Given a Set of Requirements, Design and Justify an End-To-End Identity Management Solution. TECHNICAL-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which data protection technique replaces sensitive data with a non-sensitive placeholder that has no exploitable value, but maintains a consistent format for use in applications?

   • AMasking
   • BEncryption
   • CTokenization
   • DHashing
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is a key feature of Customer Identity and Access Management (CIAM) solutions that is essential for external customers?

   • AMandatory use of corporate email addresses
   • BIntegration with HR systems for automated provisioning
   • CSelf-service registration and profile management
   • DSupport for Kerberos authentication
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A company is implementing SSO for Salesforce using SAML. They have a requirement that users must be authenticated within 5 seconds. The current IdP takes 3 seconds to respond, but the network latency between the user and the IdP is 2 seconds. The architect is considering using a different IdP that is hosted in the same region as the users, reducing latency to 0.5 seconds. Which approach should the architect recommend?

   • AUse the current IdP and increase the Salesforce session timeout to allow for the latency.
   • BUse the new IdP in the same region to reduce network latency, and verify that it meets all other requirements.
   • CUse the current IdP and enable Salesforce's 'Remember Me' feature.
   • DUse the current IdP and implement a custom authentication flow that caches user sessions.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which authentication mechanism allows a user to authenticate once and then access multiple applications without being prompted to log in again?

   • ABiometric authentication
   • BSingle Sign-On (SSO)
   • CSocial login
   • DMulti-Factor Authentication (MFA)
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company has an on-premises LDAP directory that is the authoritative source for employee identities. They are implementing Salesforce and need to synchronize users. The security team requires that passwords are not stored in Salesforce. The architect must design a solution that authenticates users against LDAP while maintaining a user record in Salesforce. Which approach should be used?

   • ASynchronize LDAP users to Salesforce and store the LDAP password hash in a custom field.
   • BUse a custom authentication flow in Salesforce that calls LDAP via a REST API.
   • CUse LDAP as the identity provider and configure Salesforce to use SAML with LDAP as the IdP.
   • DUse Salesforce's built-in LDAP connector to authenticate users directly.
   Reveal Solution Discussion Select an answer first