Latest Salesforce Plat-Arch-203 Actual Free Exam Questions & Community Discussion, Page 1

Question #1

A multinational industrial products manufacturer is planning to implement Salesforce CRM to manage their business. They have the following requirements:
1. They plan to implement Partner communities to provide access to their partner network .
2. They have operations in multiple countries and are planning to implement multiple Salesforce orgs.
3. Some of their partners do business in multiple countries and will need information from multiple Salesforce communities.
4. They would like to provide a single login for their partners.
How should an Identity Architect solution this requirement with limited custom development?

A. Allow partners to choose the Salesforce org they need information from and use login flows to authenticate access.

B. Create a partner login for the country of their operation and use SAML federation to provide access to other orgs.

C. Consolidate Partner related information in a single org and provide access through Salesforce community.

D. Register partners in one org and access information from other orgs using APIs.

Discussion 0

Correct Answer: B Vote an answer

Question #2

Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the OAuth 2.0 user-agent flow (this flow uses the OAuth 2.0 implicit grant type).
Which three OAuth concepts apply to this flow?
Choose 3 answers

A. Verification Code

B. Refresh Token

C. Client ID

D. Authorization Code

E. Scopes

Discussion 0

Correct Answer: B,C,E Vote an answer

Question #3

Universal Containers (UC) is building a customer community and will allow customers to authenticate using Facebook credentials. The First time the user authenticating using facebook, UC would like a customer account created automatically in their Accounting system. The accounting system has a web service accessible to Salesforce for the creation of accounts. How can the Architect meet these requirements?

A. Use JIT Provisioning to automatically create the account in the accounting system.

B. Add an Apex callout in the registration handler of the authorization provider.

C. Use OAuth JWT flow to pass the data from Salesforce to the Accounting System.

D. Create a custom application on Heroku that manages the sign-on process from Facebook.

Discussion 0

Correct Answer: B Vote an answer

Question #4

Universal Containers (UC) rolling out a new Customer Identity and Access Management Solution will be built on top of their existing Salesforce instance.
Several service providers have been setup and integrated with Salesforce using OpenlD Connect to allow for a seamless single sign-on experience. UC has a requirement to limit user access to only a subset of service providers per customer type.
Which two steps should be done on the platform to satisfy the requirement?
Choose 2 answers

A. Set each of the Connected App access settings to Admin Pre-Approved.

B. Manage which connected apps a user has access to by assigning authentication providers to the users profile.

C. Assign the connected app to the customer community, and enable the users profile in the Community settings.

D. Use Profiles and Permission Sets to assign user access to Admin Pre-Approved Connected Apps.

Discussion 0

Correct Answer: A,D Vote an answer

Question #5

In a typical SSL setup involving a trusted party and trusting party, what consideration should an Architect take into account when using digital certificates?

A. Use of self-signed certificate leads to higher maintenance for trusting party because the cert needs to be added to their truststore.

B. Use of self-signed certificate leads to lower maintenance for trusting party because there is no trusted CA cert to maintain.

C. Use of self-signed certificate leads to higher maintenance for trusted party because they have to act as the trusted CA

D. Use of self-signed certificate leads to lower maintenance for trusted party because multiple self-signed certs need to be maintained.

Discussion 0

Correct Answer: B Vote an answer

Question #6

A leading fitness tracker company is getting ready to launch a customer community. The company wants its customers to login to the community and connect their fitness device to their profile. Customers should be able to obtain exercise details and fitness recommendation in the community.
Which should be used to satisfy this requirement?

A. Login Flows

B. OAuth Device Flow

C. Single Sign-On Settings

D. Named Credentials

Discussion 0

Correct Answer: B Vote an answer

Question #7

When designing a multi-branded Customer Identity and Access Management solution on the Salesforce Platform, how should an identity architect ensure a specific brand experience in Salesforce is presented?

A. Add a custom parameter to the service provider's OAuth/SAML call and implement logic on its login page to apply branding based on the parameters value.

B. Provide a brand picker that the end user can use to select its sub-brand when they arrive on salesforce.

C. The Audience ID, which can be set in a shared cookie.

D. The Experience ID, which can be included in OAuth/Open ID flows and Security Assertion Markup Language (SAML) flows as a URL parameter.

Discussion 0

Correct Answer: D Vote an answer

Question #8

Universal containers (UC) wants to implement a partner community. As part of their implementation, UC would like to modify both the Forgot password and change password experience with custom branding for their partner community users. Which 2 actions should an architect recommend to UC? Choose 2 answers

A. Build a custom visualforce page for the change password experience and a community builder page for the Forgot password experience.

B. Build a community builder page for both the change password and Forgot password experiences.

C. Build a custom visualforce page for both the change password and Forgot password experiences.

D. Build a community builder page for the change password experience and Custom Visualforce page for the Forgot password experience.

Discussion 0

Correct Answer: A,C Vote an answer

Question #9

A service provider (SP) supports both Security Assertion Markup Language (SAML) and OpenID Connect (OIDC).
When integrating this SP with Salesforce, which use case is the determining factor when choosing OIDC or SAML?

A. OIDC is more secure than SAML and therefore is the obvious choice.

B. If the user has a session on Salesforce, you do not want them to be prompted for a username and password when they login to the SP.

C. The SP needs to perform API calls back to Salesforce on behalf of the user after the user logs in to the service provider.

D. They are equivalent protocols and there is no real reason to choose one over the other.

Discussion 0

Correct Answer: C Vote an answer

Question #10

A company wants to provide its employees with a custom mobile app that accesses Salesforce. Users are required to download the internal native IOS mobile app from corporate intranet on their mobile device. The app allows flexibility to access other Non Salesforce internal applications once users authenticate with Salesforce. The apps self-authorize, and users are permitted to use the apps once they have logged into Salesforce.
How should an identity architect meet the above requirements with the privately distributed mobile app?

A. Create a new hybrid mobile app and use the connected app with OAuth to authenticate users for Salesforce and non-Salesforce internal apps.

B. Use connected app with OAuth and Security Assertion Markup Language (SAML) to access other Non Salesforce internal apps.

C. Use Salesforce as an identity provider (IdP) to access the mobile app and use the external IdP for other non-Salesforce internal apps.

D. Configure Mobile App settings in connected app and Salesforce as identity provider for non-Salesforce internal apps.

Discussion 0

Correct Answer: D Vote an answer

Question #11

Universal Containers (UC) is considering a Customer 360 initiative to gain a single source of the truth for its customer data across disparate systems and services. UC wants to understand the primary benefits of Customer 360 Identity and how it contributes ato successful Customer 360 Truth project.
What are two are key benefits of Customer 360 Identity as it relates to Customer 360?
Choose 2 answers

A. Customer 360 Identity automatically integrates with Customer 360 Data Manager and Customer 360 Audiences to seamlessly populate all user data.

B. Customer 360 Identity not only provides a unified sign up and sign in experience, but also tracks anonymous user activity prior to signing up so organizations can understand user activity before and after the users identify themselves.

C. Customer 360 Identity enables an organization to build a single login for each of its customers, giving the organization an understanding of the user's login activity across all its digital properties and applications.

D. Customer 360 Identity supports multiple brands so you can deliver centralized identity services and correlation of user activity,

Discussion 0

Correct Answer: C,D Vote an answer

Salesforce Plat-Arch-203 Actual Free Exam Questions & Community Discussion

Download Free Salesforce Plat-Arch-203 Demo