Free Salesforce Plat-Arch-203 Practice Exam Questions 2026

Question 1

Northern Trail Outfitters (NTO) leverages Microsoft Active Directory (AD) for management of employee

usernames, passwords, permissions, and asset access. NTO also owns a third-party single sign-on (SSO)

solution. The third-party party SSO solution is used for all corporate applications, including Salesforce.

NTO has asked an architect to explore Salesforce Identity Connect for automatic provisioning and

deprovisiorung of users in Salesforce.

What role does identity Connect play in the outlined requirements?

A : Service Provider

B : Single Sign-On

C : Identity Provider

D : User Management

Answer: D

Question 2

Universal Containers (UC) has built a custom token-based Two-factor authentication (2FA) system for their existing on-premise applications. They are now implementing Salesforce and would like to enable a Two-factor login process for it, as well. What is the recommended solution as Architect should consider?

A : Use the custom 2FA system for on-premise applications and native 2FA for Salesforce.

B : Replace the custom 2FA system with an AppExchange App that supports on premise application and salesforce.

C : Use Custom Login Flows to connect to the existing custom 2FA system for use in Salesforce.

D : Replace the custom 2FA system with Salesforce 2FA for on-premise applications and Salesforce.

Answer: D

Question 3

Universal Containers (UC) operates in Asia, Europe and North America regions. There is one Salesforce org

for each region. UC is implementing Customer 360 in Salesforce and has procured External Identity and

Customer Community licenses in all orgs.

Customers of UC use Community to track orders and create inquiries. Customers also tend to move across

regions frequently.

What should an identity architect recommend to optimize license usage and reduce maintenance overhead?

A : Merge three orgs into one instance of Salesforce. This will no longer require maintaining three separate copies of the same customer.

B : Delete contact/ account records and deactivate user if user moves from a specific region; Sync will no longer be required.

C : Contacts are required since Community access needs to be enabled. Maintenance is a necessary overhead that must be handled via data integration.

D : Enable Contactless User in all orgs and downgrade users from Experience Cloud license to External Identity license once users have moved out of that region.

Answer: C

Question 4

Universal Containers (UC) is implementing Salesforce and would like to establish SAML SSO for its users to

log in. UC stores its corporate user identities in a Custom Database. The UC IT Manager has heard good

things about Salesforce Identity Connect as an Idp, and would like to understand what limitations they may

face if they decided to use Identity Connect in their current environment. What limitation Should an Architect

inform the IT Manager about?

A : Identity Connect will not support user provisioning in UC-s current environment.

B : Identity Connect will only support Idp-initiated SAML flows in UC-s current environment.

C : Identity Connect will only support SP-initiated SAML flows in UC-s current environment.

D : Identity connect is not compatible with UC-s current identity environment.

Answer: A

Question 5

Universal Containers (UC) uses Salesforce to allow customers to keep track of the order status. The customers

can log in to Salesforce using external authentication providers, such as Facebook and Google. UC is also

leveraging the App Launcher to let customers access an of platform application for generating shipping labels.

The label generator application uses OAuth to provide users access. What license type should an Architect

recommend for the customers?

A : Customer Community license

B : Identity license

C : Customer Community Plus license

D : External Identity license

Answer: B

Free Salesforce Plat-Arch-203 Practice Exams Questions 2026 - TheExamsLabs