Choice defines this era of information technology, and Prep4SureReview is the choice that spares Identity-and-Access-Management-Designer candidates the tedium of paper-based prep and the nerves of time-constrained study: 245+ Q&As covering the Salesforce Certified Identity and Access Management Designer objectives, on every device you own.
Salesforce Identity-and-Access-Management-Designer Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Salesforce as an Identity Provider | 17% | - OAuth flow types and implementation concepts - Connected Apps usage for identity provisioning |
| Access Management Best Practices | 15% | - Session security and high-assurance sessions - Two-Factor Authentication (2FA) risk mitigation |
| Salesforce Identity | 12% | - License type considerations for identity requirements - Identity Connect role in IAM solutions |
| Community (Partner and Customer) | 18% | - Community self-registration and authentication - External identity solutions for Experience Cloud |
| Accepting Third-Party Identity in Salesforce | 21% | - Authentication mechanisms with external identity providers - Salesforce as service provider identity solutions |
| Identity Management Concepts | 17% | - Authentication, authorization, and accountability fundamentals - Trust establishment between systems |
Studying for Identity-and-Access-Management-Designer Without Paper and Without Borders
- Identity Management Concepts (17%)
- Salesforce Identity (12%)
- Salesforce as an Identity Provider (17%)
Salesforce Certified Identity and Access Management Designer Sample Questions:
Universal containers (UC) has multiple salesforce orgs and would like to use a single identity provider to access all of their orgs. How should UC'S architect enable this behavior?
- A. Ensure that users have the same Federation ID value in their user records in all of UC's salesforce orgs.
- B. Ensure the same username is allowed in multiple orgs by contacting salesforce support.
- C. Ensure that users have the same email value in their user records in all of UC's salesforce orgs.
- D. Ensure that users have the same alias value in their user records in all of UC's salesforce orgs.
Correct Answer: A 🗳️
Universal Containers built a custom mobile app for their field reps to create orders in Salesforce. OAuth is used for authenticating mobile users. The app is built in such a way that when a user session expires after Initial login, a new access token is obtained automatically without forcing the user to log in again. While that improved the field reps' productivity, UC realized that they need a "logout" feature.
What should the logout function perform in this scenario, where user sessions are refreshed automatically?
- A. Clear out all the tokens to stop auto session refresh.
- B. Invoke the revocation URL and pass the access token.
- C. Invoke the revocation URL and pass the refresh token.
- D. Clear out the client Id to stop auto session refresh.
Correct Answer: C 🗳️
Universal Containers (UC) wants its closed Won opportunities to be synced to a Data Warehouse in near real time. UC has implemented Outbound Message to enable near real-time data sync. UC wants to ensure that communication between Salesforce and Target System is Secure. What Certificate is sent along with the Outbound Message?
- A. The default Client Certificate or a Certificate from Certificate and Key Management menu.
- B. The Self-Signed Certificates from the Certificate & Key Management menu.
- C. The CA-Signed Certificate from the Certificate and Key Management menu.
- D. The default Client Certificate from the Develop--> API Menu.
Correct Answer: D 🗳️
Universal Containers wants to implement Single Sign-on for a Salesforce org using an external Identity Provider and corporate identity store.
What type of authentication flow is required to support deep linking'
- A. Service-Provider-Initiated SSO
- B. Web Server OAuth SSO flow
- C. StartURL on Identity Provider
- D. Identity-Provider-initiated SSO
Correct Answer: A 🗳️
Universal containers (UC) would like to enable SSO between their existing Active Directory infrastructure and salesforce. The it team prefers to manage all users in Active Directory and would like to avoid doing any initial setup of users in salesforce directly, including the correct assignment of profiles, roles and groups. Which two optimal solutions should UC use to provision users in salesforce? Choose 2 answers
- A. Use the salesforce REST API to sync users from active directory to salesforce
- B. Use Active Directory Federation Services to sync users from active directory to salesforce.
- C. Use Identity connect to sync users from Active Directory to salesforce
- D. Use an app exchange product to sync users from Active Directory to salesforce.
Correct Answer: C,D 🗳️
Viewing page 1 out of 49 pages.
Viewing questions 1-5 out of 245 questions.
Alberta 
Meredith 
Olga 
Baldwin 
Mortimer 
Taylor 
Shirley 
Craig 
Primo 
Boris 
Emmanuel 
Larry 
Craig 
Bard 
