Authentication and Security PLATFORM-DEVELOPER-II Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   A large enterprise with 5,000 employees uses Salesforce, Workday, and a custom internal HR portal. The IT team wants to reduce password fatigue and simplify account management. Which scenario best justifies implementing Single Sign-On (SSO)?

   • AA public-facing community site for anonymous customers
   • BA small startup with 10 employees using only Salesforce
   • CAn enterprise with multiple applications and a central identity provider
   • DA single developer testing a personal sandbox
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A large enterprise with 10,000 employees uses Okta as its central identity provider. Employees access Salesforce, Workday, and custom internal apps. The security team mandates that all access to these systems must use the corporate identity provider and that users must not have separate passwords for each system. Which authentication configuration should the Salesforce admin implement?

   • ASet up SAML single sign-on with Okta as the identity provider
   • BEnable OAuth 2.0 with the JWT Bearer flow for all users
   • CUse username-password authentication with a custom login page
   • DConfigure Salesforce as the identity provider for Okta
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A Salesforce admin is configuring authentication for a small business with 15 users. The business handles sensitive financial data and wants to add an extra layer of security beyond just passwords. They already use a SAML-based SSO with a third-party IdP. What is the most effective way to strengthen authentication for these users?

   • AEnable multi-factor authentication (MFA) for all users
   • BSwitch from SAML SSO to username-password authentication
   • CRequire users to change their passwords every 30 days
   • DDisable the SAML SSO and use only certificate-based authentication
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   A company is building a customer community portal where external customers can log in using their existing Google or Facebook accounts. Which authentication technique is most appropriate for this scenario?

   • AUsername-password authentication
   • BCertificate-based authentication
   • CSAML-based SSO
   • DSocial sign-on
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company has a fleet of IoT devices that send telemetry data to Salesforce via REST API. Each device has a unique certificate installed at manufacturing time. The company wants to authenticate each device individually without managing usernames and passwords for thousands of devices. Which authentication method is most suitable?

   • AUsername-password authentication with a shared service account
   • BSocial sign-on with a device-specific social account
   • CCertificate-based authentication with the OAuth 2.0 JWT Bearer flow
   • DSAML 2.0 with a central identity provider
   Reveal Solution Discussion Select an answer first