Free Access to Salesforce.Integration-Architect.v2026-04-10.q107 with Valid Practice Test (Page 17)

Question 76

Northern Trail Outfitters requires an integration to be set up between one of its Salesforce orgs and an External Data Source using Salesforce Connect. The External Data Source supports Open Data Protocol.
Which configuration should an integration architect recommend be implemented in order to secure requests coming from Salesforce?

A.Configure Special Compatibility for OData connection.
B.Configure CSRF Protection for OData connection.
C.Configure Identity Type for OData connection.

Question 77

Northern Trail Outfitters is creating a distributable Salesforce package for other Salesforce orgs within the company. The package needs to call into a custor ApexREST endpoint in the central org. The security team wants to ensure a specific integration account is used in the central org that they will authorize after installation of the package.
Which three items should an architect recommend to secure the integration in the package?
Choose 3 answers

A.Create an Auth provider in the package and set the consumer key and consumer secret of the connected app in the central org.
B.Contact Salesforce support and create a case to temporarily enable API access for managed packages.
C.Create a connected app in the central org and add the callback URL of each org the package is installed in to redirect to after successful authentication.
D.Use an encrypted field to store the password that the security team enters and use password management for external orgs and set the encryption method to TLS 1.2.
E.Use the Auth Provider configured and select the identity type as Named Principal with OAuth 2.0 as the protocol and Select Start Authentication Flow on Save.

Correct Answer: A,C,E

Explanation
Answer A is valid because creating an Auth provider in the package and setting the consumer key and consumer secret of the connected app in the central org can allow the package to authenticate with the central org using OAuth 2.0. An Auth provider is a configuration that specifies how to connect to an external service that uses a specific identity protocol. A connected app is an application that can access Salesforce resources using APIs and standard protocols. The consumer key and consumer secret are credentials that identify the connected app to Salesforce.
Answer C is valid because creating a connected app in the central org and adding the callback URL of each org the package is installed in to redirect to after successful authentication can enable the package to obtain an access token from the central org using OAuth 2.0. The callback URL is a parameter that specifies where the user should be redirected after granting or denying permission to access Salesforce resources. The access token is a credential that can be used to invoke the custom Apex REST endpoint in the central org.
Answer E is valid because using the Auth Provider configured and selecting the identity type as Named Principal with OAuth 2.0 as the protocol and selecting Start Authentication Flow on Save can initiate the authentication flow when installing the package. The identity type determines how the package accesses Salesforce resources on behalf of users or an application. The Named Principal identity type means that the package uses a single credential, such as a username and password or an access token, to access Salesforce resources for all users. The Start Authentication Flow on Save option means that the package will prompt the user to enter the credential when saving the Auth Provider configuration.
Answer B is not valid because contacting Salesforce support and creating a case to temporarily enable API access for managed packages is not a necessary or recommended action. API access for managed packages is enabled by default and does not require any special permission or configuration from Salesforce support. Moreover, this action does not address the security requirement of using a specific integration account in the central org that will be authorized after installation of the package.
Answer D is not valid because using an encrypted field to store the password that the security team enters and using password management for external orgs and setting the encryption method to TLS 1.2 is not a secure or reliable solution. An encrypted field is a custom field that encrypts sensitive data at rest and masks it on the user interface. However, this field does not prevent unauthorized access or leakage of data, as it can be decrypted by users who have the View Encrypted Data permission or by Apex code that runs in system mode. Moreover, this field does not support encryption methods such as TLS 1.2, which are used for securing data in transit, not at rest.
References: Auth Provider: Connected Apps : OAuth 2.0 Web Server Authentication Flow : Named Credentials as Callout Endpoints : API Access in Packages : Encrypted Fields : Encryption Methods Available in Salesforce
11of30

Question 78

Universal Containers (UC) is a leading provider of management training globally, UC requested students course registration data generated from the Salesforce student community to be synced with the learning management system (LMS). Any update to the course registration data needs to be reflected in the LMS.
Which integration mechanism should be used to meet the requirement?

A.Platform Event
B.Streaming API
C.Change Data Capture (CDC)
D.Outbound Message

Question 79

What should an integration architect consider when recommending Platform Events as an integration solution?

A.Event Monitoring is used to track user activity, such as logins and running reports.
B.Subscribe to an AssetTokenEvent stream to monitor OAuth 2.0 authentication activity.
C.When an event definition is deleted, it's permanently removed and can't be restored.

Question 80

The URL for an external service has been changed without prior notice. The service provides up to date money exchange rates that is accessed severaltimes from Salesforce and is a business critical function for end users.
Which two solutions shouldan Integration Architect recommend be implemented to minimize potential downtime for users in this situation?
Choose 2 answers

A.Named Credentials
B.RemoteSite Settings
C.Content Security Policies
D.Enterprise ESB

Question 76

Question 77

Question 78

Question 79

Question 80

Download PDF File