Authentication and Security PLATFORM-DEVELOPER-II Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   An organization is implementing SSO for its employees. Which of the following is a primary benefit of using SSO in this enterprise context?

   • AIt allows users to log in once and access multiple applications without re-authenticating
   • BIt provides a way for external customers to log in with their social media accounts
   • CIt eliminates the need for any password or credential management
   • DIt guarantees that all applications use the same password
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company is migrating from username-password authentication to SAML SSO. They have a group of legacy integration users that authenticate via the SOAP API with username-password. The security team wants to eliminate password-based authentication for all users, including these integrations. Which approach should the developer take?

   • AMigrate the integration users to OAuth 2.0 JWT Bearer flow with certificates
   • BCreate a new integration user with a strong password
   • CUse SAML SSO for the integration users
   • DKeep the integration users on username-password but enforce MFA
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A company is implementing SSO with a third-party IdP. They have a requirement that users must be able to log in to Salesforce even if the IdP is temporarily unavailable. The security team wants to maintain high availability for user access. What is the most appropriate way to handle this?

   • ADisable SAML SSO and use only username-password authentication
   • BEnable a fallback authentication method, such as username-password, for users when the IdP is down
   • CConfigure a second IdP as a backup
   • DUse certificate-based authentication as a fallback
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   A developer is creating a simple internal tool for a small team to access a sandbox environment for testing. The tool has no external integrations and the data is non-sensitive. Which authentication approach is most appropriate in this low-security, legacy scenario?

   • AUsername-password authentication
   • BOAuth 2.0 with JWT bearer flow
   • CSAML-based SSO
   • DCertificate-based authentication
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A mid-sized company uses Salesforce, Google Workspace, and a custom HR portal. Employees currently have separate logins for each system, and IT support spends significant time resetting passwords. The company wants to improve user experience and reduce password-related support tickets. Which solution best addresses this?

   • AImplement SAML-based single sign-on with a central identity provider
   • BUse username-password authentication with a longer password policy
   • CConfigure certificate-based authentication for all employee devices
   • DEnable social sign-on for all employees
   Reveal Solution Discussion Select an answer first