Identity & Access Managment Set 3

Universal Containers is implementing a new Experience Cloud site and the identity architect wants to use dynamic branding features as part of the login process. Which two options should the identity architect recommend to support dynamic branding for the site? Two Answers:

• To use dynamic branding, the community must be built with the Visualforce + Salesforce Tabs template.

• An experience ID (expid) or placeholder parameter must be used in the URL to represent the brand.

• An external content management system (CMS) must be used for dynamic branding on Experience Cloud sites.

• To use dynamic branding, the community must be built with the Customer Account Portal template.

Universal Containers wants to allow its customers to log in to its Experience Cloud via a third party authentication provider that supports only the OAuth protocol. What should an identity architect do to fulfill this requirement?

• Contact Salesforce Support and enable delegate single sign-on.

• Use certificate-based authentication.

• Create a custom external authentication provider.

• Configure OpenID Connect authentication provider

An Identity architect works for a multinational, multi-brand organization. As they work with the organization to understand their customer Identity and Access Management requirements, the identity architect learns that the brand experience is different for each of the customer's sub-brands and each of these branded experiences must be carried through the login experience depending on which sub-brand the user is logging into Which solution should the architect recommend to support scalability and reduce maintenance costs, if the organization has more than 150 sub-brands?

• Create a community subdomain for each sub-brand and customize the look and feel of the Login page for each community subdomain to match the brand.

• Create a separate Salesforce org for each sub-brand so that each sub-brand has complete control over the user experience.

• Use Audiences to customize the login experience for each sub-brand and pass an audience ID to the community during the OAuth and Security Assertion Markup Language (SAML) flows

• Assign each sub-brand a unique Experience ID and use the Experience ID to dynamically brand the login experience.

Universal Containers (UC) is rolling out its new Customer Identity and Access Management Solution built on top of its existing Salesforce instance. UC wants to allow customers to login using Facebook, Google, and other social sign-on providers. How should this functionality be enabled for UC, assuming all social sign-on providers support OpenID Connect?

• Configure a single sign-on setting and a registration handler for each social sign-on provider.

• Configure an authentication provider and a Just-In-Time (JIT) handler for each social sign-on provider

• Configure a single sign-on setting and a JIT handler for each social sign-on provider.

• Configure an authentication provider and a registration handler for each social sign-on provider.

An identity architect is implementing a mobile-first Consumer Identity Access Management (CIAM) for external users. User authentication is the only requirement. The users email or mobile phone number should be supported as a username. Which two licenses are needed to meet this requirement? Choose 2 answers

• Identity Connect Licenses

• External Identity Licenses

• Email Verification Credits

• SMS Verification Credits

Northern Trail Outfitters would like to automatically create new employee users in Salesforce with an appropriate profile that maps to its Active Directory Department. How should an identity architect implement this requirement?

• Use the createUser method in the Just-in-Time (JIT) provisioning registration handler to assign the appropriate profile.

• Use the updateUser method in the Just-in-Time (JIT) provisioning registration handler to assign the appropriate profile.

• Use a login flow to collect Security Assertion Markup Language attributes and assign the appropriate profile during Just-in-Time (JIT) provisioning.

• Make a callout during the login flow to query department from Active Directory to assign the appropriate profile.

A financial services company uses Salesforce and has a compliance requirement to track information about devices from which users log in. Also, a Salesforce Security Administrator needs to have the ability to revoke the device from which users log in. What should be used to fulfill this requirement?

• Use Login Flows to capture device from which users log in and store device and user information in a custom object.

• Use the Login History object to track information about devices from which users log in.

• Use multi-factor authentication (MFA) to meet the compliance requirement to track device information.

• Use the Activations feature to meet the compliance requirement to track device information.

Universal Containers (UC) currently uses Salesforce Sales Cloud and an external billing application. Both Salesforce and the billing application are accessed several times a day to manage customers. UC would like to configure single sign-on and leverage Salesforce as the identity provider. Additionally, UC would like the billing application to be accessible from Salesforce. A redirect is acceptable. Which two Salesforce tools should an identity architect recommend to satisfy the requirements? Choose 2 answers

• App Launcher

• Salesforce Canvas

• Identity Connect

• Connected Apps

Universal Containers (UC) is building a custom employee hub application on Amazon Web Services (AWS) and would like to store their users' credentials there. Users will also need access to Salesforce for internal operations. UC has tasked an identity architect with evaluating different solutions for authentication and authorization between AWS and Salesforce. How should an identity architect configure AWS to authenticate and authorize Salesforce users?

• Create a custom external authentication provider.

• Configure the custom employee app as a connected app.

• Develop a custom Auth server in AWS.

• Configure AWS as an OpenID Connect Provider

Universal Containers (UC) uses Salesforce as a CRM and identity provider (IDP) for their Sales Team to seamlessly login to internal portals. The IT team at UC is now evaluating Salesforce to act as an IdP for its remaining employees. Which Salesforce license is required to fulfill this requirement?

• Identity Connect

• External Identity

• Identity Verification

• Identity Only