Prep and try our Identity-and-Access-Management-Architect valid and latest training questions & answers

Universal Container's (UC) is using Salesforce Experience Cloud site for its container wholesale business.
The identity architect wants to use an authentication provider for the new site.
Which two options should be utilized in creating an authentication provider?
Choose 2 answers

• A. A custom error URL can be set.
• B. The default login user can be set.
• C. The default authentication provider certificate can be set.
• D. A custom registration handler can be set.

An insurance company has a connected app in its Salesforce environment that is used to integrate with a Google Workspace (formerly known as G Suite).
An identity and access management (ZAM) architect has been asked to implement automation to enable users, freeze/suspend users, disable users, and reactivate existing users in Google Workspace upon similar actions in Salesforce.
Which solution is recommended to meet this requirement?

• A. Build an Asset Trigger on the UserLogin object to make asynchronous callouts to Google APIs.
• B. configure Users Provisioning for Connected Apps.
• C. Build a custom REST endpoint in Salesforce that Google Workspace can pull against.
• D. Update the Security Attention Hadoop Language Just-In-Time (SJAR, LTT) handler in Salesforce for user provisioning and de-provisioning.

A global fitness equipment manufacturer is planning to sell fitness tracking devices and has the following requirements:
1) Customer purchases the device.
2) Customer registers the device using their mobile app.
3) A case should automatically be created in Salesforce and associated with the customers account in cases where the device registers issues with tracking.
Which OAuth flow should be used to meet these requirements?

• A. OAuth 2.0 SAVL Server Assertion Flow
• B. OAuth 2.0 Asset Token Flow
• C. OAuth 2.0 Device Flow
• D. OAuth 2.0 User-Agent Flow

Northern Trail Outfitters (NTO) is using Experience Cloud as an Identity Provider for its application on Heroku. The application on Heroku should be able to handle two brands, Northern Trail Shoes and Northern Trail Shirts.
A user should select either of the two brands in Heroku before logging into the community. The app then performs Authorization using OAuth2.0 with the Salesforce Experience Cloud site.
NTO wants to make sure it renders login page images dynamically based on the user ' s brand preference selected in Heroku before Authorization.
What should an identity architect do to fulfill the above requirements?

• A. Create multiple login screens using Experience Builders and use Login Flows at runtime to route to different login screens.
• B. Authorize third-party service by sending authorizations requests to the community. Authorizes/search?authorize?coside_value.
• C. For each brand create different communities and redirect users to the appropriate community using a custom Login controller written in Ages.
• D. Authorize third-party service by sending authorizations requests to the community. Authorizes/search?
  authorize?node=value.

Universal Containers is using OpenID Connect to enable a connection from their new mobile app to its production Salesforce org.
What should be done to enable the retrieval of the access token status for the OpenID Connect connection?

• A. Create a custom OAuth scope.
• B. Query using OpenID Connect discovery endpoint.
• C. Enable cross-origin resource sharing (CORS) for the /services/oauth2/token endpoint.
• D. Leverage OpenID Connect Token Introspection.