An organization wants to add an additional layer of security to its login process by requiring users to provide a one-time code from an authenticator app in addition to their password. Which authentication mechanism is being implemented?

Multi-Factor Authentication (MFA)

A company is integrating Salesforce with an external identity provider using SAML. They have a requirement that users must be able to access Salesforce from mobile devices. The current SAML setup works on desktop but fails on mobile because the IdP does not support the mobile browser. The architect must find a solution that maintains SSO on both desktop and mobile. Which approach should be recommended?

Use a VPN on mobile devices to access the IdP.

Use OpenID Connect instead of SAML for mobile, and keep SAML for desktop.

Use Salesforce's mobile app with a custom login page that bypasses the IdP.

Use a different IdP that supports mobile browsers, and migrate all users to it.

In a role-based access control (RBAC) model, what is the primary basis for granting permissions to a user?

The user's individual attributes such as department or location

The user's authentication method, such as MFA or SSO

The user's manager's approval for each specific resource

The user's job function or role within the organization

A company uses on-premises Active Directory (AD) as its source of truth for employee identities. They want to synchronize users to Salesforce and ensure that when an employee's job title changes in AD, it is reflected in Salesforce within 24 hours. Which integration approach should the architect recommend?

Use a nightly scheduled job that exports AD changes to a CSV file and imports it into Salesforce using Data Loader.

Enable Salesforce's built-in AD connector and set the sync interval to 24 hours.

Deploy a custom REST API in Salesforce that queries AD on demand when a user logs in.

Use a third-party identity management tool that connects to AD and Salesforce, and schedules a sync every 12 hours.

SalesforceCertified Technical Architect

Domain 2Objective 6

Given a Set of Requirements, Design and Justify an End-To-End Identity Management Solution. TECHNICAL-ARCHITECT Practice Questions (Page 4)

Part of the SECURITY domain, which makes up ~22% of our current practice bank.

34questions here

7free pages

9concepts

Questions 16–20

16foundation · easy
An organization wants to add an additional layer of security to its login process by requiring users to provide a one-time code from an authenticator app in addition to their password. Which authentication mechanism is being implemented?
Select an answer first
17expert · hard
A company is integrating Salesforce with an external identity provider using SAML. They have a requirement that users must be able to access Salesforce from mobile devices. The current SAML setup works on desktop but fails on mobile because the IdP does not support the mobile browser. The architect must find a solution that maintains SSO on both desktop and mobile. Which approach should be recommended?
Select an answer first
18foundation · easy
In a role-based access control (RBAC) model, what is the primary basis for granting permissions to a user?
Select an answer first
19application · medium
A company uses on-premises Active Directory (AD) as its source of truth for employee identities. They want to synchronize users to Salesforce and ensure that when an employee's job title changes in AD, it is reflected in Salesforce within 24 hours. Which integration approach should the architect recommend?
Select an answer first
20foundation · easy
Which protocol is primarily an authorization framework that allows a user to grant a third-party application limited access to their resources without sharing their credentials?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to TECHNICAL-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Salesforce. “TECHNICAL-ARCHITECT” is a trademark of its owner, used for identification only.

Given a Set of Requirements, Design and Justify an End-To-End Identity Management Solution. TECHNICAL-ARCHITECT Practice Questions (Page 4)

Questions 16–20

An organization wants to add an additional layer of security to its login process by requiring users to provide a one-time code from an authenticator app in addition to their password. Which authentication mechanism is being implemented?

In a role-based access control (RBAC) model, what is the primary basis for granting permissions to a user?

Which protocol is primarily an authorization framework that allows a user to grant a third-party application limited access to their resources without sharing their credentials?

Keep studying — SECURITY