Question 1

Universal Containers (UC) has an existing e-commerce platform and is implementing a new customer community. They do not want to force customers to register on both applications due to concern over the customers experience. It is expected that 25% of the e-commerce customers will utilize the customer community . The e-commerce platform is capable of generating SAML responses and has an existing REST-ful API capable of managing users. How should UC create the identities of its e-commerce users with the customer community?

Options :

A : Use SAML JIT in the Customer Community to create users when a user tries to login to the community from the e-commerce site.

B : Use the e-commerce REST API to create users when a user self-register on the customer community and use SAML to allow SSO.

C : Use a nightly batch ETL job to sync users between the Customer Community and the e-commerce platform and use SAML to allow SSO.

D : Use the standard Salesforce API to create users in the Community When a User is Created in the e-Commerce platform and use SAML to allow SSO.

Answer: A

Question 2

Universal containers (UC) is building a mobile application that will make calls to the salesforce REST API.

Additionally UC would like to provide the optimal experience for its mobile users. Which two OAuth scopes

should UC configure in the connected App? Choose 2 answers

Options :

A :

Refresh token

B : API

C : full

D : Web

Answer: A,B

Question 3

Universal containers (UC) wants to integrate a Web application with salesforce. The UC team has

implemented the Oauth web-server Authentication flow for authentication process. Which two considerations

should an architect point out to UC? Choose 2 answers

Options :

A : The web application should be hosted on a secure server.

B : The web server must be able to protect consumer privacy

C : The flow involves passing the user credentials back and forth.

D : The flow will not provide an Oauth refresh token back to the server.

Answer: A,B

Question 4

Northern Trail Outfitters is implementing a busmess-to-business (B2B) collaboration site using Salesforce

Experience Cloud. The partners will authenticate with an existing identity provider and the solution will utilize

Security Assertion Markup Language (SAML) to provide single sign-on to Salesforce. Delegated

administration will be used in the Expenence Cloud site to allow the partners to administer their users' access.

How should a partner identity be provisioned in Salesforce for this solution?

Options :

A : Create only a contact.

B : Create a contactless user.

C : Create a user and a related contact.

D : Create a person account.

Answer: C

Question 5

Universal Containers (UC) is implementing Salesforce and would like to establish SAML SSO for its users to

log in. UC stores its corporate user identities in a Custom Database. The UC IT Manager has heard good

things about Salesforce Identity Connect as an Idp, and would like to understand what limitations they may

face if they decided to use Identity Connect in their current environment. What limitation Should an Architect

inform the IT Manager about?

Options :

A :

Identity Connect will not support user provisioning in UC-s current environment.

B :

Identity Connect will only support Idp-initiated SAML flows in UC-s current environment.

C :

Identity Connect will only support SP-initiated SAML flows in UC-s current environment.

D : Identity connect is not compatible with UC-s current identity environment.

Answer: A