Salesforce Identity-and-Access-Management-Architect 問題集

質問 1：
Refer to the exhibit.

Outfitters (NTO) is using Experience Cloud as an Identity for its application on Heroku. The application on Heroku should be able to handle two brands, Northern Trail Shoes and Northern Trail Shirts.
A user should select either of the two brands in Heroku before logging into the community. The app then performs Authorization using OAuth2.0 with the Salesforce Experience Cloud site.
NTO wants to make sure it renders login page images dynamically based on the user's brand preference selected in Heroku before Authorization.
what should an identity architect do to fulfill the above requirements?
A. Authorize third-party service by sending authorization requests to the community-url/services/oauth2/authorize/cookie_value.
B. For each brand create different communities and redirect users to the appropriate community using a custom Login controller written in Apex.
C. Create multiple login screens using Experience Builder and use Login Flows at runtime to route to different login screens.
D. Authorize third-party service by sending authorization requests to the community-url/services/oauth2/authonze/expid_value.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Universal containers (UC) is concerned that having a self-registration page will provide a means for "bots" or unintended audiences to create user records, thereby consuming licences and adding dirty data. Which two actions should UC take to prevent unauthorised form submissions during the self-registration process? Choose
2 answers
A. Use hidden fields populated via java script events in the self-registration page.
B. Use open-ended security questions and complex password requirements
C. Primarily use lookup and picklist fields on the self registration page.
D. Require a captcha at the end of the self-registration process.
正解：A,D
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Universal containers (UC) built a customer Community for customers to buy products, review orders, and manage their accounts. UC has provided three different options for customers to log in to the customer Community: salesforce, Google, and Facebook. Which two role combinations are represented by the systems in the scenario? Choose 2 answers
A. Facebook is the service provider and salesforce is the identity provider
B. Salesforce is the service provider and Facebook is the identity provider
C. Salesforce is the service provider and Google is the identity provider
D. Google is the service provider and Facebook is the identity provider
正解：B,C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
In an SP-Initiated SAML SSO setup where the user tries to access a resource on the Service Provider, What HTTP param should be used when submitting a SAML Request to the Idp to ensure the user is returned to the intended resourse after authentication?
A. RelayState
B. DisplayState
C. RedirectURL
D. StartURL
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Northern Trail Outfitters (NTO) uses Salesforce Experience Cloud sites (previously known as Customer Community) to provide a digital portal where customers can login using their Google account.
NTO would like to automatically create a case record for first time users logging into Salesforce Experience Cloud.
What should an Identity architect do to fulfill the requirement?
A. Create an authentication provider for Social Login using Google and leverage standard registration handler.
B. Implement a Just-in-Time handler class that has logic to create cases upon first login.
C. Implement a login flow with a record create component for Case.
D. Configure an authentication provider for Social Login using Google and a custom registration handler.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
A company's external application is protected by Salesforce through OAuth. The identity architect for the project needs to limit the level of access to the data of the protected resource in a flexible way.
What should be done to improve security?
A. Select "Admin approved users are pre-authorized" and assign specific profiles.
B. Leverage external objects and data classification policies.
C. Create custom scopes and assign to the connected app.
D. Define a permission set that grants access to the app and assign to authorized users.
正解：C
解説: (Topexam メンバーにのみ表示されます)