Free Salesforce Identity-and-Access-Management-Architect Practice Exams Questions 2026 - TheExamsLabs

Start Preparation with the Latest and Real 100% Free Salesforce Architect Identity-and-Access-Management-Architect Exam Dumps Questions Practice 2026

Page: 1 / 52

Total 258 Questions | Updated On: May 24, 2026

Add To Cart

Question 1

Northern Trail Outfitters would like to automatically create new employee users in Salesforce with an

appropriate profile that maps to its Active Directory Department.

How should an identity architect implement this requirement?

A : Use the createUser method in the Just-in-Time (JIT) provisioning registration handler to assign theappropriate profile.

B : Use the updateUser method in the Just-in-Time (JIT) provisioning registration handler to assign theappropriate profile.

C : Use a login flow to collect Security Assertion Markup Language attributes and assign the appropriateprofile during Just-In-Time(JIT) provisioning.

D : Make a callout during the login flow to query department from Active Directory to assign theappropriate profile.

Answer: B

Question 2

Universal Containers (UC) wants to implement SAML SSO for their internal of Salesforce users using a third-party IdP. After some evaluation, UC decides NOT to 65« set up My Domain for their Salesforce org. How does that decision impact their SSO implementation?

A : IdP-initiated SSO will NOT work.

B : Neither SP- nor IdP-initiated SSO will work.

C : Either SP- or IdP-initiated SSO will work.

D : SP-initiated SSO will NOT work

Answer: B

Question 3

Universal containers wants to build a custom mobile app connecting to salesforce using Oauth, and would like

to restrict the types of resources mobile users can access. What Oauth feature of Salesforce should be used to

achieve the goal?

A : Access Tokens

B : Mobile pins

C : Refresh Tokens

D : Scopes

Answer: D

Question 4

A technology enterprise is setting up an identity solution with an external vendors wellness application for its

employees. The user attributes need to be returned to the wellness application in an ID token.

Which authentication mechanism should an identity architect recommend to meet the requirements?

A : OpenID Connect

B : User Agent Flow

C : JWT Bearer Token Flow

D : Web Server Flow

Answer: D

Question 5

Universal Containers (UC) uses Active Directory (AD) as their identity store for employees and must continue to do so for network access. UC is undergoing a major transformation program and moving all of their enterprise applications to cloud platforms including Salesforct, Workday, and SAP HANA. UC needs to implement an SSO solution for accessing all of the third-party cloud applications and the CIO is inclined to use Salesforce for all of their identity and access management needs. Which two Salesforce license types does UC need for its employees' Choose 2 answers

A : Company Community and Identity licenses

B : Identity and Identity Connect licenses

C : Chatter Only and Identity licenses

D : Salesforce and Identity Connect licenses

Answer: B,D

Page: 1 / 52

Total 258 Questions | Updated On: May 24, 2026

Add To Cart