最新のPlat-Arch-203問題集で試験を準備する

Salesforce Plat-Arch-203 試験概要:

Salesforce Plat-Arch-203 試験シラバストピック:

Salesforce Certified Platform Identity and Access Management Architect 認定 Plat-Arch-203 試験問題：

1. Universal Containers (UC) is setting up delegated authentication to allow employees to log in using their corporate credentials. UC's security team is concerned about the risks of exposing the corporate login service on the internet and has asked that a reliable trust mechanism be put in place between the login service and Salesforce.
What mechanism should an Architect put in place to enable a trusted connection between the login service and Salesforce?

A) Enforce mutual authentication between systems using SSL.
B) Require the use of Salesforce security tokens on passwords.
C) Include Client Id and Client Secret in the login header callout.
D) Set up a proxy service for the login service in the DMZ.

2. Northern Trail Outfitters (NTO) uses Salesforce for Sales Opportunity Management. Okta was recently brought in to Just-in-Time (JIT) provision and authenticate NTO users to applications. Salesforce users also use Okta to authorize a Forecasting web application to access Salesforce records on their behalf.
Which two roles are being performed by Salesforce?
Choose 2 answers

A) OAuth Client
B) SAML Service Provider
C) OAuth Resource Server
D) SAML Identity Provider

3. Universal containers (UC) has multiple salesforce orgs and would like to use a single identity provider to access all of their orgs. How should UC'S architect enable this behavior?

A) Ensure that users have the same alias value in their user records in all of UC's salesforce orgs.
B) Ensure that users have the same Federation ID value in their user records in all of UC's salesforce orgs.
C) Ensure that users have the same email value in their user records in all of UC's salesforce orgs.
D) Ensure the same username is allowed in multiple orgs by contacting salesforce support.

4. An Enterprise is using a Lightweight Directory Access Protocol (LDAP ) server as the only point for user authentication with a username/password. Salesforce delegated authentication is configured to integrate Salesforce under single sign-on (SSO).
Mow can end users change their password?

A) Users can change it on the enterprise LDAP authentication portal.
B) Users once logged In, can go to the Change Password screen in Salesforce.
C) Users can click on the "Forgot your Password" link on the Salesforce.com login page.
D) Users can request the Salesforce Admin to reset their password.

5. Universal containers (UC) has implemented ansp-Initiated SAML flow between an external IDP and salesforce. A user at UC is attempting to login to salesforce1 for the first time and is being prompted for salesforce credentials instead of being shown the IDP login page. What is the likely cause of the issue?

A) The "Redirect to identity provider" option has not been selected the SAML configuration.
B) The user has not configured the salesforce1 mobile app to use my domain for login
C) The user has not been granted the "Enable single Sign-on" permission
D) The "Redirect to Identity Provider" option has been selected in the my domain configuration.

質問と回答：