100% Free Salesforce Identity-and-Access-Management-Architect Practice Exam Questions Online 2026

Question 1

Universal Containers (UC) is implementing Salesforce and would like to establish SAML SSO for its users to

log in. UC stores its corporate user identities in a Custom Database. The UC IT Manager has heard good

things about Salesforce Identity Connect as an Idp, and would like to understand what limitations they may

face if they decided to use Identity Connect in their current environment. What limitation Should an Architect

inform the IT Manager about?

A : Identity Connect will not support user provisioning in UC-s current environment.

B : Identity Connect will only support Idp-initiated SAML flows in UC-s current environment.

C : Identity Connect will only support SP-initiated SAML flows in UC-s current environment.

D : Identity connect is not compatible with UC-s current identity environment.

Answer: A

Question 2

Identity-and-Access-Management-Architect-page101-image4

An organization has a central cloud-based Identity and Access Management (IAM) Service for authentication

and user management, which must be utilized by all applications as follows:

1 - Change of a user status in the central IAM Service triggers provisioning or deprovisioining in the

integrated cloud applications.

2 - Security Assertion Markup Language single sign-on (SSO) is used to facilitate access for users

authenticated at identity provider (Central IAM Service).

Which approach should an IAM architect implement on Salesforce Sales Cloud to meet the requirements?

A : A Configure Salesforce as a SAML Service Provider, and enable SCIM (System for Cross-DomainIdentity Management) for provisioning and deprovisioning of users.

B : Configure Salesforce as a SAML service provider, and enable Just-in Time (JIT) provisioning anddeprovisioning of users

C : Configure central IAM Service as an authentication provider and extend registration handler to manageprovisioning and deprovisioning of users.

D : Deploy Identity Connect component and set up automated provisioning and deprovisioning of users, aswell as SAML-based SSO.

Answer: A

Question 3

Universal Containers (UC) is looking to build a Canvas app and wants to use the corresponding Connected

App to control where the app is visible. Which two options are correct in regards to where the app can be

made visible under the Connected App setting for the Canvas app? Choose 2 answers

A : As part of the body of a Salesforce Knowledge article.

B : In the mobile navigation menu on Salesforce for Android.

C : The sidebar of a Salesforce Console as a console component.

D : Included in the Call Control Tool that-s part of Open CTI.

Answer: A,C

Question 4

Universal containers (UC) is building a mobile application that will make calls to the salesforce REST API.

Additionally UC would like to provide the optimal experience for its mobile users. Which two OAuth scopes

should UC configure in the connected App? Choose 2 answers

A : Refresh token

B : API

C : full

D : Web

Answer: A,B

Question 5

Northern Trail Outfitters is implementing a busmess-to-business (B2B) collaboration site using Salesforce

Experience Cloud. The partners will authenticate with an existing identity provider and the solution will utilize

Security Assertion Markup Language (SAML) to provide single sign-on to Salesforce. Delegated

administration will be used in the Expenence Cloud site to allow the partners to administer their users' access.

How should a partner identity be provisioned in Salesforce for this solution?

A : Create only a contact.

B : Create a contactless user.

C : Create a user and a related contact.

D : Create a person account.

Answer: C

Free Salesforce Identity-and-Access-Management-Architect Practice Exam Questions and Answers 2026