Free Salesforce Identity-and-Access-Management-Designer Exam Dumps Questions & Answers

Northern Trail Outfitters (NTO) has a requirement to ensure all user logins include a single multi-factor authentication (MFA) prompt. Currently, users are allowed the choice to login with a username and password or via single sign-on against NTO's corporate Identity Provider, which includes built-in MFA.
Which configuration will meet this requirement?

• A.  Create and assign a permission set to all employees that includes "MFA for User Interface Logins."
• B.  Create a custom login flow that enforces MFA and assign it to a permission set. Then assign the permission set to all employees.
• C.  For all employee profiles, set the Session Level Required at Login to High Assurance and add the corporate identity provider to the High Assurance list for the org's Session Security Levels.
• D.  Enable "MFA for User Interface Logins" for your organization from Setup -> Identity Verification.

Universal containers(UC) wants to integrate a third-party reward calculation system with salesforce to calculate rewards. Rewards will be calculated on a schedule basis and update back into salesforce. The integration between Salesforce and the reward calculation system needs to be secure. Which are the recommended best practices for using Oauth flows in this scenario? Choose 2 answers

• A.  Oauthjwt bearer token flow
• B.  Oauth Username-password flow
• C.  Oauth SAML bearer assertion flow
• D.  Oauth refresh token flow

Universal containers (UC) built a customer Community for customers to buy products, review orders, and manage their accounts. UC has provided three different options for customers to log in to the customer Community: salesforce, Google, and Facebook. Which two role combinations are represented by the systems in the scenario? Choose 2 answers

• A.  Salesforce is the service provider and Facebook is the identity provider
• B.  Facebook is the service provider and salesforce is the identity provider
• C.  Salesforce is the service provider and Google is the identity provider
• D.  Google is the service provider and Facebook is the identity provider

A multinational industrial products manufacturer is planning to implement Salesforce CRM to manage their business. They have the following requirements:
1. They plan to implement Partner communities to provide access to their partner network .
2. They have operations in multiple countries and are planning to implement multiple Salesforce orgs.
3. Some of their partners do business in multiple countries and will need information from multiple Salesforce communities.
4. They would like to provide a single login for their partners.
How should an Identity Architect solution this requirement with limited custom development?

• A.  Consolidate Partner related information in a single org and provide access through Salesforce community.
• B.  Register partners in one org and access information from other orgs using APIs.
• C.  Create a partner login for the country of their operation and use SAML federation to provide access to other orgs.
• D.  Allow partners to choose the Salesforce org they need information from and use login flows to authenticate access.

Universal Containers (UC) is building an authenticated Customer Community for its customers. UC does not want customer credentials stored in Salesforce and is confident its customers would be willing to use their social media credentials to authenticate to the community. Which two actions should an Architect recommend UC to take?

• A.  Configure SSO Settings For Facebook to serve as a SAML Identity Provider.
• B.  Use Delegated Authentication to call the Twitter login API to authenticate users.
• C.  Create a Custom Apex Registration Handler to handle new and existing users.
• D.  Configure an Authentication Provider for LinkedIn Social Media Accounts.