Question 1

Universal Containers (UC) wants to implement SAML SSO for their internal of Salesforce users using a third-party IdP. After some evaluation, UC decides NOT to 65« set up My Domain for their Salesforce org. How does that decision impact their SSO implementation?

Options :

A : IdP-initiated SSO will NOT work.

B : Neither SP- nor IdP-initiated SSO will work.

C : Either SP- or IdP-initiated SSO will work.

D : SP-initiated SSO will NOT work

Answer: B

Question 2

Users logging into Salesforce are frequently prompted to verify their identity.The identity architect is required to provide recommendations so that frequency of prompt verification can bereduced.What should the identity architect recommend to meet the requirement?

Options :

A : Implement 2FA authentication for the Salesforce org.

B : Set trusted IP ranges for the organization.

C : Implement an single sign-on for Salesforce using an external identity provider.

D : Implement multi-factor authentication for the Salesforce org.

Answer: B

Question 3

Northern Trail Outfitters (NTO) leverages Microsoft Active Directory (AD) for management of employeeusernames, passwords, permissions, and asset access. NTO also owns a third-party single sign-on (SSO)solution. The third-party party SSO solution is used for all corporate applications, including Salesforce.NTO has asked an architect to explore Salesforce Identity Connect for automatic provisioning anddeprovisiorung of users in Salesforce.What role does identity Connect play in the outlined requirements?

Options :

A : Service Provider

B : Single Sign-On

C : Identity Provider

D : User Management

Answer: D

Question 4

Universal containers (UC) is building a mobile application that will make calls to the salesforce REST API.Additionally UC would like to provide the optimal experience for its mobile users. Which two OAuth scopesshould UC configure in the connected App? Choose 2 answers

Options :

A : Refresh token

B : API

C : full

D : Web

Answer: A,B

Question 5

What information does the 'Relaystate' parameter contain in sp-Initiated Single Sign-on?

Options :

A : Reference to a URL redirect parameter at the identity provider.

B : Reference to a URL redirect parameter at the service provider.

C : Reference to the login address URL of the service provider.

D : Reference to the login address URL of the identity Provider.

Answer: B