The CIO of universal containers(UC) wants to start taking advantage of the refresh token capability for the UC applications that utilize Oauth 2.0. UC has listed an architect to analyze all of the applications that use Oauth flows to. See where refresh Tokens can be applied. Which two OAuth flows should the architect consider in their evaluation? Choose 2 answers

• A.Web server
• B.Jwt bearer token
• C.User-Agent
• D.Username-password

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) has a custom, internal-only, mobile billing application for users who are commonly out of the office. The app is configured as a connected App in Salesforce. Due to the nature of this app, UC would like to take the appropriate measures to properly secure access to the app. Which two are recommendations to make the UC? Choose 2 answers

• A.Set Login IP Ranges to the internal network for all of the app users Profiles.
• B.Require High Assurance sessions in order to use the Connected App.
• C.Use Google Authenticator as an additional part of the login process
• D.Disallow the use of Single Sign-on for any users of the mobile app.

Comment: *

Name: *

Email: *

Verification: *

What information does the 'Relaystate' parameter contain in sp-Initiated Single Sign-on?

• A.Reference to a URL redirect parameter at the service provider.
• B.Reference to a URL redirect parameter at the identity provider.
• C.Reference to the login address URL of the service provider.
• D.Reference to the login address URL of the identity Provider.

Comment: *

Name: *

Email: *

Verification: *

Universal containers (UC) wants to implement Delegated Authentication for a certain subset of Salesforce users. Which three items should UC take into consideration while building the Web service to handle the Delegated Authentication request? Choose 3 answers

• A.The web service needs to include Source IP as a method parameter.
• B.The return type of the Web service method should be a Boolean value
• C.UC should whitelist all salesforce ip ranges on their corporate firewall.
• D.Delegated Authentication is enabled for the system administrator profile.
• E.The web service can be written using either the soap or rest protocol.

Comment: *

Name: *

Email: *

Verification: *

Northern Trail Outfitters manages application functional permissions centrally as Active Directory groups. The CRM_Superllser and CRM_Reportmg_SuperUser groups should respectively give the user the SuperUser and Reportmg_SuperUser permission set in Salesforce. Salesforce is the service provider to a Security Assertion Markup Language (SAML) identity provider.
Mow should an identity architect ensure the Active Directory groups are reflected correctly when a user accesses Salesforce?

• A.Use a login flow to query standard SAML attributes and set permission sets.
• B.Use the Apex Just-in-Time handler to query standard SAML attributes and set permission sets.
• C.Use a login flow to query custom SAML attributes and set permission sets.
• D.Use the Apex Just-m-Time handler to query custom SAML attributes and set permission sets.

Comment: *

Name: *

Email: *

Verification: *