Salesforce Certified B2C Commerce Architect (Arch-303) Exam - Topic 2 Question 68 Discussion

Actual exam question for Salesforce's Salesforce Certified B2C Commerce Architect (Arch-303) exam

Question #: 68
Topic #: 2

[All Salesforce Certified B2C Commerce Architect (Arch-303) Questions]

Northern Trail Outfitters (NTO) wants to migrate its online shoo from a custom ecommerce platform to B2CCommerce. NTO needs to migrate several thousands of customer records profile information, address book). WTO can provide a B2C Commerce feed. It is currently using SHA-256 as an encryption mechanism for the customer passwords.

What approach can the Architect propose?

AImport the customer records, including the hashed password, as B2C Commerce supports SHA-2S6, and they will be able to login with their existing password.

BDo not import customer records and asks customers to create new accounts the firstfame they try to log in to the B2C Commerce storefront.

CImport the customer records, excluding the password field, and B2C Commerce will automatically require a password reset the first time a customer logs m to the storefront.

DImport the customer records, with the hashed password as a custom attribute, and during the login compare the entered password with the hashed password and save it in the password field.

Show Suggested Answer

Suggested Answer: C

B2C Commerce does not directly support the import of hashed passwords for use in authentication due to security protocols and the platform's password management system. The best approach is to import customer records without the password field. Upon their first login attempt on the new system, customers would be prompted to reset their password. This method ensures that password security is maintained according to B2C Commerce standards and that customer data remains secure during the transition from the old platform.

by Theresia at Aug 14, 2025, 09:04 AM

Limited Time Offer

25%

Off

Get Premium Salesforce Certified B2C Commerce Architect (Arch-303) Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Fletcher

2 months ago

C is the safest choice, forcing a reset is smart.

upvoted 0 times

...

Barb

2 months ago

Wait, can we really import hashed passwords like that?

upvoted 0 times

...

In

2 months ago

I disagree, B is better for security.

upvoted 0 times

...

Yong

3 months ago

D sounds complicated, not sure it's worth the effort.

upvoted 0 times

...

Stephane

3 months ago

Option A seems solid since it keeps existing passwords.

upvoted 0 times

...

Jeff

3 months ago

I’m leaning towards option D, but I’m a bit confused about how the custom attribute would work in practice. Would it really be secure to compare the passwords like that?

upvoted 0 times

...

Pearly

4 months ago

I practiced a similar question where we had to consider user experience. I think option B might frustrate customers since they would have to create new accounts.

upvoted 0 times

...

Margurite

4 months ago

I'm not entirely sure, but I feel like option C could be a safer approach. It would ensure customers reset their passwords, which might be better for security.

upvoted 0 times

...

Odette

4 months ago

I remember discussing the importance of password security in our last class. I think option A makes sense since B2C Commerce supports SHA-256.

upvoted 0 times

...

Ena

4 months ago

I like the idea of option D, where we import the hashed passwords as a custom attribute and then handle the comparison during login. That way we can preserve the existing passwords and avoid any issues with the migration.

upvoted 0 times

...

Tequila

4 months ago

Option C sounds like a good compromise - import the customer records without the passwords, and then have B2C Commerce force a password reset. That way we don't have to worry about the hashing compatibility.

upvoted 0 times

...

Jonelle

5 months ago

Hmm, I'm a bit unsure about that. Doesn't B2C Commerce have its own password hashing mechanism? I'm wondering if we'd need to do some kind of conversion or mapping to get the existing hashed passwords to work.

upvoted 0 times

...

Laurel

5 months ago

This seems like a straightforward migration question. I think option A is the best approach - just import the customer records with the hashed passwords, and they'll be able to log in with their existing credentials.

upvoted 0 times

...