Given a Set of Requirements, Design and Justify an End-To-End Identity Management Solution. TECHNICAL-ARCHITECT Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A global e-commerce company wants to allow customers to log in using social identity providers (Google, Facebook) and also offer email/password registration. They need to ensure that the customer's email is verified to prevent fake accounts. The architect must design a CIAM solution that balances user experience and security. Which approach is most appropriate?

   • AUse a custom verification process that requires users to upload a government ID.
   • BAllow social login without email verification, and require email verification only for email/password registration.
   • CRequire email verification for all users, including social login, to ensure every email is verified.
   • DDo not verify emails for any users to simplify the registration process.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   When justifying an identity management design choice, what is the primary purpose of comparing alternatives and addressing trade-offs?

   • ATo ensure the solution is identical to industry best practices
   • BTo avoid any discussion of security risks
   • CTo prove that the chosen solution is the most expensive option
   • DTo demonstrate that the chosen solution best satisfies the requirements while considering constraints and trade-offs
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A retail company wants to allow customers to register on their Salesforce Community using email and password. They also want to offer social login with Facebook. The company must comply with GDPR, so customers must be able to consent to data processing and withdraw consent later. Which CIAM design best meets these requirements?

   • AUse Salesforce Communities with self-registration and Facebook login, but do not store any personal data to avoid GDPR obligations.
   • BUse Salesforce Communities with self-registration, enable Facebook as an authentication provider, and add a custom consent checkbox on the registration form.
   • CUse a custom authentication flow in Apex that handles registration and social login, and store consent in a custom object.
   • DUse a dedicated CIAM platform that supports self-registration, social login, and consent management with the ability to record and revoke consent.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A financial services company stores customer identity data in Salesforce. They are subject to CCPA, which requires that consumers can request deletion of their personal information. The architect must design a solution that allows for deletion while maintaining audit logs for compliance. Which approach should be taken?

   • AUse a custom object to store a 'deletion request' flag and anonymize the customer's personal data, while retaining the audit log of the request.
   • BExport the customer data to an external system and then delete the Salesforce record, but keep a copy of the data for 5 years.
   • CPermanently delete the customer record and all related data, and do not retain any logs.
   • DUse Salesforce's built-in 'Delete' button to remove the record, and rely on the recycle bin for recovery.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   In a trade-off analysis for an identity solution, what does 'user experience vs. security' typically refer to?

   • ADetermining the cost of identity management software
   • BChoosing between on-premises and cloud deployment
   • CBalancing the need for strong authentication with the desire for a frictionless login process
   • DDeciding whether to use SAML or OAuth
   Reveal Solution Discussion Select an answer first