MENU
Universal Containers (UC) is setting up delegated authentication to allow employees to log in using their corporate credentials. UC's security team is concerned about the risks of exposing the corporate login service on the internet and has asked that a reliable trust mechanism be put in place between the login service and Salesforce.
What mechanism should an Architect put in place to enable a trusted connection between the login service and Salesforce?
Suggested Answer: B, D
Get Premium Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
31 comments · newest first
GL
Glory
12 months ago
D sounds good, but isn't it adding more complexity?
EL
Elbert
12 months ago
C is a solid option, but it needs extra care with secrets.
NE
Nenita
12 months ago
Wait, can we really trust SSL alone? Seems sketchy.
MY
My
1 year ago
I think A is too risky with security tokens exposed.
LE
Leonora
1 year ago
B is definitely the way to go for mutual authentication!
SA
Sanjuana
1 year ago
Setting up a proxy service in the DMZ seems like a good idea, but I wonder if it adds unnecessary complexity to the setup.
EL
Elsa
1 year ago
I feel like the Client Id and Client Secret option could work, but I can't recall if that's enough for a trusted connection.
JA
Jaime
1 year ago
I think using SSL for mutual authentication sounds familiar, especially for securing connections. It might be the right choice.
JE
Jesusita
1 year ago
I remember we discussed mutual authentication in class, but I'm not entirely sure if it's the best option here.
RE
Rebbecca
1 year ago
This question seems pretty straightforward. I'm pretty confident I can identify the key component of regulated PII based on the options provided.
CE
Celestina
1 year ago
Okay, let me see here. The question is specifically asking about the lifespan of a value in a subprocess data object, so I'm guessing the answer has to do with the subprocess itself rather than the broader process or project.
GE
Gennie
1 year ago
Mutual authentication using SSL? More like 'Mutual Annihilation using SSL' - am I right, folks?
SI
Silva
1 year ago
D) Set up a proxy service for the login service in the DMZ.
RO
Rodrigo
1 year ago
C) Include Client Id and Client Secret in the login header callout.
SH
Shawn
1 year ago
B) Enforce mutual authentication between systems using SSL.
CA
Catrice
1 year ago
A) Require the use of Salesforce security tokens on passwords.
KA
Karol
1 year ago
C) Including the Client Id and Client Secret in the login header callout? That sounds a bit risky to me, like exposing sensitive credentials.
SI
Silva
1 year ago
A) Requiring Salesforce security tokens on passwords might work, but it feels a bit outdated. I'd go with the more robust SSL mutual authentication.
DA
Darrin
1 year ago
B) Enforce mutual authentication between systems using SSL.
AH
Ahmad
1 year ago
D) Set up a proxy service for the login service in the DMZ.
JU
Justine
1 year ago
B) Enforce mutual authentication between systems using SSL.
MA
Marguerita
1 year ago
D) Setting up a proxy service in the DMZ could be a good idea to add an extra layer of security and isolate the internal login service.
TA
Talia
1 year ago
A) Require the use of Salesforce security tokens on passwords.
LE
Lenora
1 year ago
D) Setting up a proxy service in the DMZ could be a good idea to add an extra layer of security and isolate the internal login service.
SE
Serita
1 year ago
B) Enforce mutual authentication between systems using SSL.
KR
Krissy
2 years ago
B) Enforcing mutual authentication using SSL seems like the most secure option to establish a trusted connection between the login service and Salesforce.
JE
Jessenia
1 year ago
User 2
BO
Bobbie
1 year ago
User 1
PA
Pauline
2 years ago
I'm not sure, but setting up a proxy service in the DMZ could also help protect the corporate login service.
GE
Geraldo
2 years ago
I agree with Theola, SSL provides a secure way to establish trust between systems.
TH
Theola
2 years ago
I think enforcing mutual authentication using SSL would be the best option.