universal containers wants to build a custom mobile app connecting to salesforce using Oauth, and would like to restrict the types of resources mobile users can access. What Oauth feature of Salesforce should be used to achieve the goal?

• A.Refresh Tokens
• B.Access Tokens
• C.Mobile PINS
• D.Scopes

Comment: *

Name: *

Email: *

Verification: *

A security architect is rolling out a new multi-factor authentication (MFA) mandate, where all employees must go through a secure authentication process before accessing Salesforce. There are multiple Identity Providers (IdP) in place and the architect is considering how the "Authentication Method Reference" field (AMR) in the Login History can help.
Which two considerations should the architect keep in mind?
Choose 2 answers

• A.Both OIDC and Security Assertion Markup Language (SAML) are supported but AMR must be implemented at IdP.
• B.High-assurance sessions must be configured under Session Security Level Policies.
• C.Dependency on what is supported by OpenID Connect (OIDC) implementation at IdP.
• D.AMR field shows the authentication methods used at IdP.

Comment: *

Name: *

Email: *

Verification: *

A global company has built an external application that uses data from its Salesforce org via an OAuth 2.0 authorization flow. Upon logout, the existing Salesforce OAuth token must be invalidated.
Which action will accomplish this?

• A.Use a HTTP POST to the System for Cross-domain Identity Management (SCIM) endpoint, including the current OAuth token.
• B.Use a HTTP POST to make a call to the revoke token endpoint.
• C.Enable Single Logout with a secure logout URL.
• D.Use a HTTP POST to request the refresh token for the current user.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) is building a customer community and will allow customers to authenticate using Facebook credentials. The First time the user authenticating using facebook, UC would like a customer account created automatically in their Accounting system. The accounting system has a web service accessible to Salesforce for the creation of accounts. How can the Architect meet these requirements?

• A.Use OAuth JWT flow to pass the data from Salesforce to the Accounting System.
• B.Create a custom application on Heroku that manages the sign-on process from Facebook.
• C.Use JIT Provisioning to automatically create the account in the accounting system.
• D.Add an Apex callout in the registration handler of the authorization provider.

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters (NTO) is launching a new sportswear brand on its existing consumer portal built on Salesforce Experience Cloud. As part of the launch, emails with promotional links will be sent to existing customers to log in and claim a discount. The marketing manager would like the portal dynamically branded so that users will be directed to the brand link they clicked on; otherwise, users will view a recognizable NTO-branded page.
The campaign is launching quickly, so there is no time to procure any additional licenses. However, the development team is available to apply any required changes to the portal.
Which approach should the identity architect recommend?

• A.Implement Experience ID in the code and extend the URLs and endpomts, as required.
• B.Use Heroku to build the new brand site and embedded login to reuse identities.
• C.Create a full sandbox to replicate the portal site and update the branding accordingly.
• D.Configure an additional community site on the same org that is dedicated for the new brand.

Comment: *

Name: *

Email: *

Verification: *