Universal Containers (UC) wants to integrate a third-party Reward Calculation system with Salesforce to calculate Rewards. Rewards will be calculated on a schedule basis and update back into Salesforce. The integration between Salesforce and the Reward Calculation System needs to be secure. Which are two recommended practices for using OAuth flow in this scenario. choose 2 answers

• A.OAuth Username-Password Flow
• B.OAuth Refresh Token FLow
• C.OAuth SAML Bearer Assertion FLow
• D.OAuth JWT Bearer Token FLow

Comment: *

Name: *

Email: *

Verification: *

An Identity architect works for a multinational, multi-brand organization. As they work with the organization to understand their Customer Identity and Access Management requirements, the identity architect learns that the brand experience is different for each of the customer's sub-brands and each of these branded experiences must be carried through the login experience depending on which sub-brand the user is logging into.
Which solution should the architect recommend to support scalability and reduce maintenance costs, if the organization has more than 150 sub-brands?

• A.Use Audiences to customize the login experience for each sub-brand and pass an audience ID to the community during the OAuth and Security Assertion Markup Language (SAML) flows.
• B.Create a community subdomain for each sub-brand and customize the look and feel of the Login page for each community subdomain to match the brand.
• C.Assign each sub-brand a unique Experience ID and use the Experience ID to dynamically brand the login experience.
• D.Create a separate Salesforce org for each sub-brand so that each sub-brand has complete control over the user experience.

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) has a desktop application to collect leads for marketing campaigns. UC wants to extend this application to integrate with Salesforce to create leads. Integration between the desktop application and Salesforce should be seamless. What Authorization flow should the Architect recommend?

• A.User Agent Flow
• B.JWT Bearer Token Flow
• C.Username and Password Flow
• D.Web Server Authentication Flow

Comment: *

Name: *

Email: *

Verification: *

Universal Containers (UC) is planning to add Wi-Fi enabled GPS tracking devices to its shipping containers so that the GPS coordinates data can be sent from the tracking device to its Salesforce production org via a custom API. The GPS devices have no direct user input or output capabilities.
Which OAuth flow should the identity architect recommend to meet the requirement?

• A.OAuth 2.0 Asset Token Flow for Securing Connected Devices
• B.OAuth 2.0 Web Server Flow for Web App Integration
• C.OAuth 2.0 JWT Bearer Flow for Server-to-Server Integration
• D.OAuth 2.0 Username-Password Flow for Special Scenarios

Comment: *

Name: *

Email: *

Verification: *

In a typical SSL setup involving a trusted party and trusting party, what consideration should an Architect take into account when using digital certificates?

• A.Use of self-signed certificate leads to higher maintenance for trusting party because the cert needs to be added to their truststore.
• B.Use of self-signed certificate leads to higher maintenance for trusted party because they have to act as the trusted CA
• C.Use of self-signed certificate leads to lower maintenance for trusted party because multiple self-signed certs need to be maintained.
• D.Use of self-signed certificate leads to lower maintenance for trusting party because there is no trusted CA cert to maintain.

Comment: *

Name: *

Email: *

Verification: *