Discuss Salesforce ARC-101 Exam Topic 4 Question 9

Northern Trail Outfitters is creating a distributable Salesforce package for other Salesforce orgs within the company. The package needs to call into a custor Apex REST endpoint in the central org. The security team wants to ensure a specific integration account is used in the central org that they will authorize after installation of the package.

Which three items should an architect recommend to secure the integration in the package?

Choose 3 answers

ACreate an Auth provider in the package and set the consumer key and consumer secret of the
connected app in the central org.

BContact Salesforce support and create a case to temporarily enable API access for managed
packages.

CCreate a connected app in the central org and add the callback URL of each org the package is
installed in to redirect to after successful authentication.

DUse an encrypted field to store the password that the security team enters and use password
management for external orgs and set the encryption method to TLS 1.2. Use the Auth Provider
configured and select the identity type as Named Principal with OAuth 2.0 as the protocol and

ESelect Start Authentication Flow on Save.

Suggested Answer: A, C, E

Get Premium ARC-101 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Bernardo 12 months ago

E is a good idea for starting the auth flow, keeps things smooth.

Francoise 12 months ago

Wait, can you really just contact support for API access? Sounds odd!

Markus 12 months ago

D is a must for password management, totally agree!

Tora 1 year ago

I disagree, B might not be necessary if we handle it right.

Gerry 1 year ago

A and C seem like solid options for securing the integration.

Glory 1 year ago

I’m leaning towards option E about starting the authentication flow on save, but I’m not sure if it’s necessary for this scenario. It feels like it could be useful, but I need to double-check the requirements.

Annmarie 1 year ago

I feel like using an encrypted field for the password is important, but I’m not confident about the specifics of password management and TLS. It sounds like a good security measure though.

Sylvie 1 year ago

I remember a practice question that mentioned using a connected app for authentication. It might be related to option C, but I’m not clear on how the callback URL works for different orgs.

Shizue 1 year ago

I think we should definitely consider creating an Auth provider in the package. It seems like a secure way to handle the integration account, but I'm not entirely sure about the consumer key and secret part.

Dorothy 1 year ago

Hmm, this seems like a tricky one. I'll need to think through the Azure Front Door and App Service integration carefully to determine if the gateway-required virtual network integration is the right solution.

Ceola 1 year ago

Hmm, this is a tricky one. I'm leaning towards option B, but I'm not 100% confident. I'll make sure to read through the question and options carefully before answering.

Arlette 1 year ago

Okay, let's see. The question is asking about what's required in addition to the Apple ID, so I'll need to consider the different security features involved in accessing iCloud backups.

Maryrose 1 year ago

I'm pretty sure the premiums for variable life policies don't go into the general account, since those are invested in a separate account. So the answer has to be either A or B. I'll double-check my understanding quickly before submitting.

Roosevelt 1 year ago

I remember we talked about lease costs, but I'm not entirely sure if the machine's lease cost is a relevant cost or if it's treated differently since it's already being paid.

Salesforce ARC-101 Exam - Topic 4 Question 9 Discussion