Universal containers (UC) is building a mobile application that will make calls to the salesforce REST API. Additionally UC would like to provide the optimal experience for its mobile users. Which two OAuth scopes should UC configure in the connected App? Choose 2 answers

• A.Refresh token
• B.Web
• C.full
• D.API

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) has a custom, internal-only, mobile billing application for users who are commonly out of the office. The app is configured as a Connected App in Salesforce. Due to the nature of this app, UC would like to take the appropriate measures to properly secure access to the app.
Which two solutions should be recommended? (Choose two.)

• A.Disallow the use of Single Sign-on for any users of the mobile app.
• B.Require High Assurance sessions in order to use the Connected App.
• C.Set Login IP Ranges to the internal network for all of the app users' Profiles.
• D.Use Google Authenticator as an additional part of the login process.

Comment: *

Name: *

Email: *

Verification: *

Universal containers wants salesforce inbound Oauth-enabled integration clients to use SAML-BASED single Sign-on for authentication. What Oauth flow would be recommended in this scenario?

• A.User-Token Oauth flow
• B.SAML assertion Oauth flow
• C.User-Agent Oauth flow
• D.Web server Oauth flow

Comment: *

Name: *

Email: *

Verification: *

A company's external application is protected by Salesforce through OAuth. The identity architect for the project needs to limit the level of access to the data of the protected resource in a flexible way.
What should be done to improve security?

• A.Leverage external objects and data classification policies.
• B.Create custom scopes and assign to the connected app.
• C.Define a permission set that grants access to the app and assign to authorized users.
• D.Select "Admin approved users are pre-authonzed" and assign specific profiles.

Comment: *

Name: *

Email: *

Verification: *

A real estate company wants to provide its customers a digital space to design their interior decoration options. To simplify the registration to gain access to the community site (built in Experience Cloud), the CTO has requested that the IT/Development team provide the option for customers to use their existing social-media credentials to register and access.
The IT lead has approached the Salesforce Identity and Access Management (IAM) architect for technical direction on implementing the social sign-on (for Facebook, Twitter, and a new provider that supports standard OpenID Connect (OIDC)).
Which two recommendations should the Salesforce IAM architect make to the IT Lead?
Choose 2 answers

• A.For supporting OIDC it is necessary to enable Security Assertion Markup Language (SAML) with Just-in-Time provisioning (JIT) and OAuth 2.0.
• B.Apex coding skills are needed for registration handler to create and update users.
• C.Use declarative registration handler process builder/flow to create, update users and contacts.
• D.Authentication provider configuration is required each social sign-on providers; and enable Authentication providers in community.

Comment: *

Name: *

Email: *

Verification: *