Online Access Free Plat-Arch-203 Exam Questions

Northern Trail Outfitters (NTO) has an off-boarding process where a terminated employee is first disabled in the Lightweight Directory Act Protocol (LDAP) directory, then requests are sent to the various application support teams to finish user deactivations. A terminated employee recently was able to login to NTO's Salesforce instance 24 hours after termination, even though the user was disabled in the corporate LDAP directory.
What should an identity architect recommend to prevent this from happening in the future?

• A.Create a Just-in-Time provisioning registration handler to ensure users are deactivated in Salesforce as they are disabled in LDAP.
• B.Setup an identity provider (IdP) to authenticate users using LDAP, set up single sign-on to Salesforce and disable Login Form authentication.
• C.use a login flow to make a callout to the LDAP directory before authenticating the user to Salesforce.
• D.Configure an authentication provider to delegate authentication to the LDAP directory.

How should an Architect automatically redirect users to the login page of the external Identity provider when using an SP-Initiated SAML flow with Salesforce as a Service Provider?

• A.Use visualforce as the landing page for My Domain to redirect users to the Identity Provider login Page.
• B.Set the Identity Provider as default and enable the Redirect to the Identity Provider setting on the SAML Configuration.
• C.Remove the Login page from the list of Authentication Services on the My Domain configuration.
• D.Enable the Redirect to the Identity Provider setting under Authentication Services on the My domain Configuration.

An Identity and Access Management (IAM) architect is tasked with unifying multiple B2C Commerce sites and an Experience Cloud community with a single identity. The solution needs to support more than 1,000 logins per minute.
What should the IAM do to fulfill this requirement?

• A.Configure both the community and the commerce sites as OAuth2 RPs (relying party) with an external identity provider.
• B.Configure community as a Security Assertion Markup Language (SAML) identity provider and enable Just-in-Time Provisioning to B2C Commerce.
• C.Create a default account for capturing all ecommerce contacts registered on the community because personAccount is not supported for this case.
• D.Confirm performance considerations with Salesforce Customer Support due to high peaks.

A client is planning to rollout multi-factor authentication (MFA) to its internal employees and wants to understand which authentication and verification methods meet the Salesforce criteria for secure authentication.
Which three functions meet the Salesforce criteria for secure mfa?
Choose 3 answers

• A.Third-party single sign-on with Mobile Authenticator app
• B.Certificate-based Authentication
• C.Username and password + secunty key
• D.Lightning Login
• E.username and password + SMS passcode

A global company is using the Salesforce Platform as an Identity Provider and needs to integrate a third-party application with its Experience Cloud customer portal.
Which two features should be utilized to provide users with login and identity services for the third-party application?
Choose 2 answers

• A.Use Delegated Authentication.
• B.Use a connected app.
• C.Use the App Launcher with single sign-on (SSO).
• D.External a Data source with Named Principal identity type.