Online Access Free Identity-and-Access-Management-Designer Exam Questions

Universal Containers would like its customers to register and log in to a portal built on Salesforce Experience Cloud. Customers should be able to use their Facebook or Linkedln credentials for ease of use.
Which three steps should an identity architect take to implement social sign-on?
Choose 3 answers

• A.Create authentication providers for both Facebook and Linkedln.
• B.Register both Facebook and Linkedln as connected apps.
• C.Enable "Federated Single Sign-On Using SAML".
• D.Update the default registration handlers to create and update users.
• E.Check "Facebook" and "Linkedln" under Login Page Setup.

A consumer products company uses Salesforce to maintain consumer information, including orders. The company implemented a portal solution using Salesforce Experience Cloud for its consumers where the consumers can log in using their credentials. The company is considering allowing users to login with their Facebook or Linkedln credentials.
Once enabled, what role will Salesforce play?

• A.Facebook and Linkedln will act as the IdPs and SPs.
• B.Salesforce will be the identity provider (IdP).
• C.Facebook and Linkedln will be the SPs.
• D.Salesforce will be the service provider (SP).

Universal Container's (UC) identity architect needs to recommend a license type for their new Experience Cloud site that will be used by external partners (delivery providers) for reviewing and updating their accounts, downloading files provided by UC and obtaining scheduled pickup dates from their calendar.
UC is using their Salesforce production org as the identity provider for these users and the expected number of individual users is 2.5 million with 13.5 million unique logins per month.
Which of the following license types should be used to meet the requirement?

• A.External Apps License
• B.Partner Community License
• C.Customer Community plus Login License
• D.Partner Community Login License

What item should an Architect consider when designing a Delegated Authentication implementation?

• A.The web service should use the Salesforce Federation ID to identify the user.
• B.The Web service should be able to accept one to four input method parameters.
• C.The Web service should be secured with TLS using Salesforce trusted certificates.
• D.The Web service should implement a custom password decryption method.

IT security at Unversal Containers (UC) us concerned about recent phishing scams targeting its users and wants to add additional layers of login protection. What should an Architect recommend to address the issue?

• A.Lock sessions to the IP address from which they originated.
• B.Implement Single Sign-on using a corporate Identity store.
• C.Increase Password complexity requirements in Salesforce.
• D.Use the Salesforce Authenticator mobile app with two-step verification