Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Exam - Topic 4 Question 69 Discussion

Actual exam question for Salesforce's Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) exam

Question #: 69
Topic #: 4

[All Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions]

Northern Trail Outfitters (NTO) wants its customers to use phone numbers to log in to their new digital portal, which was designed and built using Salesforce Experience Cloud. In order to access the portal, the user will need to do the following:

1. Enter a phone number and/or email address

2. Enter a verification code that is to be sent via email or text.

What is the recommended approach to fulfill this requirement?

ACreate a Login Discovery page and provide a Login Discovery Handler Apex class.

BCreate a custom login page with an Apex controller. The controller has logic to send and verify the identity.

CCreate an Authentication provider and implement a self-registration handler class.

DCreate a custom login flow that uses an Apex controller to verify the phone numbers with the company's verification service.

Show Suggested Answer

Suggested Answer: A

by Sage at Nov 25, 2025, 11:28 AM

Limited Time Offer

25%

Off

Get Premium Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Veronika

15 days ago

D is secure. Verification is crucial for access.

upvoted 0 times

...

Laquanda

20 days ago

B gives more control over the process.

upvoted 0 times

...

Marleen

25 days ago

I like option C. Self-registration is user-friendly.

upvoted 0 times

...

Layla

1 month ago

Option A seems too basic for this requirement.

upvoted 0 times

...

Rossana

1 month ago

I think option B is the best. Custom control is flexible.

upvoted 0 times

...

Loise

2 months ago

Not sure about D, sounds a bit complicated for just phone verification.

upvoted 0 times

...

Dortha

2 months ago

I’m surprised they’re not using a standard authentication method.

upvoted 0 times

...

Angelyn

2 months ago

Wait, why not just use option A? Seems simpler.

upvoted 0 times

...

Barrett

2 months ago

Totally agree, B makes the most sense!

upvoted 0 times

...

Valentin

3 months ago

I think option B is the best choice for custom logic.

upvoted 0 times

...

Lai

3 months ago

Haha, who even uses phone numbers these days? Just make it email-only, easy peasy!

upvoted 0 times

...

Mona

3 months ago

I'm going with C. Authentication providers are the future, my friend.

upvoted 0 times

...

Tyra

3 months ago

D looks good to me. Integrating with a verification service is the way to make this secure.

upvoted 0 times

...

Launa

3 months ago

Option B seems like the way to go. Gotta keep that custom logic in the Apex controller.

upvoted 0 times

...

Darci

3 months ago

The custom login flow sounds familiar, but I can't recall if it specifically mentioned verifying phone numbers with an external service.

upvoted 0 times

...

Kimbery

4 months ago

I feel like the option about the Authentication provider could be relevant, especially if we want to streamline user registration.

upvoted 0 times

...

Deandrea

4 months ago

I'm feeling pretty confident about this one. I've worked with two-factor authentication in Salesforce before, so I think option B is the way to go. Creating a custom login page with an Apex controller to handle the phone number and verification code logic should be a straightforward implementation.

upvoted 0 times

...

Jani

4 months ago

Option D looks interesting - creating a custom login flow that uses an Apex controller to verify the phone numbers. That seems like it could be a flexible and robust solution. I'll need to research how to implement a custom login flow in Salesforce, but I think that might be the way to go.

upvoted 0 times

...

Francoise

4 months ago

I remember we discussed the importance of using a Login Discovery page for user authentication in our last class.

upvoted 0 times

...

Margurite

5 months ago

I prefer option D. It directly verifies phone numbers.

upvoted 0 times

...

Fletcher

5 months ago

I'm not entirely sure, but I think creating a custom login page with an Apex controller might give us more flexibility in handling the verification process.

upvoted 0 times

...

Carissa

5 months ago

Hmm, I'm a bit confused by all the different options here. I'm not sure if I fully understand the differences between creating a Login Discovery page, a custom login page, an Authentication provider, and a custom login flow. I'll need to review the details of each approach more carefully.

upvoted 0 times

...

Terina

5 months ago

This seems like a straightforward question about implementing a two-factor authentication process for a Salesforce portal. I think I'll go with option B and create a custom login page with an Apex controller to handle the phone number and verification code logic.

upvoted 0 times