Online Access Free Salesforce.Plat-Arch-203.v2026-03-30.q118 Practice Test (Page 21)

Plat-Arch-203 Exam Question 96

An Identity and Access Management (IAM) Architect is recommending Identity Connect to integrate Microsoft Active Directory (AD) with Salesforce for user provisioning, deprovisioning and single sign-on (SSO).
Which feature of Identity Connect is applicable for this scenano?

A.Identity Connect can be deployed as a managed package on salesforce org, leveraging High Availability of Salesforce Platform out-of-the-box.

B.When Identity Connect is in place, if a user is deprovisioned in an on-premise AD, the user's Salesforce session Is revoked Immediately.

C.If the number of provisioned users exceeds Salesforce licence allowances, identity Connect will start disabling the existing

D.When configured, Identity Connect acts as an identity provider to both Active Directory and Salesforce, thus providing SSO as a default feature.

Plat-Arch-203 Exam Question 97

Universal Containers (UC) wants its users to access Salesforce and other SSO-enabled applications from a custom web page that UC magnets. UC wants its users to use the same set of credentials to access each of the applications. what SAML SSO flow should an Architect recommend for UC?

A.SP-Initiated

B.IdP-Initiated

C.SP-Initiated with Deep Linking

D.User-Agent

Plat-Arch-203 Exam Question 98

How should an Architect force users to authenticate with Two-factor Authentication (2FA) for Salesforce only when not connected to an internal company network?

A.Add the list of company's network IP addresses to the Login Range list under 2FA Setup.

B.Use an Apex Trigger on the UserLogin object to detect the user's IP address and prompt for 2FA if needed.

C.Use Custom Login Flows with Apex to detect the user's IP address and prompt for 2FA if needed.

D.Apply the "Two-factor Authentication for User Interface Logins" permission and Login IP Ranges for all Profiles.

Plat-Arch-203 Exam Question 99

Universal containers (UC) has multiple salesforce orgs and would like to use a single identity provider to access all of their orgs. How should UC'S architect enable this behavior?

A.Ensure the same username is allowed in multiple orgs by contacting salesforce support.

B.Ensure that users have the same email value in their user records in all of UC's salesforce orgs.

C.Ensure that users have the same alias value in their user records in all of UC's salesforce orgs.

D.Ensure that users have the same Federation ID value in their user records in all of UC's salesforce orgs.

Plat-Arch-203 Exam Question 100

Northern Trail Outfitters (NTO) has a requirement to ensure all user logins include a single multi-factor authentication (MFA) prompt. Currently, users are allowed the choice to login with a username and password or via single sign-on against NTO's corporate Identity Provider, which includes built-in MFA.
Which configuration will meet this requirement?

A.Enable "MFA for User Interface Logins" for your organization from Setup -> Identity Verification.

B.For all employee profiles, set the Session Level Required at Login to High Assurance and add the corporate identity provider to the High Assurance list for the org's Session Security Levels.

C.Create and assign a permission set to all employees that includes "MFA for User Interface Logins."

D.Create a custom login flow that enforces MFA and assign it to a permission set. Then assign the permission set to all employees.

Latest Upload: 126VMware.3V0-21.25.v2026-06-20.q29; 134Microsoft.AB-731.v2026-06-19.q23; 271IIA.IIA-CIA-Part2.v2026-06-19.q308; 164DAMA.MD-1220.v2026-06-19.q66; 160ISTQB.CT-AI.v2026-06-18.q68; 253IIA.IIA-CIA-Part3.v2026-06-17.q220; 172WGU.Introduction-to-IT.v2026-06-17.q67; 251CompTIA.220-1202.v2026-06-16.q110; 146TheInstitutes.CPCU-500.v2026-06-16.q25; 234ACAMS.CAMS7-CN.v2026-06-16.q170

Plat-Arch-203 Exam Question 96

Plat-Arch-203 Exam Question 97

Plat-Arch-203 Exam Question 98

Plat-Arch-203 Exam Question 99

Plat-Arch-203 Exam Question 100

Download PDF File