Salesforce Identity-and-Access-Management-Architect Free Sample Exam Questions 2026

Here you can get the actual Salesforce Identity-and-Access-Management-Architect exam questions and answers in PDF for free and for all questions premium file. These best Salesforce Certified Identity and Access Management Architect (SU22) Exam Identity-and-Access-Management-Architect PDF questions are for every Salesforce users. Real Identity-and-Access-Management-Architect exam dumps that will assist you to crack the %certification% certification exam in the PDF format. For Advance preparation premium PDF files available for perfect exam preparation on reilable price option.

UNLOCK FULL
Identity-and-Access-Management-Architect Exam Features

In Just $35 You can Access

• All Official Question Types
• Interactive Web-Based Practice Test Software
• No Installation or 3rd Party Software Required
• Customize your practice sessions (Free Demo)
• 24/7 Customer Support

Get Full Access

Page: 1 / 50
Total Questions: 247

Questions & Answers PDF

• Question 1

  

  Universal Containers (UC) would like its community users to be able to register and log in with Linkedin or Facebook Credentials. UC wants users to clearly see Facebook &Linkedin Icons when they register and login. What are the two recommended actions UC can take to achieve this Functionality? Choose 2 answers

  • Enable Facebook and Linkedin as Login options in the login section of the Community configuration.
  • Create custom Registration Handlers to link Linkedin and facebook accounts to user records.
  • Store the Linkedin or Facebook user IDs in the Federation ID field on the Salesforce User record.
  • Create custom buttons for Facebook and inkedin using JAVAscript/CSS on a custom Visualforce page.

  Reveal Answer Answer: A, B Next Question

• Question 2

  

  An Identity and Access Management (IAM) architect is tasked with unifying multiple B2C Commerce sites and an Experience Cloud community with a single identity. The solution needs to support more than 1,000 logins per minute.What should the IAM do to fulfill this requirement?

  • Configure both the community and the commerce sites as OAuth2 RPs (relying party) with an external identity provider.
  • Configure community as a Security Assertion Markup Language (SAML) identity provider and enable Just-in-Time Provisioning to B2C Commerce.
  • Create a default account for capturing all ecommerce contacts registered on the community because personAccount is not supported for this case.
  • Confirm performance considerations with Salesforce Customer Support due to high peaks.

  Reveal Answer Answer: D Next Question

• Question 3

  

  Universal Containers (UC) built an integration for their employees to post, view, and vote for ideas in Salesforce from an internal Company portal. When ideas are posted in Salesforce, links to the ideas are created in the company portal pages as part of the integration process. The Company portal connects to Salesforce using OAuth. Everything is working fine, except when users click on links to existing ideas, they are always taken to the Ideas home page rather than the specific idea, after authorization. Which OAuth URL parameter can be used to retain the original requested page so that a user can be redirected correctly after OAuth authorization?

  • Redirect_uri
  • State
  • Scope
  • Callback_uri

  Reveal Answer Answer: A Next Question

• Question 4

  

  Universal Containers (UC) is looking to purchase a third-party application as an Identity Provider. UC is looking to develop a business case for the purchase in general and has enlisted an Architect for advice. Which two capabilities of an Identity Provider should the Architect detail to help strengthen the business case? Choose 2 answers

  • The Identity Provider can authenticate multiple applications.
  • The Identity Provider can authenticate multiple social media accounts.
  • The Identity provider can store credentials for multiple applications.
  • The Identity Provider can centralize enterprise password policy.

  Reveal Answer Answer: A, D Next Question

• Question 5

  

  Universal Containers (UC) is setting up delegated authentication to allow employees to log in using their corporate credentials. UC's security team is concerned about the risks of exposing the corporate login service on the internet and has asked that a reliable trust mechanism be put in place between the login service and Salesforce.What mechanism should an Architect put in place to enable a trusted connection between the login service and Salesforce?

  • Require the use of Salesforce security tokens on passwords.
  • Enforce mutual authentication between systems using SSL.
  • Include Client Id and Client Secret in the login header callout.
  • Set up a proxy service for the login service in the DMZ.

  Reveal Answer Answer: A Next Question

• Question 6

  

  A company with 15,000 employees is using Salesforce and would like to take the necessary steps to highlight or curb fraudulent activity.Which tool should be used to track login data, such as the average number of logins, who logged in more than the average number of times and who logged in during non-business hours?

  • Login Forensics
  • Login Report
  • Login Inspector
  • Login History

  Reveal Answer Answer: A Next Question

• Question 7

  

  Universal Containers (UC) has a classified information system that its call center team uses only when they are working on a case with a record type 'Classified'. They are only allowed to access the system when they own an open 'Classified' case, and their access to the system is removed at all other times. They would like to implement SAML SSO eith Salesforce as the Idp, and automatically allow or deny the staff's access to the classified information system based on whether they currently own an open 'Classified' case record when they try to access the system using SSO. What is the recommended solution for automatically allowing or denying the access to the classified information system based on the open 'classified' case record criteria?

  • Use Salesforce reports to identify users that currently owns open 'Classified' cases and should be granted access to the Classified information system.
  • Use Apex trigger on case to dynamically assign permission Sets that Grant access when an user is assigned with an open 'Classified' case, and remove it when the case is closed.
  • Use Custom SAML JIT Provisioning to dynamically query the user's open 'Classified' cases when attempting to access the classified information system.
  • Use a Common Connected App Handler using Apex to dynamically allow access to the system based on whether the staff owns any open 'Classified' Cases.

  Reveal Answer Answer: D Next Question

• Question 8

  

  An administrator created a connected app for a custom wet) application in Salesforce which needs to be visible as a tile in App Launcher The tile for the custom web application is missing in the app launcher for all users in Salesforce. The administrator requested assistance from an identity architect to resolve the issue.Which two reasons are the source of the issue?Choose 2 answers

  • StartURL for the connected app is not set in Connected App settings.
  • OAuth scope does not include 'openid*.
  • Session Policy is set as 'High Assurance Session required' for this connected app.
  • The connected app is not set in the App menu as 'Visible in App Launcher'.

  Reveal Answer Answer: A, C Next Question

• Question 9

  

  When designing a multi-branded Customer Identity and Access Management solution on the Salesforce Platform, how should an identity architect ensure a specific brand experience in Salesforce is presented?

  • The Experience ID, which can be included in OAuth/Open ID flows and Security Assertion Markup Language (SAML) flows as a URL parameter.
  • Provide a brand picker that the end user can use to select its sub-brand when they arrive on salesforce.
  • Add a custom parameter to the service provider's OAuth/SAML call and implement logic on its login page to apply branding based on the parameters value.
  • The Audience ID, which can be set in a shared cookie.

  Reveal Answer Answer: A Next Question

• Question 10

  

  What information does the 'Relaystate' parameter contain in sp-Initiated Single Sign-on?

  • Reference to a URL redirect parameter at the identity provider.
  • Reference to a URL redirect parameter at the service provider.
  • Reference to the login address URL of the service provider.
  • Reference to the login address URL of the identity Provider.

  Reveal Answer Answer: B Next Question

Page: 1 / 50
Total Questions: 247

Previous Page Next Page