Free Salesforce Identity-and-Access-Management-Architect Exam Dumps Questions & Answers

Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the QAuth 2.0 user-agent flow (this flow uses the QAuth 2.0 implicit grant type).
Which three QAuth concepts apply to this flow?
Choose 3 answers

• A.  Client ID
• B.  Scopus
• C.  Refresh Token
• D.  Verification Code
• E.  Authorization Code

Universal Containers (UC) is building a custom employee hub application on Amazon Web Services (AWS) and would like to store their users ' credentials there. Users will also need access to Salesforce for internal operations. UC has tasked an identity architect with evaluating different solutions for authentication and authorization between AWS and Salesforce.
How should an identity architect configure AWS to authenticate and authorize Salesforce users?

• A.  Create a custom external authentication provider.
• B.  Configure the custom employee app as a connected app.
• C.  Configure AWS as an OpenID Connect Provider.
• D.  Develop a custom Auth server in AWS.

An identity architect is implementing a mobile-first Consumer Identity Access Management (CIAM) for external users.
User authentication is the only requirement. The users email or mobile phone number should be supported as a username.
Which two licenses are needed to meet this requirement?
Choose 2 answers

• A.  External Identity Licenses
• B.  Identity Connect Licenses
• C.  Email Verification Credits
• D.  SMS Verification Credits

Northern Trail Outfitters (NTO) is launching a new sportswear brand on its existing consumer portal built on Salesforce Experience Cloud. As part of the launch, emails with promotional links will be sent to existing customers to log in and claim a discount. The marketing manager would like the portal dynamically branded so that users will be directed to the brand link they clicked on; otherwise, users will view a recognizable NTO- branded page.
The campaign is launching quickly, so there is no time to procure any additional licenses.
However, the development team is available to apply any required changes to the portal.
Which approach should the identity architect recommend?

• A.  Configure an additional community site on the same way that is dedicated for the new brand.
• B.  Create a full audience to replicate the portal and set up these the branding accordingly.
• C.  Implement Experiences ID in the code and extend the URLs and endpoints, as required.
• D.  Use tutorials to build the new brand site and embedded login for some identities.

A third-party app provider would like to have users provisioned via a service endpoint before users access their app from Salesforce.
What should an identity architect recommend to configure the requirement with limited changes to the third- party app?

• A.  Create Canvas app in Salesforce for third-party app to provision users.
• B.  Use Salesforce Identity with Security Assertion Markup Language (SAML) for provisioning users.
• C.  Redirect users to the third-party app for registration.
• D.  Use a connected app with user provisioning flow.