Given a Scenario, Identify the Security Considerations and Risks, and Leverage the Appropriate Security Capabilities to Design a Secure Portal Architecture Including Access by Both Internal and External Users. TECHNICAL-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the primary benefit of integrating internal user authentication with the portal via single sign-on (SSO)?

   • AIt removes the need for a separate identity provider.
   • BIt eliminates the need for any authorization checks.
   • CIt automatically grants internal users access to all external user data.
   • DIt allows internal users to access the portal without re-entering credentials.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which authentication method is most appropriate for external users who do not have corporate credentials and need to self-register?

   • ASAML SSO with the corporate identity provider
   • BUsername and password with self-registration
   • CClient certificate authentication
   • DOAuth 2.0 with a social identity provider
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A B2C portal allows customers to self-register and access their purchase history. The portal must comply with CCPA, which gives consumers the right to opt out of the sale of their personal information. The architect needs to design a mechanism to handle opt-out requests. Which approach should be used?

   • AAutomatically opt out all users by default and require them to opt in to data sharing.
   • BStore opt-out preferences in a custom setting and have an admin manually update them.
   • CCreate a custom object to store opt-out preferences and provide a portal page where users can update their preferences.
   • DIgnore opt-out requests because the portal does not sell data.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary purpose of role-based access control (RBAC) in a portal?

   • ATo grant permissions based on the user's role, enforcing least privilege
   • BTo track user login history
   • CTo encrypt data stored in the portal
   • DTo authenticate users by verifying their passwords
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   An organization wants its internal employees to access the portal using their existing corporate credentials without re-entering a password. Which authentication mechanism best supports this requirement?

   • ASAML-based single sign-on (SSO)
   • BAPI token authentication
   • CUsername and password authentication
   • DOAuth 2.0 client credentials grant
   Reveal Solution Discussion Select an answer first