Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Exam - Topic 5 Question 54 Discussion

Actual exam question for Salesforce's Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) exam

Question #: 54
Topic #: 5

[All Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions]

Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the OAuth 2.0 user-agent flow. Application users will authenticate using username and password. They should not be forced to approve API access in the mobile app or reauthenticate for 3 months.

Which two connected app options need to be configured to fulfill this use case?

Choose 2 answers

ASet Permitted Users to 'Admin approved users are pre-authorized'.

BSet Permitted Users to 'All users may self-authorize'.

CSet the Session Timeout value to 3 months.

DSet the Refresh Token Policy to expire refresh token after 3 months.

Show Suggested Answer

Suggested Answer: B, D

by Renea at Nov 13, 2024, 09:50 PM

Limited Time Offer

25%

Off

Get Premium Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Claribel

5 months ago

Isn't 'Admin approved users' too restrictive for this app?

upvoted 0 times

...

Jennifer

5 months ago

I agree with techguy, session timeout is crucial here.

upvoted 0 times

...

Santos

5 months ago

Wait, can you really have a refresh token last that long? Sounds risky.

upvoted 0 times

...

Gaston

5 months ago

I think 'All users may self-authorize' is the way to go!

upvoted 0 times

...

Han

6 months ago

Definitely need to set the Session Timeout to 3 months.

upvoted 0 times

...

Kris

6 months ago

I recall that for mobile apps, we often want to avoid frequent reauthentication. Setting the refresh token policy correctly seems crucial, but I can't remember if it should be set to expire after 3 months or not.

upvoted 0 times

...

Lea

6 months ago

I’m a bit confused about the session timeout value. I thought it was supposed to be set to a shorter duration for security reasons, but the question mentions 3 months.

upvoted 0 times

...

Dominque

6 months ago

I think we practiced a similar question where we had to choose between different permitted user settings. I feel like 'Admin approved users are pre-authorized' might be the right choice here.

upvoted 0 times

...

Candida

6 months ago

I remember discussing the importance of the refresh token policy in class, but I'm not entirely sure if it should be set to expire after 3 months or if it should allow for longer access.

upvoted 0 times

...

Maryanne

6 months ago

This is a good opportunity to apply my knowledge of Salesforce Identity and OAuth 2.0. I've got this.

upvoted 0 times

...

Wilda

6 months ago

I'm confident I know the right answer, but I'll double-check to make sure I'm not missing anything.

upvoted 0 times

...

Josefa

6 months ago

Okay, the key requirements are no forced API access approval and no reauthentication for 3 months. I'll focus on those.

upvoted 0 times

...

Edna

6 months ago

Hmm, I'm a bit unsure about the difference between the connected app options. Let me think this through carefully.

upvoted 0 times

...

Ettie

7 months ago

This question seems straightforward, I think I can handle it.

upvoted 0 times

...

Stephaine

1 year ago

Okay, let me think this through. A and D, for sure. I mean, who wants to approve API access every time? Not this guy!

upvoted 0 times

Francine

1 year ago

Definitely, it will make the user experience much smoother without constant approvals.

upvoted 0 times

...

Dylan

1 year ago

That sounds right. Those options should work well for the mobile app.

upvoted 0 times

...

Millie

1 year ago

D) Set the Refresh Token Policy to expire refresh token after 3 months.

upvoted 0 times

...

Monroe

1 year ago

A) Set Permitted Users to 'Admin approved users are pre-authorized'.

upvoted 0 times

...

Nan

1 year ago

Ha, this is a classic case of 'read the question carefully'. A and D, no doubt about it. 3 months, no need to approve, easy peasy!

upvoted 0 times

...

Berry

1 year ago

Hmm, I'm gonna go with A and C. 3-month session timeout should keep them logged in without the need for re-authentication.

upvoted 0 times

Keshia

1 year ago

C) Set the Session Timeout value to 3 months.

upvoted 0 times

...

Brandon

1 year ago

A) Set Permitted Users to 'Admin approved users are pre-authorized'.

upvoted 0 times

...

Mable

1 year ago

Definitely A and D. We don't want users to have to approve API access every time, and 3 months for the refresh token sounds about right.

upvoted 0 times

Lashawn

1 year ago

Exactly, it's important to balance convenience with security measures in place.

upvoted 0 times

...

Glynda

1 year ago

That makes sense, we want to provide a seamless user experience while maintaining security.

upvoted 0 times

...

Laurena

1 year ago

Yes, and setting the Refresh Token Policy to expire after 3 months will ensure users do not have to reauthenticate frequently.

upvoted 0 times

...

Ronald

1 year ago

I agree, setting Permitted Users to 'Admin approved users are pre-authorized' will prevent users from having to approve API access every time.

upvoted 0 times

...

Brett

1 year ago

Option A and D seem like the right choices here. Admin-approved users and 3-month refresh token policy, that's what the question is asking for.

upvoted 0 times

Flo

1 year ago

Definitely. It's all about balancing security with a good user experience.

upvoted 0 times

...

Valentin

1 year ago

That's what the question is asking for. It's important to ensure security and user convenience.

upvoted 0 times

...

Scarlet

1 year ago

Yes, I agree. Admin-approved users and a 3-month refresh token policy make sense.

upvoted 0 times

...

Selma

1 year ago

I think option A and D are the correct choices.

upvoted 0 times

...

Ceola

1 year ago

I'm not sure about A. Wouldn't setting Permitted Users to 'All users may self-authorize' be more user-friendly for a mobile app?

upvoted 0 times

...

Daryl

1 year ago

I agree with Cheryl. Setting Permitted Users to 'Admin approved users are pre-authorized' and Refresh Token Policy to expire after 3 months makes sense.

upvoted 0 times

...

Cheryl

1 year ago

I think we should choose A and D.

upvoted 0 times

...