最新的高品質 Plat-Arch-203 考試練習題庫

Salesforce Plat-Arch-203 考試概覽:

Salesforce Plat-Arch-203 考試大綱主題:

最新的 Identity and Access Management Designer Plat-Arch-203 免費考試真題：

1. Universal Containers (UC) wants to build a custom mobile app for their field reps to create orders in salesforce. After the first time the users log in, they must be able to access salesforce upon opening the mobile app without being prompted to log in again. What Oauth flows should be considered to support this requirement?

A) SAML Assertion flow with a Bearer Token.
B) User Agent flow with a Refresh Token.
C) Web Server flow with a Refresh Token.
D) Mobile Agent flow with a Bearer Token.

2. Northern Trail Outfitters (NTO) believes a specific user account may have been compromised. NTO inactivated the user account and needs U perform a forensic analysis and identify signals that could Indicate a breach has occurred.
What should NTO's first step be in gathering signals that could indicate account compromise?

A) Download the Setup Audit Trail and review all recent activities performed by the user.
B) Download the Login History and evaluate the details of logins performed by the user.
C) Download the Identity Provider Event Log and evaluate the details of activities performed by the user.
D) Review the User record and evaluate the login and transaction history.

3. A pharmaceutical company has an on-premise application (see illustration) that it wants to integrate with Salesforce.
The IT director wants to ensure that requests must include a certificate with a trusted certificate chain to access the company's on-premise application endpoint.
What should an Identity architect do to meet this requirement?

A) Generate a certificate authority-signed certificate in Salesforce and uploading it to the on-premise application Truststore.
B) Upload a third-party certificate from Salesforce into the on-premise server.
C) Use open SSL to generate a Self-signed Certificate and upload it to the on-premise app.
D) Configure the company firewall to allow traffic from Salesforce IP ranges.

4. Northern Trail Outfitters would like to automatically create new employee users in Salesforce with an appropriate profile that maps to its Active Directory Department.
How should an identity architect implement this requirement?

A) Make a callout during the login flow to query department from Active Directory to assign the appropriate profile.
B) Use the createUser method in the Just-in-Time (JIT) provisioning registration handler to assign the appropriate profile.
C) Use a login flow to collect Security Assertion Markup Language attributes and assign the appropriate profile during Just-In-Time
D) Use the updateUser method in the Just-in-Time (JIT) provisioning registration handler to assign the appropriate profile.

5. Universal Containers wants to allow its customers to log in to its Experience Cloud via a third party authentication provider that supports only the OAuth protocol.
What should an identity architect do to fulfill this requirement?

A) Use certificate-based authentication.
B) Contact Salesforce Support and enable delegate single sign-on.
C) Configure OpenID Connect authentication provider.
D) Create a custom external authentication provider.

問題與答案：