Universal Containers (UC) is rolling out its new Customer Identity and Access Management Solution built on top of its existing Salesforce instance. UC wants to allow customers to login using Facebook, Google, and other social sign-on providers.
How should this functionality be enabled for UC, assuming ail social sign-on providers support OpenID Connect?

• A.Configure a single sign-on setting and a registration handler for each social sign-on provider.
• B.Configure an authentication provider and a registration handler for each social sign-on provider.
• C.Configure an authentication provider and a Just-In-Time (JIT) handler for each social sign-on provider.
• D.Configure a single sign-on setting and a JIT handler for each social sign-on provider.

Comment: *

Name: *

Email: *

Verification: *

Universal containers (UC) has a mobile application that calls the salesforce REST API. In order to prevent users from having to enter their credentials everytime they use the app, UC has enabled the use of refresh Tokens as part of the salesforce connected App and updated their mobile app to take advantage of the refresh token. Even after enabling the refresh token, Users are still complaining that they have to enter their credentials once a day. What is the most likely cause of the issue?

• A.The refresh token expiration policy is set incorrectly in salesforce
• B.The Oauth authorizations are being revoked by a nightly batch job.
• C.The app is requesting too many access Tokens in a 24-hour period
• D.The users forget to check the box to remember their credentials.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers is considering using Delegated Authentication as the sole means of Authenticating of Salesforce users. A Salesforce Architect has been brought in to assist with the implementation. What two risks Should the Architect point out? Choose 2 answers

• A.Delegated Authentication is enabled or disabled for the entire Salesforce org.
• B.Salesforce users will be locked out of Salesforce if the web service goes down.
• C.The web service must reside on a public cloud service, such as Heroku.
• D.UC will be required to develop and support a custom SOAP web service.

Comment: *

Name: *

Email: *

Verification: *

In a typical SSL setup involving atrusted party and trusting party, what consideration should an Architect take into account when using digital certificates?

• A.Use of self-signed certificate leads to lower maintenance for trusted party because multiple self-signed certs need to be maintained.
• B.Use of self-signed certificate leads to lower maintenance for trusting party because there is no trusted CA cert to maintain.
• C.Use of self-signed certificate leads to higher maintenance for trusted party because they have to act as the trusted CA
• D.Use of self-signed certificate leads to higher maintenance for trusting party because the cert needs to be added to their truststore.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) has built a custom time tracking app for its employee. UC wants to leverage Salesforce Identity to control access to the custom app.
At a minimum, which Salesforce license is required to support this requirement?

• A.Identity Connect
• B.Identity Verification
• C.Identity Only
• D.External Identity

Comment: *

Name: *

Email: *

Verification: *