In a typical SSL setup involving a trusted party and trusting party, what consideration should an Architect take into account when using digital certificates?
In a typical SSL setup involving a trusted party and trusting party, what consideration should an Architect take into account when using digital certificates?A . Use of self-signed certificate leads to lower maintenance for trusted party because multiple self-signed certs need to be maintained. B. Use of self-signedcertificate leads to...
Which approach should an IAM architect implement on Salesforce Sales Cloud to meet the requirements?
An organization has a central cloud-based Identity and Access Management (IAM) Service for authentication and user management, which must be utilized by all applications as follows: 1 - Change of a user status in the central IAM Service triggers provisioning or deprovisioining in the integrated cloud applications. 2 - Security...
Universal containers (UC) does my domain enable in the context of a SAML SSOconfiguration? Choose 2 answers
Universal containers (UC) does my domain enable in the context of a SAML SSOconfiguration? Choose 2 answersA . Resource deep linking B. App launcher C. SSO from salesforce1 mobile app. D. Login forensicsView AnswerAnswer: A,C
How should NTO provision Salesforce users as soon as they are approved in the helpdesk application with the approved profiles and permission sets?
Northern Trail Outfitters (NTO) employees use a custom on-premise helpdesk application to request, approve, notify, and track access granted to various on-premises and cloud applications, including Salesforce. Salesforce is currently used to authenticate users. How should NTO provision Salesforce users as soon as they are approved in the helpdesk application...
What solution should be recommended to prevent exporting reports except when logged in using AD credentials while maintaining the ability to view reports when logged in with Salesforce credentials?
The security team at Universal Containers (UC) has identified exporting reports as a high-risk action and would like to require users to be logged into Salesforce with their Active Directory (AD) credentials when doing so. For all other users of Salesforce, users should be allowed to use AD Credentials or...
Which two options should an identity architect recommend to meet the requirement?
Universal Containers want users to be able to log in to the Salesforce mobile app with their Active Directory password. Employees are unable to use mobile VPN. Which two options should an identity architect recommend to meet the requirement? Choose 2 answersA . Active Directory Password Sync Plugin B. Configure...
Which two features should be utilized to provide users with login and identity services for the third-party application?
A global company is using the Salesforce Platform as an Identity Provider and needs to integrate a third-party application with its Experience Cloud customer portal. Which two features should be utilized to provide users with login and identity services for the third-party application? Choose2 answersA . Use the App Launcher...
What Certificate is sent along with the Outbound Message?
Universal Containers (UC) wants its closed Won opportunities to be synced to a Data Warehouse innear real time. UC has implemented Outbound Message to enable near real-time data sync. UC wants to ensure that communication between Salesforce and Target System is Secure . What Certificate is sent along with the...
Which three steps should the identity architect use to implement this requirement?
Universal Containers uses Salesforce as an identity provider and Concur as the Employee Expense management system. The HR director wants to ensure Concur accounts for employees are created only after the appropnate approval in the Salesforce org. Which three steps should the identity architect use to implement this requirement? Choose...
Which two considerations should the architect keep in mind?
A security architect is rolling out a new multi-factor authentication (MFA) mandate, where all employees must go through a secure authentication process before accessing Salesforce. There are multiple Identity Providers (IdP) in place and the architect is considering how the "Authentication Method Reference" field (AMR) in the Login History can...