Authentication and Security PLATFORM-DEVELOPER-II Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A developer is creating a third-party web application that needs to access a user's Salesforce data. The app will run in a browser and must allow the user to log in to Salesforce and grant the app permission to read their contacts. The app should not see the user's Salesforce password. Which OAuth 2.0 flow should be used?

   • AJWT Bearer flow
   • BAuthorization Code flow
   • CDevice flow
   • DUsername-password flow
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is a primary advantage of using social sign-on for a customer-facing community portal?

   • AIt is more secure than any other authentication method
   • BIt eliminates the need for any identity verification
   • CIt is required for all Salesforce communities
   • DIt provides a seamless login experience by leveraging the customer's existing social media credentials
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   A company uses an external identity provider (IdP) like Okta to manage employee identities. They want employees to log into Salesforce using their corporate credentials. Which authentication protocol is the standard choice for this federated identity scenario?

   • AOAuth 2.0
   • BSocial sign-on
   • CSAML 2.0
   • DOpenID Connect
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following is a valid reason to use simple username-password authentication instead of more complex methods like SSO or OAuth?

   • AThe application requires multi-factor authentication for all users
   • BThe application needs to integrate with an external identity provider
   • CThe application needs to support delegated access for third-party apps
   • DThe application is a legacy system that does not support modern protocols
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the primary purpose of a SAML assertion in a federated authentication flow?

   • ATo encrypt the user's password for transmission
   • BTo establish a direct network connection between the IdP and Salesforce
   • CTo request an access token for API calls
   • DTo carry the authenticated user's identity and attributes from the IdP to the service provider
   Reveal Solution Discussion Select an answer first