Universal Containers (UC) employees have Salesforce access from restricted IP ranges only, to protect against unauthorised access. UC wants to roll out the Salesforce1 mobile app and make it accessible from any location. Which two options should an Architect recommend? Choose 2 answers

• A.Relax the IP restrictions in the Connect App settings for the Salesforce1 mobile app.
• B.Relax the IP restriction with a second factor in the Connect App settings for Salesforce1 mobile app.
• C.Remove existing restrictions on IP ranges for all types of user access.
• D.Use Login Flow to bypass IP range restriction for the mobile app.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) has a mobile application for its employees that uses data from Salesforce as well as uses Salesforce for authentication purposes. UC wants its mobile users to only enter their credentials the first time they run the app. The application has been live for a little over 6 months, and all of the users who were a part of the initial launch are complaining that they have to re-authenticate. UC has also recently changed the URI Scheme associated with the mobile app.
What should the Architect at UC first investigate?

• A.Check the Refresh Token Policy defined in the Salesforce Connected App.
• B.Confirm that the Access Token's Time-To-Live policy has been set appropriately.
• C.Verify that the Callback URL is correctly pointing to the new URI Scheme.
• D.Validate that the users are checking the box to remember their passwords.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) wants to use Salesforce for sales orders and a legacy of system for order fulfillment. The legacy system must update the status of orders in 65* Salesforce in real time as they are fulfilled. UC decides to use OAuth for connecting the legacy system to Salesforce. What OAuth flow should be considered that doesn't require storing credentials, client secret or refresh tokens?

• A.Web Server flow
• B.JWT Bearer Token flow
• C.Username-Password flow
• D.User Agent flow

Comment: *

Name: *

Email: *

Verification: *

Universal containers (UC) employees have salesforce access from restricted ip ranges only, to protect against unauthorised access. UC wants to rollout the salesforce1 mobile app and make it accessible from any location. Which two options should an architect recommend? Choose 2 answers

• A.Relax the ip restriction with a second factor in the connect app settings for salesforce1 mobile app
• B.Use login flow to bypass ip range restriction for the mobile app.
• C.Remove existing restrictions on ip ranges for all types of user access.
• D.Relax the ip restriction in the connect app settings for the salesforce1 mobile app

Comment: *

Name: *

Email: *

Verification: *

Containers (UC) has decided to implement a federated single Sign-on solution using a third-party Idp. In reviewing the third-party products, they would like to ensure the product supports the automated provisioning and deprovisioning of users. What are the underlining mechanisms that the UC Architect must ensure are part of the product?

• A.Just-In-time (JIT) for Provisioning; SOAP API for Deprovisioning.
• B.Provisioning API for both Provisioning and Deprovisioning.
• C.Just-in-Time (JIT) for both Provisioning and Deprovisioning.
• D.SOAP API for provisioning; Just-in-Time (JIT) for Deprovisioning.

Comment: *

Name: *

Email: *

Verification: *