If you want to become a Salesforce Certified Identity and Access Management Architect, Passcert provides the latest Salesforce Identity and Access Management Architect Exam Dumps to improve your preparation level and help you pass your Salesforce Certified Identity and Access Management Architect exam with ease. The Salesforce Identity and Access Management Architect Exam Dumps provided by Passcert experts are designed to provide the best services to candidates in order to clear the Salesforce Certified Identity and Access Management Architect Exam easily. You need to get the best Salesforce Identity and Access Management Architect Exam Dumps and then go for the preparation to clear your exam in the first attempt.

The Salesforce Certified Identity and Access Management credential is designed for identity professionals who want to demonstrate their knowledge, skills and capabilities at assessing identity architecture; designing secure, high-performance access management solutions on the Customer 360 platform; communicating technical solutions effectively to business and technical stakeholders.

Read on for details about the Salesforce Identity and Access Management Architect exam.

Content: 60 multiple-choice/multiple-select questions 

Time allotted to complete the exam: 120 minutes

Passing score: 67%

Registration fee: USD 400, plus applicable taxes as required per local law

Retake fee: USD 200, plus applicable taxes as required per local law

Delivery options: Proctored exam delivered onsite at a testing center or in an online proctored environment. 

The Salesforce Identity and Access Management Architect exam measures a candidate's knowledge and skills related to the following objectives.

Identity Management Concepts: 17%

Accepting Third-Party Identity in Salesforce: 21%

Salesforce as an Identity Provider: 17%

Access Management Best Practices: 15%

Salesforce Identity: 12%

Community (Partner and Customer): 18%

When designing a multi-branded Customer Identity and Access Management solution on the Salesforce Platform, how should an identity architect ensure a specific brand experience in Salesforce is presented?

A.The Experience ID, which can be included in OAuth/Open ID flows and Security Assertion Markup Language (SAML) flows as a URL parameter.

B.Provide a brand picker that the end user can use to select its sub-brand when they arrive on salesforce.

C.Add a custom parameter to the service provider's OAuth/SAML call and implement logic on its login page to apply branding based on the parameters value.

D.The Audience ID, which can be set in a shared cookie.

Answer: A

Universal Containers (UC) uses Salesforce as a CRM and identity provider (IdP) for their Sales Team to seamlessly login to intemaJ portals. The IT team at UC is now evaluating Salesforce to act as an IdP for its remaining employees.

Which Salesforce license is required to fulfill this requirement?

A.External Identity

B.Identity Verification

C.Identity Connect

D.Identity Only

Answer: D

How should an identity architect automate provisioning and deprovisioning of users into Salesforce from an external system?

A.Call SOAP API upsertQ on user object.

B.Use Security Assertion Markup Language Just-in-Time (SAML JIT) on incoming SAML assertions.

C.Run registration handler on incoming OAuth responses.

D.Call OpenID Connect (OIDC)-userinfo endpoint with a valid access token.

Answer: C

Universal Containers (UC) is rolling out its new Customer Identity and Access Management Solution built on top of its existing Salesforce instance. UC wants to allow customers to login using Facebook, Google, and other social sign-on providers.

How should this functionality be enabled for UC, assuming ail social sign-on providers support OpenID Connect?

A.Configure an authentication provider and a registration handler for each social sign-on provider.

B.Configure a single sign-on setting and a registration handler for each social sign-on provider.

C.Configure an authentication provider and a Just-In-Time (JIT) handler for each social sign-on provider.

D.Configure a single sign-on setting and a JIT handler for each social sign-on provider.

Answer: A

An Identity and Access Management (IAM) Architect is recommending Identity Connect to integrate Microsoft Active Directory (AD) with Salesforce for user provisioning, deprovisioning and single sign-on (SSO).

Which feature of Identity Connect is applicable for this scenano?

A.When Identity Connect is in place, if a user is deprovisioned in an on-premise AD, the user's Salesforce session Is revoked Immediately.

B.If the number of provisioned users exceeds Salesforce licence allowances, identity Connect will start disabling the existing Salesforce users in First-in, First-out (FIFO) fashion.

C.Identity Connect can be deployed as a managed package on salesforce org, leveraging High Availability of Salesforce Platform out-of-the-box.

D.When configured, Identity Connect acts as an identity provider to both Active Directory and Salesforce, thus providing SSO as a default feature.

Answer: A

Universal containers (UC) has implemented SAML -based single Sign-on for their salesforce application. UC is using pingfederate as the Identity provider. To access salesforce, Users usually navigate to a bookmarked link to my domain URL. What type of single Sign-on is this?

A.Sp-Initiated

B.IDP-initiated with deep linking

C.IDP-initiated

D.Web server flow.

Answer: A