Universal Containers (UC) wants to integrate a web application with Salesforce. The UC team has implemented the OAuth Web-Server Authentication Flow for authentication purposes.
Which two considerations should an Architect point out to UC? (Choose two.)

• A.The flow involves passing the user credentials back and forth.
• B.The flow will NOT provide an OAuth Refresh Token back to the server.
• C.The web application should be hosted on a secure server.
• D.The web server must be able to protect consumer secret.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers has implemented a multi-org strategy and would like to centralize the management of their Salesforce user profiles.
What should the Architect recommend to allow Salesforce profiles to be managed from a central system of record?

• A.Implement JIT provisioning on the SAML IdP that will pass the ProfileID in each assertion.
• B.Implement Delegated Authentication that will update the user profiles as necessary.
• C.Create an Apex scheduled job in one org that will synchronize the other org's profiles.
• D.Implement an OAuth JWT flow to pass the profile credentials between systems.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) is rolling out its new Customer Identity and Access Management Solution built on top of its existing Salesforce instance. UC wants to allow customers to login using Facebook, Google, and other social sign-on providers.
How should this functionality be enabled for UC, assuming ail social sign-on providers support OpenID Connect?

• A.Configure an authentication provider and a registration handler for each social sign-on provider.
• B.Configure an authentication provider and a Just-In-Time (JIT) handler for each social sign-on provider.
• C.Configure a single sign-on setting and a registration handler for each social sign-on provider.
• D.Configure a single sign-on setting and a JIT handler for each social sign-on provider.

Comment: *

Name: *

Email: *

Verification: *

Universal containers (UC) is concerned that having a self-registration page will provide a means for "bots" or unintended audiences to create user records, thereby consuming licences and adding dirty dat a. Which two actions should UC take to prevent unauthorised form submissions during the self-registration process? Choose 2 answers

• A.Use hidden fields populated via java script events in the self-registration page.
• B.Primarily use lookup and picklist fields on the self registration page.
• C.Require a captcha at the end of the self-registration process.
• D.Use open-ended security questions and complex password requirements

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters want to allow its consumer to self-register on it business-to-consumer (B2C) portal that is built on Experience Cloud. The identity architect has recommended to use Person Accounts.
Which three steps need to be configured to enable self-registration using person accounts?
Choose 3 answers

• A.Set organization-wide default sharing for Contact to Public Read Only.
• B.Contact Salesforce Support to enable person accounts.
• C.Enable access to person and business account record types under Public Access Settings.
• D.Contact Salesforce Support to enable business accounts.
• E.Under Login and Registration settings, ensure that the default account field is empty.

Comment: *

Name: *

Email: *

Verification: *