Free Identity-and-Access-Management-Designer Exam Dumps

No Installation Required, Instantly Prepare for the Identity-and-Access-Management-Designer exam and please click the below link to start the Identity-and-Access-Management-Designer Exam Simulator with a real Identity-and-Access-Management-Designer practice exam questions.
Use directly our on-line Identity-and-Access-Management-Designer exam dumps materials and try our Testing Engine to pass the Identity-and-Access-Management-Designer which is always updated.

Exam Code: Identity-and-Access-Management-Designer
Exam Title: Salesforce Certified Identity and Access Management Designer (SP19)
Vendor: Salesforce
Exam Questions: 196
Last Updated: December 18th,2024

Question 1

Universal Containers (UC) is planning to deploy a custom mobile app that will allow users to get e-signatures from its customers on their mobile devices. The mobile app connects to Salesforce to upload the e-signature as a file attachment and uses OAuth protocol for both authentication and authorization. What is the most recommended and secure OAuth scope setting that an Architect should recommend?

A. Id
B. Web
C. Api
D. Custom_permissions

Correct Answer:D

Question 2

Universal containers (UC) wants to integrate a Web application with salesforce. The UC team has implemented the Oauth web-server Authentication flow for authentication process. Which two considerations should an architect point out to UC? Choose 2 answers

A. The web application should be hosted on a secure server.
B. The web server must be able to protect consumer privacy
C. The flow involves passing the user credentials back and forth.
D. The flow will not provide an Oauth refresh token back to the server.

Correct Answer:AB

Question 3

Containers (UC) has decided to implement a federated single Sign-on solution using a third-party Idp. In reviewing the third-party products, they would like to ensure the product supports the automated provisioning and deprovisioning of users. What are the underlining mechanisms that the UC Architect must ensure are part of the product?

A. SOAP API for provisioning; Just-in-Time (JIT) for Deprovisioning.
B. Just-In-time (JIT) for Provisioning; SOAP API for Deprovisioning.
C. Provisioning API for both Provisioning and Deprovisioning.
D. Just-in-Time (JIT) for both Provisioning and Deprovisioning.

Correct Answer:D

Question 4

Universal Containers is budding a web application that will connect with the Salesforce API using JWT OAuth Flow.
Which two settings need to be configured in the connect app to support this requirement? Choose 2 answers

A. The Use Digital Signature option in the connected app.
B. The "web" OAuth scope in the connected app,
C. The "api" OAuth scope in the connected app.
D. The "edair_api" OAuth scope m the connected app.

Correct Answer:AC

Question 5

Northern Trail Outfitters (NTO) uses Salesforce Experience Cloud sites (previously known as Customer Community) to provide a digital portal where customers can login using their Google account.
NTO would like to automatically create a case record for first time users logging into Salesforce Experience Cloud.
What should an Identity architect do to fulfill the requirement?

A. Configure an authentication provider for Social Login using Google and a custom registration handler.
B. Implement a Just-in-Time handler class that has logic to create cases upon first login.
C. Create an authentication provider for Social Login using Google and leverage standard registration handler.
D. Implement a login flow with a record create component for Case.

Correct Answer:D