Salesforce ARC-101 Exam - Topic 4 Question 9 Discussion

Actual exam question for Salesforce's ARC-101 exam

Question #: 9
Topic #: 4

Northern Trail Outfitters is creating a distributable Salesforce package for other Salesforce orgs within the company. The package needs to call into a custor Apex REST endpoint in the central org. The security team wants to ensure a specific integration account is used in the central org that they will authorize after installation of the package.

Which three items should an architect recommend to secure the integration in the package?

Choose 3 answers

ACreate an Auth provider in the package and set the consumer key and consumer secret of the
connected app in the central org.

BContact Salesforce support and create a case to temporarily enable API access for managed
packages.

CCreate a connected app in the central org and add the callback URL of each org the package is
installed in to redirect to after successful authentication.

DUse an encrypted field to store the password that the security team enters and use password
management for external orgs and set the encryption method to TLS 1.2. Use the Auth Provider
configured and select the identity type as Named Principal with OAuth 2.0 as the protocol and

ESelect Start Authentication Flow on Save.

Show Suggested Answer

Suggested Answer: A, C, E

by Pamella at Oct 27, 2022, 01:26 AM

Limited Time Offer

25%

Off

Get Premium ARC-101 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Bernardo

4 months ago

E is a good idea for starting the auth flow, keeps things smooth.

upvoted 0 times

...

Francoise

4 months ago

Wait, can you really just contact support for API access? Sounds odd!

upvoted 0 times

...

Markus

4 months ago

D is a must for password management, totally agree!

upvoted 0 times

...

Tora

4 months ago

I disagree, B might not be necessary if we handle it right.

upvoted 0 times

...

Gerry

4 months ago

A and C seem like solid options for securing the integration.

upvoted 0 times

...

Glory

5 months ago

I’m leaning towards option E about starting the authentication flow on save, but I’m not sure if it’s necessary for this scenario. It feels like it could be useful, but I need to double-check the requirements.

upvoted 0 times

...

Annmarie

5 months ago

I feel like using an encrypted field for the password is important, but I’m not confident about the specifics of password management and TLS. It sounds like a good security measure though.

upvoted 0 times

...

Sylvie

5 months ago

I remember a practice question that mentioned using a connected app for authentication. It might be related to option C, but I’m not clear on how the callback URL works for different orgs.

upvoted 0 times

...

Shizue

5 months ago

I think we should definitely consider creating an Auth provider in the package. It seems like a secure way to handle the integration account, but I'm not entirely sure about the consumer key and secret part.

upvoted 0 times

...

Dorothy

5 months ago

Hmm, this seems like a tricky one. I'll need to think through the Azure Front Door and App Service integration carefully to determine if the gateway-required virtual network integration is the right solution.

upvoted 0 times

...

Ceola

5 months ago

Hmm, this is a tricky one. I'm leaning towards option B, but I'm not 100% confident. I'll make sure to read through the question and options carefully before answering.

upvoted 0 times

...

Arlette

5 months ago

Okay, let's see. The question is asking about what's required in addition to the Apple ID, so I'll need to consider the different security features involved in accessing iCloud backups.

upvoted 0 times

...

Maryrose

5 months ago

I'm pretty sure the premiums for variable life policies don't go into the general account, since those are invested in a separate account. So the answer has to be either A or B. I'll double-check my understanding quickly before submitting.

upvoted 0 times

...

Roosevelt

5 months ago

I remember we talked about lease costs, but I'm not entirely sure if the machine's lease cost is a relevant cost or if it's treated differently since it's already being paid.

upvoted 0 times

...