Salesforce Certified Platform Identity and Access Management Architect Sample Questions:

1. An Identity and Access Management (IAM) architect is tasked with unifying multiple B2C Commerce sites and an Experience Cloud community with a single identity. The solution needs to support more than 1,000 logins per minute.
What should the IAM do to fulfill this requirement?

A) Configure both the community and the commerce sites as OAuth2 RPs (relying party) with an external identity provider.
B) Create a default account for capturing all ecommerce contacts registered on the community because personAccount is not supported for this case.
C) Configure community as a Security Assertion Markup Language (SAML) identity provider and enable Just-in-Time Provisioning to B2C Commerce.
D) Confirm performance considerations with Salesforce Customer Support due to high peaks.

2. Which three types of attacks would a 2-Factor Authentication solution help garden against?

A) Key logging attacks
B) Phishing attacks
C) Dictionary attacks
D) Network perimeter attacks
E) Man-in-the-middle attacks

3. Universal Containers (UC) has a Customer Community that uses Facebook for of authentication. UC would like to ensure that changes in the Facebook profile are 65. reflected on the appropriate Customer Community user. How can this requirement be met?

A) Use the updateUser() method on the Registration Handler class.
B) Use information in the Signed Request that is received from Facebook.
C) Develop a scheduled job that calls out to Facebook on a nightly basis.
D) Use SAML Just-In-Time Provisioning between Facebook and Salesforce.

4. Northern Trail Outfitters (NTO) wants to improve its engagement with existing customers to boost customer loyalty. To get a better understanding of its customers, NTO establishes a single customer view including their buying behaviors, channel preferences and purchasing history. All of this information exists but is spread across different systems and formats.
NTO has decided to use Salesforce as the platform to build a 360 degree view. The company already uses Microsoft Active Directory (AD) to manage its users and company assets.
What should an Identity Architect do to provision, deprovision and authenticate users?

A) Salesforce Identity can be included but NTO will be required to build a custom integration with Microsoft AD.
B) A Salesforce Identity can be included but NTO will require Identity Connect.
C) Salesforce Identity is not needed since NTO uses Microsoft AD.
D) Salesforce Identity is included in the Salesforce licenses so it does not need to be considered separately.

5. Which three are features of federated Single sign-on solutions? Choose 3 Answers

A) It enables quick and easy provisioning and deactivating of users.
B) It establishes trust between Identity Store and Service Provider.
C) It federates credentials control to authorized applications.
D) It improves affiliated applications adoption rates.
E) It solves all identity and access management problems.

Solutions: