Discuss Salesforce Salesforce Certified B2C Commerce Architect (Arch-303) Exam Topic 2 Question 68

Northern Trail Outfitters (NTO) wants to migrate its online shoo from a custom ecommerce platform to B2CCommerce. NTO needs to migrate several thousands of customer records profile information, address book). WTO can provide a B2C Commerce feed. It is currently using SHA-256 as an encryption mechanism for the customer passwords.

What approach can the Architect propose?

AImport the customer records, including the hashed password, as B2C Commerce supports SHA-2S6, and they will be able to login with their existing password.

BDo not import customer records and asks customers to create new accounts the firstfame they try to log in to the B2C Commerce storefront.

CImport the customer records, excluding the password field, and B2C Commerce will automatically require a password reset the first time a customer logs m to the storefront.

DImport the customer records, with the hashed password as a custom attribute, and during the login compare the entered password with the hashed password and save it in the password field.

Suggested Answer: C

B2C Commerce does not directly support the import of hashed passwords for use in authentication due to security protocols and the platform's password management system. The best approach is to import customer records without the password field. Upon their first login attempt on the new system, customers would be prompted to reset their password. This method ensures that password security is maintained according to B2C Commerce standards and that customer data remains secure during the transition from the old platform.

Get Premium Salesforce Certified B2C Commerce Architect (Arch-303) Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

21 comments · newest first

Fletcher 10 months ago

C is the safest choice, forcing a reset is smart.

Barb 10 months ago

Wait, can we really import hashed passwords like that?

In 11 months ago

I disagree, B is better for security.

Yong 11 months ago

D sounds complicated, not sure it's worth the effort.

Stephane 11 months ago

Option A seems solid since it keeps existing passwords.

Jeff 12 months ago

I’m leaning towards option D, but I’m a bit confused about how the custom attribute would work in practice. Would it really be secure to compare the passwords like that?

Pearly 12 months ago

I practiced a similar question where we had to consider user experience. I think option B might frustrate customers since they would have to create new accounts.

Margurite 1 year ago

I'm not entirely sure, but I feel like option C could be a safer approach. It would ensure customers reset their passwords, which might be better for security.

Odette 1 year ago

I remember discussing the importance of password security in our last class. I think option A makes sense since B2C Commerce supports SHA-256.

Ena 1 year ago

I like the idea of option D, where we import the hashed passwords as a custom attribute and then handle the comparison during login. That way we can preserve the existing passwords and avoid any issues with the migration.

Tequila 1 year ago

Option C sounds like a good compromise - import the customer records without the passwords, and then have B2C Commerce force a password reset. That way we don't have to worry about the hashing compatibility.

Jonelle 1 year ago

Hmm, I'm a bit unsure about that. Doesn't B2C Commerce have its own password hashing mechanism? I'm wondering if we'd need to do some kind of conversion or mapping to get the existing hashed passwords to work.

Laurel 1 year ago

This seems like a straightforward migration question. I think option A is the best approach - just import the customer records with the hashed passwords, and they'll be able to log in with their existing credentials.

Ryann 1 year ago

I disagree, I believe option D is better. It adds an extra layer of security by comparing the entered password with the hashed one.

Jerry 1 year ago

I'm not so sure about that. Option C seems like a better approach - reset the passwords and make customers more secure in the long run.

Quentin 10 months ago

↳ replying to Jerry

Option A could work too, but I see the value in C for long-term security.

Erick 10 months ago

↳ replying to Jerry

True, but security is key. Better to reset than risk old passwords.

Nadine 11 months ago

↳ replying to Jerry

But what about the hassle for customers? They might not like it.

Marti 11 months ago

↳ replying to Jerry

I agree, Option C sounds safer. Password resets are a good idea.

Quentin 1 year ago

Option A makes the most sense to me. Migrating the hashed passwords directly is the easiest way to go, and customers won't even notice the change.

Donte 1 year ago

I think option A is the best approach. It will make it easier for customers to log in with their existing passwords.

Salesforce Certified B2C Commerce Architect (Arch-303) Exam - Topic 2 Question 68 Discussion