Northern Trail Outfitters (NTO) has a requirement to ensure all user logins include a single multi-factor authentication (MFA) prompt. Currently, users are allowed the choice to login with a username and password or via single sign-on against NTO's corporate Identity Provider, which includes built-in MFA.
Which configuration will meet this requirement?

• A.For all employee profiles, set the Session Level Required at Login to High Assurance and add the corporate identity provider to the High Assurance list for the org's Session Security Levels.
• B.Create a custom login flow that enforces MFA and assign it to a permission set. Then assign the permission set to all employees.
• C.Enable "MFA for User Interface Logins" for your organization from Setup -> Identity Verification.
• D.Create and assign a permission set to all employees that includes "MFA for User Interface Logins."

Comment: *

Name: *

Email: *

Verification: *

An Architect needs to advise the team that manages the Identity Provider how to differentiate Salesforce from other Service Providers. What SAML SSO setting in Salesforce provides this capability?

• A.Issuer.
• B.Identity Provider Login URL.
• C.SAML Identity Location.
• D.Entity Id

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) employees have Salesforce access from restricted IP ranges only, to protect against unauthorized access. UC wants to roll out the Salesforce mobile app and make it accessible from any location.
Which two options should an Architect recommend? (Choose two.)

• A.Remove existing restrictions on IP ranges for all types of user access.
• B.Use Login Flow to bypass IP range restriction for the mobile app.
• C.Relax the IP restriction with a second factor in the Connect App settings for Salesforce mobile app.
• D.Relax the IP restriction in the Connect App settings for the Salesforce mobile app.

Comment: *

Name: *

Email: *

Verification: *

Universal containers (UC) is concerned that having a self-registration page will provide a means for "bots" or unintended audiences to create user records, thereby consuming licences and adding dirty dat a. Which two actions should UC take to prevent unauthorised form submissions during the self-registration process? Choose 2 answers

• A.Use hidden fields populated via java script events in the self-registration page.
• B.Require a captcha at the end of the self-registration process.
• C.Primarily use lookup and picklist fields on the self registration page.
• D.Use open-ended security questions and complex password requirements

Comment: *

Name: *

Email: *

Verification: *

Users logging into Salesforce are frequently prompted to verify their identity.
The identity architect is required to provide recommendations so that frequency of prompt verification can be reduced.
What should the identity architect recommend to meet the requirement?

• A.Set trusted IP ranges for the organization.
• B.Implement multi-factor authentication for the Salesforce org.
• C.Implement 2FA authentication for the Salesforce org.
• D.Implement an single sign-on for Salesforce using an external identity provider.

Comment: *

Name: *

Email: *

Verification: *