Authentication and Security PLATFORM-DEVELOPER-II Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   A company is implementing a security policy for users who access sensitive customer data in Salesforce. Which scenario most clearly requires the use of MFA?

   • AA developer accessing a sandbox for testing
   • BA sales user accessing their own leads and opportunities
   • CA finance user accessing payroll records with social security numbers
   • DA customer-facing community where users log in with Google
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company with 500 employees uses Salesforce and wants to enforce that all logins come from their corporate Active Directory. They want to disable the ability for users to log in with a Salesforce username and password directly. Which configuration is required?

   • AConfigure SAML SSO and set 'Is Single Logout Enabled' and 'Is SAML Required' on the SAML SSO settings
   • BEnable multi-factor authentication and disable password login
   • CSet up social sign-on with Active Directory as a social provider
   • DConfigure OAuth 2.0 with the JWT Bearer flow for all users
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A developer is building an integration where a backend service running on a company server needs to authenticate to Salesforce and call REST APIs to sync data. The service runs without user interaction and must authenticate securely without storing a username and password in the server's configuration. Which authentication method is most appropriate?

   • AOAuth 2.0 JWT Bearer flow with a certificate
   • BSAML 2.0 with an IdP-initiated flow
   • COAuth 2.0 Authorization Code flow with a refresh token
   • DUsername-password authentication with the SOAP API
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   A company wants to allow its employees to access Salesforce and other enterprise applications using a single corporate login, managed by an external identity provider. Which authentication technique is most appropriate for this purpose?

   • ASAML 2.0
   • BCertificate-based authentication
   • COAuth 2.0
   • DSocial sign-on
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company is implementing SSO for its employees. They currently use Salesforce with username-password authentication. The security team wants to enforce MFA for all users, but the company's IdP does not support MFA. The company wants to keep the SSO experience but also meet the MFA requirement. Which approach should the admin take?

   • AEnable Salesforce MFA for users who authenticate via SAML SSO
   • BConfigure the IdP to support MFA by upgrading the plan
   • CDisable SAML SSO and use username-password with MFA
   • DUse certificate-based authentication instead of MFA
   Reveal Solution Discussion Select an answer first