Dumps, 30%OFF Special Discount: Freepdfdumps)

Other Version: 1929Salesforce.Identity-and-Access-Management-Architect.v2026-03-04.q111; 3883Salesforce.Identity-and-Access-Management-Architect.v2024-01-05.q118

Latest Upload: 135Cisco.200-301.v2026-11-10.q603; 138CheckPoint.156-215.82.v2026-11-10.q79; 132Microsoft.DP-600.v2026-11-10.q86; 144Fortinet.NSE6_FNC_AD-7.6.v2026-11-09.q39; 162Salesforce.AP-222.v2026-11-09.q64; 136VMware.3V0-12.26.v2026-11-09.q29; 271Cisco.350-901.v2026-11-07.q332; 305Cisco.200-201.v2026-11-07.q272; 216Microsoft.AI-901.v2026-11-07.q56; 243Microsoft.AZ-700.v2026-11-06.q141