What is the purpose of an access certification campaign in identity governance?

To periodically review and confirm that users' access rights are appropriate

To enforce multi-factor authentication for all users

To synchronize user accounts across multiple systems

To reset all user passwords on a regular schedule

In the context of identity lifecycle management, what is the primary purpose of the deprovisioning process?

To revoke access and remove or disable user accounts when they are no longer needed

To create new user accounts and assign initial permissions

To regularly update user attributes from the authoritative source

To enforce password policies and multi-factor authentication settings

A company is required to conduct quarterly access reviews for all Salesforce users. They have 5,000 users and 200 permission sets. The compliance team wants to automate the review process and ensure that any user with a 'High Risk' permission set is reviewed more frequently. The architect must design a governance solution that meets these requirements. Which approach is most appropriate?

Use a third-party identity governance tool that supports risk-based review scheduling.

Create a custom report that lists all users with high-risk permission sets and email it to managers monthly.

Use Salesforce's built-in 'Access Review' feature to schedule reviews.

Use a workflow rule to notify managers when a user is assigned a high-risk permission set.

SalesforceCertified Technical Architect

Domain 2Objective 6

Given a Set of Requirements, Design and Justify an End-To-End Identity Management Solution. TECHNICAL-ARCHITECT Practice Questions (Page 1)

Part of the SECURITY domain, which makes up ~22% of our current practice bank.

34questions here

7free pages

9concepts

Questions 1–5

1foundation · easy
What is the purpose of an access certification campaign in identity governance?
Select an answer first
2foundation · easy
In the context of identity lifecycle management, what is the primary purpose of the deprovisioning process?
Select an answer first
3expert · hard
A company is required to conduct quarterly access reviews for all Salesforce users. They have 5,000 users and 200 permission sets. The compliance team wants to automate the review process and ensure that any user with a 'High Risk' permission set is reviewed more frequently. The architect must design a governance solution that meets these requirements. Which approach is most appropriate?
Select an answer first
4foundation · easy
Which identity lifecycle management activity is typically performed when an employee is hired to ensure they have the necessary access from their first day?
Select an answer first
5foundation · easy
Which identity governance activity involves maintaining a detailed record of who accessed what, when, and from where, to support compliance and security investigations?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to TECHNICAL-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Salesforce. “TECHNICAL-ARCHITECT” is a trademark of its owner, used for identification only.

Given a Set of Requirements, Design and Justify an End-To-End Identity Management Solution. TECHNICAL-ARCHITECT Practice Questions (Page 1)

Questions 1–5

What is the purpose of an access certification campaign in identity governance?

In the context of identity lifecycle management, what is the primary purpose of the deprovisioning process?

Which identity lifecycle management activity is typically performed when an employee is hired to ensure they have the necessary access from their first day?

Which identity governance activity involves maintaining a detailed record of who accessed what, when, and from where, to support compliance and security investigations?

Keep studying — SECURITY