Identity-and-Access-Management-Architect 무료 덤프문제 온라인 액세스

Universal Containers (UC) is planning to add Wi-Fi enabled GPS tracking devices to its shipping containers so that the GPS coordinates data can be sent from the tracking device to its Salesforce production org via a custom API. The GPS devices have no direct user input or output capabilities.
Which OAuth flow should the identity architect recommend to meet the requirement?

• A.OAuth 2.0 Asset Token Flow for Securing Connected Devices
• B.OAuth 2.0 Web Server Flow for Web App Integration
• C.OAuth 2.0 JWT Bearer Flow for Server-to-Server Integration
• D.OAuth 2.0 Username-Password Flow for Special Scenarios

Northern Trail Outfitters (NTO) has a number of employees who do NOT need access Salesforce objects. The employees should sign in to a custom Benefits web app using their Salesforce credentials.
Which license should the identity architect recommend to fulfill this requirement?

• A.External Identity License
• B.Identify Verification Credits Add-On License
• C.Identify Only License
• D.Identify Connect License

Universal Containers want users to be able to log in to the Salesforce mobile app with their Active Directory password. Employees are unable to use mobile VPN.
Which two options should an identity architect recommend to meet the requirement?
Choose 2 answers

• A.Salesforce Identity Connect
• B.Configure Cloud Provider Load Balancer
• C.Active Directory Password Since Plugin
• D.Salesforce Trigger & Field on Contact Object

Universal Containers uses Salesforce as an identity provider and Concur as the Employee Expense management system. The HR director wants to ensure Concur accounts for employees are created only after the appropriate approval in the Salesforce org.
Which three steps should the identity architect use to implement this requirement.
Choose 3 answers

• A.Create an approval process for a custom object associated with the provisioning flow.
• B.Create a connected app for Concur in Salesforce.
• C.Enable User Provisioning for the connected app.
• D.Create an approval process for UserProvisioningReguest object associated with the provisioning flow.
• E.Create an approval process for User object associated with the provisioning flow.

Universal Containers is using OpenID Connect to enable a connection from their new mobile app to its production Salesforce org.
What should be done to enable the retrieval of the access token status for the OpenID Connect connection?

• A.Enable cross-origin resource sharing (CORS) for the /services/oauth2/token endpoint.
• B.Leverage OpenID Connect Token Introspection.
• C.Query using OpenID Connect discovery endpoint.
• D.Create a custom OAuth scope.