ホーム > Salesforce > Salesforce Identity and Access Management Designer > Identity-and-Access-Management-Designer

Salesforce Identity-and-Access-Management-Designer 問題集

Identity-and-Access-Management-Designer日本語版
「クリックして表示

」

試験コード：Identity-and-Access-Management-Designer

試験名称：Salesforce Certified Identity and Access Management Designer

最近更新時間：2024-12-19

問題と解答：全245問

Identity-and-Access-Management-Designer 無料でデモをダウンロード：

PDF版 Demo ソフト版 Demo オンライン版 Demo

無料問題集Identity-and-Access-Management-Designer 資格取得

質問 1：
Universal Containers (UC) has decided to replace the homegrown customer portal with Salesforce Experience Cloud. UC will continue to use its third-party single sign-on (SSO) solution that stores all of its customer and partner credentials.
The first time a customer logs in to the Experience Cloud site through SSO, a user record needs to be created automatically.
Which solution should an identity architect recommend in order to automatically provision users in Salesforce upon login?
A. Just-in-Time (JIT) provisioning
B. Third-party AppExchange solution
C. Custom login flow and Apex handler
D. Custom middleware and web services
正解：A

質問 2：
Universal Containers (UC) is using Active Directory as its corporate identity provider and Salesforce as its CRM for customer care agents, who use SAML based sign sign-on to login to Salesforce. The default agent profile does not include the Manage User permission. UC wants to dynamically update the agent role and permission sets.
Which two mechanisms are used to provision agents with the appropriate permissions?
Choose 2 answers
A. Use SAML Just-in-Time (JIT) handler class run as an admin user to update role and permission sets.
B. Use SAML Just-m-Time (JIT) Handler class run as current user to update role and permission sets.
C. Use Login Flow in System Context to update role and permission sets.
D. Use Login Flow in User Context to update role and permission sets.
正解：A,C

質問 3：
Universal Containers (UC) is both a Salesforce and Google Apps customer. The UC IT team would like to manage the users for both systems in a single place to reduce administrative burden. Which two optimal ways can the IT team provision users and allow Single Sign-on between Salesforce and Google Apps ? Choose 2 answers
A. Use Salesforce as the Identity Provider and Google Apps as a Service Provider and configure User Provisioning for Connected Apps.
B. Use Identity Connect as the Identity Provider for both Salesforce and Google Apps and manage the provisioning from there.
C. Use a third-party product as the Identity Provider for both Salesforce and Google Apps and manage the provisioning from there.
D. Build a custom app running on Heroku as the Identity Provider that can sync user information between Salesforce and Google Apps.
正解：A,C

質問 4：
The security team at Universal containers(UC) has identified exporting reports as a high-risk action and would like to require users to be logged into salesforce with their active directory (AD) credentials when doing so. For all other uses of Salesforce, Users should be allowed to use AD credentials or salesforce credentials. What solution should be recommended to prevent exporting reports except when logged in using AD credentials while maintaining the ability to view reports when logged in with salesforce credentials?
A. Use SAML Federated Authentication and block access to reports when accesses through a standard assurance session.
B. Use SAML Federated Authentication and Custom SAML jit provisioning to dynamically add or remove a permission set that grants the Export Reports permission.
C. Use SAML Federated Authentication with a login flow to dynamically add or remove a permission set that grants the export reports permission.
D. Use SAML Federated Authentication, treat SAML sessions as high assurance, and raise the session level required for exporting reports.
正解：A

質問 5：
An identity architect has built a native mobile application and plans to integrate it with a Salesforce Identity solution. The following are the requirements for the solution:
1. Users should not have to login every time they use the app.
2. The app should be able to make calls to the Salesforce REST API.
3. End users should NOT see the OAuth approval page.
How should the identity architect configure the Salesforce connected app to meet the requirements?
A. Enable the API Scope and Offline Access Scope, upload a certificate so JWT Bearer Flow can be used and then set the connected app access settings to "Admin Pre-Approved".
B. Enable the Full Access Scope and then set the connected app access settings to "Admin Pre-Approved".
C. Enable the API Scope and Offline Access Scope on the connected app, and then set the connected app to access settings to 'Admin Pre-Approved".
D. Enable the API Scope and Offline Access Scope on the connected app, and then set the Connected App access settings to "User may self authorize".
正解：A

質問 6：
Northern Trail Outfitters (NTO) has an off-boarding process where a terminated employee is first disabled in the Lightweight Directory Act Protocol (LDAP) directory, then requests are sent to the various application support teams to finish user deactivations. A terminated employee recently was able to login to NTO's Salesforce instance 24 hours after termination, even though the user was disabled in the corporate LDAP directory.
What should an identity architect recommend to prevent this from happening in the future?
A. Configure an authentication provider to delegate authentication to the LDAP directory.
B. use a login flow to make a callout to the LDAP directory before authenticating the user to Salesforce.
C. Setup an identity provider (IdP) to authenticate users using LDAP, set up single sign-on to Salesforce and disable Login Form authentication.
D. Create a Just-in-Time provisioning registration handler to ensure users are deactivated in Salesforce as they are disabled in LDAP.
正解：A

質問 7：
An insurance company has a connected app in its Salesforce environment that is used to integrate with a Google Workspace (formerly knot as G Suite).
An identity and access management (IAM) architect has been asked to implement automation to enable users, freeze/suspend users, disable users, and reactivate existing users in Google Workspace upon similar actions in Salesforce.
Which solution is recommended to meet this requirement?
A. Build an Apex trigger on the useriogin object to make asynchronous callouts to Google APIs.
B. Configure user Provisioning for Connected Apps.
C. Update the Security Assertion Markup Language Just-in-Time (SAML JIt; handler in Salesforce for user provisioning and de-provisioning.
D. Build a custom REST endpoint in Salesforce that Google Workspace can poll against.
正解：B

質問 8：
Universal containers(UC) has implemented SAML-BASED single Sign-on for their salesforce application and is planning to provide access to salesforce on mobile devices using the salesforce1 mobile app. UC wants to ensure that single Sign-on is used for accessing the salesforce1 mobile app. Which two recommendations should the architect make? Choose 2 answers
A. Configure the embedded Web browser to use my domain URL.
B. Configure the salesforce1 app to use the my domain URL
C. Use the existing SAML SSO flow along with Web server flow
D. Use the existing SAML SSO flow along with user agent flow.
正解：B,D

安全的な支払方式を利用しています

Credit Cardは今まで全世界の一番安全の支払方式です。少数の手続きの費用かかる必要がありますとはいえ、保障があります。お客様の利益を保障するために、弊社のIdentity-and-Access-Management-Designer問題集は全部Credit Cardで支払われることができます。

領収書について：社名入りの領収書が必要な場合、メールで社名に記入していただき送信してください。弊社はPDF版の領収書を提供いたします。

一年間の無料更新サービスを提供します

君が弊社のSalesforce Identity-and-Access-Management-Designerをご購入になってから、我々の承諾する一年間の更新サービスが無料で得られています。弊社の専門家たちは毎日更新状態を検査していますから、この一年間、更新されたら、弊社は更新されたSalesforce Identity-and-Access-Management-Designerをお客様のメールアドレスにお送りいたします。だから、お客様はいつもタイムリーに更新の通知を受けることができます。我々は購入した一年間でお客様がずっと最新版のSalesforce Identity-and-Access-Management-Designerを持っていることを保証します。

TopExamは君にIdentity-and-Access-Management-Designerの問題集を提供して、あなたの試験への復習にヘルプを提供して、君に難しい専門知識を楽に勉強させます。TopExamは君の試験への合格を期待しています。

弊社は無料Salesforce Identity-and-Access-Management-Designerサンプルを提供します

お客様は問題集を購入する時、問題集の質量を心配するかもしれませんが、我々はこのことを解決するために、お客様に無料Identity-and-Access-Management-Designerサンプルを提供いたします。そうすると、お客様は購入する前にサンプルをダウンロードしてやってみることができます。君はこのIdentity-and-Access-Management-Designer問題集は自分に適するかどうか判断して購入を決めることができます。

Identity-and-Access-Management-Designer試験ツール：あなたの訓練に便利をもたらすために、あなたは自分のペースによって複数のパソコンで設置できます。

弊社は失敗したら全額で返金することを承諾します

我々は弊社のIdentity-and-Access-Management-Designer問題集に自信を持っていますから、試験に失敗したら返金する承諾をします。我々のSalesforce Identity-and-Access-Management-Designerを利用して君は試験に合格できると信じています。もし試験に失敗したら、我々は君の支払ったお金を君に全額で返して、君の試験の失敗する経済損失を減少します。

Salesforce Identity-and-Access-Management-Designer 認定試験の出題範囲：

トピック	出題範囲
トピック 1	Describe the Components of an Identity Management Solution Where Salesforce is Accepting Identity from a Third Party
トピック 2	Given a Scenario, Recommend the Most Appropriate Salesforce License Type(s) to Support the Identity Requirements
トピック 3	Describe the Risks to Enterprise Security that Federated Single Sign-on Solutions Aim to Address
トピック 4	Describe the role(s) Identity Connect Plays in an Identity Management Solution.
トピック 5	Describe the Various Implementation Concepts of OAuth Given a Scenario, Recommend the Salesforce Technologies That Should be Used to Provide Identity to the Third-Party System
トピック 6	Accepting Third-Party Identity in Salesforce Describe the Risks of Implementing Delegated Authentication, Components of a Delegated Authentication Solution
トピック 7	Access Management Best Practices Describe the Risks that Two-Factor Authentication Mechanisms Aim to Mitigate

参照：https://trailhead.salesforce.com/help?article=Salesforce-Certified-Identity-and-Access-Management-Designer-Exam-Guide

弊社のSalesforce Identity-and-Access-Management-Designerを利用すれば試験に合格できます

弊社のSalesforce Identity-and-Access-Management-Designerは専門家たちが長年の経験を通して最新のシラバスに従って研究し出した勉強資料です。弊社はIdentity-and-Access-Management-Designer問題集の質問と答えが間違いないのを保証いたします。

この問題集は過去のデータから分析して作成されて、カバー率が高くて、受験者としてのあなたを助けて時間とお金を節約して試験に合格する通過率を高めます。我々の問題集は的中率が高くて、100％の合格率を保証します。我々の高質量のSalesforce Identity-and-Access-Management-Designerを利用すれば、君は一回で試験に合格できます。

Identity-and-Access-Management-Designer 関連試験: Identity-and-Access-Management-Designer-JPN - Salesforce Certified Identity and Access Management Designer (Identity-and-Access-Management-Designer日本語版)

連絡方法: [email protected] サポート

人気のベンダー: Apple; Avaya; CIW; FileMaker; Lotus; Lpi; OMG; SNIA; Symantec; XML Master; Zend-Technologies; The Open Group; H3C; 3COM; ACI

TopExam問題集を選ぶ理由は何でしょうか？: 品質保証TopExamは我々の専門家たちの努力によって、過去の試験のデータが分析されて、数年以来の研究を通して開発されて、多年の研究への整理で、的中率が高くて99％の通過率を保証することができます。; 一年間の無料アップデートTopExamは弊社の商品をご購入になったお客様に一年間の無料更新サービスを提供することができ、行き届いたアフターサービスを提供します。弊社は毎日更新の情況を検査していて、もし商品が更新されたら、お客様に最新版をお送りいたします。お客様はその一年でずっと最新版を持っているのを保証します。; 全額返金弊社の商品に自信を持っているから、失敗したら全額で返金することを保証します。弊社の商品でお客様は試験に合格できると信じていますとはいえ、不幸で試験に失敗する場合には、弊社はお客様の支払ったお金を全額で返金するのを承諾します。(全額返金); ご購入の前の試用TopExamは無料なサンプルを提供します。弊社の商品に疑問を持っているなら、無料サンプルを体験することができます。このサンプルの利用を通して、お客様は弊社の商品に自信を持って、安心で試験を準備することができます。