Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Exam - Topic 5 Question 54 Discussion

Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the OAuth 2.0 user-agent flow. Application users will authenticate using username and password. They should not be forced to approve API access in the mobile app or reauthenticate for 3 months.Which two connected app options need to be configured to fulfill this use case?Choose 2 answers
B) Set Permitted Users to 'All users may self-authorize'. and D) Set the Refresh Token Policy to expire refresh token after 3 months.
A) Set Permitted Users to 'Admin approved users are pre-authorized'.
C) Set the Session Timeout value to 3 months.

Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Exam - Topic 5 Question 54 Discussion

Actual exam question for Salesforce's Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) exam
Question #: 54
Topic #: 5
[All Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions]

Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the OAuth 2.0 user-agent flow. Application users will authenticate using username and password. They should not be forced to approve API access in the mobile app or reauthenticate for 3 months.

Which two connected app options need to be configured to fulfill this use case?

Choose 2 answers

Show Suggested Answer Hide Answer
Suggested Answer: B, D

by Renea at Nov 13, 2024, 09:50 PM

Limited Time Offer

25%

Off

Get Premium Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Claribel
8 months ago
Isn't 'Admin approved users' too restrictive for this app?
upvoted 0 times
...
Jennifer
8 months ago
I agree with techguy, session timeout is crucial here.
upvoted 0 times
...
Santos
8 months ago
Wait, can you really have a refresh token last that long? Sounds risky.
upvoted 0 times
...
Gaston
9 months ago
I think 'All users may self-authorize' is the way to go!
upvoted 0 times
...
Han
9 months ago
Definitely need to set the Session Timeout to 3 months.
upvoted 0 times
...
Kris
9 months ago
I recall that for mobile apps, we often want to avoid frequent reauthentication. Setting the refresh token policy correctly seems crucial, but I can't remember if it should be set to expire after 3 months or not.
upvoted 0 times
...
Lea
9 months ago
I’m a bit confused about the session timeout value. I thought it was supposed to be set to a shorter duration for security reasons, but the question mentions 3 months.
upvoted 0 times
...
Dominque
9 months ago
I think we practiced a similar question where we had to choose between different permitted user settings. I feel like 'Admin approved users are pre-authorized' might be the right choice here.
upvoted 0 times
...
Candida
9 months ago
I remember discussing the importance of the refresh token policy in class, but I'm not entirely sure if it should be set to expire after 3 months or if it should allow for longer access.
upvoted 0 times
...
Maryanne
9 months ago
This is a good opportunity to apply my knowledge of Salesforce Identity and OAuth 2.0. I've got this.
upvoted 0 times
...
Wilda
9 months ago
I'm confident I know the right answer, but I'll double-check to make sure I'm not missing anything.
upvoted 0 times
...
Josefa
9 months ago
Okay, the key requirements are no forced API access approval and no reauthentication for 3 months. I'll focus on those.
upvoted 0 times
...
Edna
9 months ago
Hmm, I'm a bit unsure about the difference between the connected app options. Let me think this through carefully.
upvoted 0 times
...
Ettie
10 months ago
This question seems straightforward, I think I can handle it.
upvoted 0 times
...
Stephaine
2 years ago
Okay, let me think this through. A and D, for sure. I mean, who wants to approve API access every time? Not this guy!
upvoted 0 times
Francine
1 year ago
Definitely, it will make the user experience much smoother without constant approvals.
upvoted 0 times
...
Dylan
1 year ago
That sounds right. Those options should work well for the mobile app.
upvoted 0 times
...
Millie
1 year ago
D) Set the Refresh Token Policy to expire refresh token after 3 months.
upvoted 0 times
...
Monroe
2 years ago
A) Set Permitted Users to 'Admin approved users are pre-authorized'.
upvoted 0 times
...
...
Nan
2 years ago
Ha, this is a classic case of 'read the question carefully'. A and D, no doubt about it. 3 months, no need to approve, easy peasy!
upvoted 0 times
...
Berry
2 years ago
Hmm, I'm gonna go with A and C. 3-month session timeout should keep them logged in without the need for re-authentication.
upvoted 0 times
Keshia
2 years ago
C) Set the Session Timeout value to 3 months.
upvoted 0 times
...
Brandon
2 years ago
A) Set Permitted Users to 'Admin approved users are pre-authorized'.
upvoted 0 times
...
...
Mable
2 years ago
Definitely A and D. We don't want users to have to approve API access every time, and 3 months for the refresh token sounds about right.
upvoted 0 times
Lashawn
2 years ago
Exactly, it's important to balance convenience with security measures in place.
upvoted 0 times
...
Glynda
2 years ago
That makes sense, we want to provide a seamless user experience while maintaining security.
upvoted 0 times
...
Laurena
2 years ago
Yes, and setting the Refresh Token Policy to expire after 3 months will ensure users do not have to reauthenticate frequently.
upvoted 0 times
...
Ronald
2 years ago
I agree, setting Permitted Users to 'Admin approved users are pre-authorized' will prevent users from having to approve API access every time.
upvoted 0 times
...
...
Brett
2 years ago
Option A and D seem like the right choices here. Admin-approved users and 3-month refresh token policy, that's what the question is asking for.
upvoted 0 times
Flo
2 years ago
Definitely. It's all about balancing security with a good user experience.
upvoted 0 times
...
Valentin
2 years ago
That's what the question is asking for. It's important to ensure security and user convenience.
upvoted 0 times
...
Scarlet
2 years ago
Yes, I agree. Admin-approved users and a 3-month refresh token policy make sense.
upvoted 0 times
...
Selma
2 years ago
I think option A and D are the correct choices.
upvoted 0 times
...
...
Ceola
2 years ago
I'm not sure about A. Wouldn't setting Permitted Users to 'All users may self-authorize' be more user-friendly for a mobile app?
upvoted 0 times
...
Daryl
2 years ago
I agree with Cheryl. Setting Permitted Users to 'Admin approved users are pre-authorized' and Refresh Token Policy to expire after 3 months makes sense.
upvoted 0 times
...
Cheryl
2 years ago
I think we should choose A and D.
upvoted 0 times
...

Save Cancel