一番質高い Plat-Arch-203 試験問題集

Universal Containers is using OpenID Connect to enable a connection from their new mobile app to its production Salesforce org.
What should be done to enable the retrieval of the access token status for the OpenID Connect connection?

• A. A Leverage OpenID Connect Token Introspection.
• B. Create a custom OAuth scope.
• C. Enable cross-origin resource sharing (CORS) for the /services/oauth2/token endpoint.
• D. Query using OpenID Connect discovery endpoint.

A financial services company uses Salesforce and has a compliance requirement to track information about devices from which users log in. Also, a Salesforce Security Administrator needs to have the ability to revoke the device from which users log in.
What should be used to fulfill this requirement?

• A. Use multi-factor authentication (MFA) to meet the compliance requirement to track device information.
• B. Use Login Flows to capture device from which users log in and store device and user information in a custom object.
• C. Use the Activations feature to meet the compliance requirement to track device information.
• D. Use the Login History object to track information about devices from which users log in.

Universal Containers (UC) plans to use a SAML-based third-party IdP serving both of the Salesforce Partner Community and the corporate portal. UC partners will log in 65* to the corporate portal to access protected resources, including links to Salesforce resources. What would be the recommended way to configure the IdP so that seamless access can be achieved in this scenario?

• A. Set up the corporate portal as a Connected App in Salesforce and use the Web server OAuth flow.
• B. Configure SP-initiated SSO that passes the SAML token upon Salesforce resource access request.
• C. Set up the corporate portal as a Connected App in Salesforce and use the User Agent OAuth flow.
• D. Configure IdP-initiated SSO that passes the SAML token upon Salesforce resource access request.

Northern Trail Outfitters (NTO) wants its customers to use phone numbers to log in to their new digital portal, which was designed and built using Salesforce Experience Cloud. In order to access the portal, the user will need to do the following:
1. Enter a phone number and/or email address
2. Enter a verification code that is to be sent via email or text.
What is the recommended approach to fulfill this requirement?

• A. Create a custom login flow that uses an Apex controller to verify the phone numbers with the company's verification service.
• B. Create a custom login page with an Apex controller. The controller has logic to send and verify the identity.
• C. Create an Authentication provider and implement a self-registration handler class.
• D. Create a Login Discovery page and provide a Login Discovery Handler Apex class.

Universal containers (UC) has a mobile application that calls the salesforce REST API. In order to prevent users from having to enter their credentials everytime they use the app, UC has enabled the use of refresh Tokens as part of the salesforce connected App and updated their mobile app to take advantage of the refresh token. Even after enabling the refresh token, Users are still complaining that they have to enter their credentials once a day. What is the most likely cause of the issue?

• A. The app is requesting too many access Tokens in a 24-hour period
• B. The Oauth authorizations are being revoked by a nightly batch job.
• C. The users forget to check the box to remember their credentials.
• D. The refresh token expiration policy is set incorrectly in salesforce