Online Access Free Salesforce.Plat-Arch-203.v2026-03-30.q118 Practice Test (Page 8)

Plat-Arch-203 Exam Question 31

Universal Containers (UC) has a classified information system that its call center team uses only when they are working on a case with a record type "Classified". They are only allowed to access the system when they own an open "Classified" case, and their access to the system is removed at all other times. They would like to implement SAML SSO eith Salesforce as the Idp, and automatically allow or deny the staff's access to the classified information system based on whether they currently own an open "Classified" case record when they try to access the system using SSO. What is the recommended solution for automatically allowing or denying the access to the classified information system based on the open "classified" case record criteria?

A.Use Custom SAML JIT Provisioning to dynamically query the user's open "Classified" cases when attempting to access the classified information system.

B.Use a Common Connected App Handler using Apex to dynamically allow access to the system based on whether the staff owns any open "Classified" Cases.

C.Use Apex trigger on case to dynamically assign permission Sets that Grant access when an user is assigned with an open "Classified" case, and remove it when the case is closed.

D.Use Salesforce reports to identify users that currently owns open "Classified" cases and should be granted access to the Classified information system.

Plat-Arch-203 Exam Question 32

An Architect has configured a SAML-based SSO integration between Salesforce and an external Identity provider and is ready to test it. When the Architect attempts to log in to Salesforce using SSO, the Architect receives a SAML error. Which two optimal actions should the Architect take to troubleshoot the issue?

A.Paste the SAML Assertion Validator in Salesforce.

B.Use a browser that has an add-on/extension that can inspect SAML.

C.Use the browser's Development tools to view the Salesforce page's markup.

D.Ensure the Callback URL is correctly set in the Connected Apps settings.

Plat-Arch-203 Exam Question 33

An insurance company has a connected app in its Salesforce environment that is used to integrate with a Google Workspace (formerly knot as G Suite).
An identity and access management (IAM) architect has been asked to implement automation to enable users, freeze/suspend users, disable users, and reactivate existing users in Google Workspace upon similar actions in Salesforce.
Which solution is recommended to meet this requirement?

A.Build an Apex trigger on the userlogin object to make asynchronous callouts to Google APIs.

B.Configure user Provisioning for Connected Apps.

C.Update the Security Assertion Markup Language Just-in-Time (SAML JIT) handler in Salesforce for user provisioning and de-provisioning.

D.Build a custom REST endpoint in Salesforce that Google Workspace can poll against.

Plat-Arch-203 Exam Question 34

An identity architect has been asked to recommend a solution that allows administrators to configure personalized alert messages to users before they land on the Experience Cloud site (formerly known as Community) homepage.
What is recommended to fulfill this requirement with the least amount of customization?

A.Create custom metadata that stores user alerts and use a LWC to display alerts.

B.Use Login Flows to add a screen that shows personalized alerts.

C.Build a Lightning web Component (LWC) for a homepage that shows custom alerts.

D.Customize the registration handler Apex class to create a routing logic navigating to different home pages based on the user profile.

Plat-Arch-203 Exam Question 35

Universal Containers (UC) is planning to add Wi-Fi enabled GPS tracking devices to its shipping containers so that the GPS coordinates data can be sent from the tracking device to its Salesforce production org via a custom API. The GPS devices have no direct user input or output capabilities.
Which OAuth flow should the identity architect recommend to meet the requirement?

A.OAuth 2.0 Username-Password Flow for Special Scenarios

B.OAuth 2.0 JWT Bearer Flow for Server-to-Server Integration

C.OAuth 2.0 Asset Token Flow for Securing Connected Devices

D.OAuth 2.0 Web Server Flow for Web App Integration

Latest Upload: 183Oracle.1Z0-1110-26.v2026-10-17.q71; 200CloudSecurityAlliance.CCSK.v2026-10-17.q153; 210Salesforce.Platform-App-Builder.v2026-10-17.q161; 154Salesforce.AP-204.v2026-10-17.q40; 208Microsoft.AI-103.v2026-10-16.q46; 203InsuranceLicensing.NY-Independent-General-Adjuster.v2026-10-15.q45; 265Anthropic.CCAR-F.v2026-10-15.q76; 226Salesforce.Marketing-Cloud-Consultant.v2026-10-15.q68; 743PMI.CAPM.v2026-10-15.q575; 195ServiceNow.CIS-DF.v2026-10-15.q61

Plat-Arch-203 Exam Question 31

Plat-Arch-203 Exam Question 32

Plat-Arch-203 Exam Question 33

Plat-Arch-203 Exam Question 34

Plat-Arch-203 Exam Question 35

Download PDF File