A company is building a custom mobile app that lets employees view their Salesforce CRM data. The app will be used alongside other internal apps, and the company wants employees to sign in once and have the app access Salesforce on their behalf without storing their Salesforce password on the device. Which authentication approach should the developer implement?

SAML 2.0 with an IdP-initiated flow

Username-password authentication with the SOAP API

OAuth 2.0 with a refresh token and the Authorization Code flow

Certificate-based authentication with a client certificate

A Salesforce administrator has a group of users who are system administrators with full access to all data. Which authentication requirement is most strongly recommended for these privileged users?

Multi-factor authentication (MFA)

Certificate-based authentication

A developer is building an integration where a third-party app needs to authenticate users and also access their Salesforce data. The app will be used by customers who have Salesforce accounts. The developer wants to use OpenID Connect for authentication and OAuth for authorization. What is the most appropriate way to implement this in Salesforce?

Use SAML SSO for authentication and OAuth for authorization

Use social sign-on for authentication and OAuth for authorization

Use username-password authentication for the app

Use Salesforce as the OAuth 2.0 and OpenID Connect provider, with the app configured as a connected app

SalesforceCertified Platform Developer II

Domain 3Objective 4

Authentication and Security PLATFORM-DEVELOPER-II Practice Questions (Page 6)

Part of the LOGIC AND PROCESS AUTOMATION domain, which accounts for 7% of the PLATFORM-DEVELOPER-II exam.

29questions here

6free pages

8concepts

7%of the exam

Questions 26–29

26foundation · easy
An external application needs to verify a user's identity and retrieve basic profile information (like name and email) from Salesforce. Which protocol is specifically designed for this authentication use case?
Select an answer first
27application · medium
A company is building a custom mobile app that lets employees view their Salesforce CRM data. The app will be used alongside other internal apps, and the company wants employees to sign in once and have the app access Salesforce on their behalf without storing their Salesforce password on the device. Which authentication approach should the developer implement?
Select an answer first
28foundation · easy
A Salesforce administrator has a group of users who are system administrators with full access to all data. Which authentication requirement is most strongly recommended for these privileged users?
Select an answer first
29expert · hard
A developer is building an integration where a third-party app needs to authenticate users and also access their Salesforce data. The app will be used by customers who have Salesforce accounts. The developer wants to use OpenID Connect for authentication and OAuth for authorization. What is the most appropriate way to implement this in Salesforce?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to PLATFORM-DEVELOPER-II

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Salesforce. “PLATFORM-DEVELOPER-II” is a trademark of its owner, used for identification only.

Authentication and Security PLATFORM-DEVELOPER-II Practice Questions (Page 6)

Questions 26–29

An external application needs to verify a user's identity and retrieve basic profile information (like name and email) from Salesforce. Which protocol is specifically designed for this authentication use case?

A Salesforce administrator has a group of users who are system administrators with full access to all data. Which authentication requirement is most strongly recommended for these privileged users?

Keep studying — LOGIC AND PROCESS AUTOMATION