Given a Scenario, Identify the Security Considerations and Risks, and Leverage the Appropriate Security Capabilities to Design a Secure Portal Architecture Including Access by Both Internal and External Users. TECHNICAL-ARCHITECT Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is a common method for verifying the identity of an external user who self-registers on a portal?

   • AUsing a hardcoded password
   • BChecking the user's IP address
   • CRequiring a corporate ID
   • DEmail verification
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   A portal architecture serves both internal employees and external customers. Which security consideration is most specific to the external user population?

   • AExternal users do not pose security risks because they only access publicly available information.
   • BExternal users should be granted the same level of trust as internal users to simplify access.
   • CExternal users require additional controls such as identity verification, session management, and restricted data access.
   • DExternal users are outside the corporate network, so they cannot be authenticated.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A portal allows external users to submit feedback through a form that includes a text area. The security team is concerned about cross-site scripting (XSS) attacks. Which approach should the architect take to mitigate XSS in the portal?

   • AUse the standard Lightning component framework and ensure that any custom Apex code escapes output using the appropriate escaping methods.
   • BImplement a CAPTCHA on the form to prevent automated XSS attacks.
   • CDisable JavaScript in the portal and rely on HTML sanitization on the server side.
   • DUse a Visualforce page with the 'escape="false"' attribute on the output text to allow rich formatting.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A company uses Azure AD for employee authentication and wants to provide a portal for employees to access Salesforce data. The architect must integrate Azure AD SSO with the portal while ensuring that employees only see data they are authorized to see. Which approach should be used?

   • AUse a custom Apex web service to authenticate employees against Azure AD and bypass Salesforce authentication.
   • BConfigure SAML SSO between Azure AD and Salesforce, map Azure AD groups to Salesforce permission sets, and use sharing rules to enforce record-level access.
   • CConfigure SAML SSO but do not map groups, and use a single profile for all employees.
   • DUse OAuth 2.0 with Azure AD and grant all employees the System Administrator profile.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which attack involves injecting malicious scripts into web pages viewed by other users?

   • ADenial of service (DoS)
   • BCross-site scripting (XSS)
   • CSQL injection
   • DCross-site request forgery (CSRF)
   Reveal Solution Discussion Select an answer first