INTEGRATING WITH SALESFORCE: SECURITY INTEGRATION-ARCHITECT Practice Questions (Page 4)

Questions 16–17

1. 16application · medium

   An integration architect is designing a solution where an external system will authenticate to Salesforce using OAuth 2.0. The architect wants to ensure that the integration is secure and that the access tokens are not exposed. What should the architect do?

   • AUse a connected app and store the OAuth token in a static variable in Apex.
   • BUse a named credential to store the OAuth token and reference it in Apex code.
   • CStore the OAuth token in a custom metadata type and reference it in Apex code.
   • DStore the OAuth token in a custom setting and reference it in Apex code.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which authentication mechanism is most appropriate for a web application that needs to access Salesforce data on behalf of a logged-in user, allowing the user to authorize the application to access their data?

   • AOAuth 2.0 Username-Password Flow
   • BOAuth 2.0 JWT Bearer Flow
   • COAuth 2.0 Authorization Code Flow
   • DSAML Assertion Flow
   Reveal Solution Discussion Select an answer first