Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Exam - Topic 8 Question 19 Discussion

Actual exam question for Salesforce's Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) exam

Question #: 19
Topic #: 8

[All Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions]

Universal Containers (UC) is setting up delegated authentication to allow employees to log in using their corporate credentials. UC's security team is concerned about the risks of exposing the corporate login service on the internet and has asked that a reliable trust mechanism be put in place between the login service and Salesforce.

What mechanism should an Architect put in place to enable a trusted connection between the login service and Salesforce?

ARequire the use of Salesforce security tokens on passwords.

BEnforce mutual authentication between systems using SSL.

CInclude Client Id and Client Secret in the login header callout.

DSet up a proxy service for the login service in the DMZ.

Show Suggested Answer

Suggested Answer: B, D

by Detra at Apr 01, 2023, 03:32 PM

Limited Time Offer

25%

Off

Get Premium Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Glory

5 months ago

D sounds good, but isn't it adding more complexity?

upvoted 0 times

...

Elbert

6 months ago

C is a solid option, but it needs extra care with secrets.

upvoted 0 times

...

Nenita

6 months ago

Wait, can we really trust SSL alone? Seems sketchy.

upvoted 0 times

...

My

6 months ago

I think A is too risky with security tokens exposed.

upvoted 0 times

...

Leonora

6 months ago

B is definitely the way to go for mutual authentication!

upvoted 0 times

...

Sanjuana

6 months ago

Setting up a proxy service in the DMZ seems like a good idea, but I wonder if it adds unnecessary complexity to the setup.

upvoted 0 times

...

Elsa

6 months ago

I feel like the Client Id and Client Secret option could work, but I can't recall if that's enough for a trusted connection.

upvoted 0 times

...

Jaime

6 months ago

I think using SSL for mutual authentication sounds familiar, especially for securing connections. It might be the right choice.

upvoted 0 times

...

Jesusita

7 months ago

I remember we discussed mutual authentication in class, but I'm not entirely sure if it's the best option here.

upvoted 0 times

...

Rebbecca

7 months ago

This question seems pretty straightforward. I'm pretty confident I can identify the key component of regulated PII based on the options provided.

upvoted 0 times

...

Celestina

7 months ago

Okay, let me see here. The question is specifically asking about the lifespan of a value in a subprocess data object, so I'm guessing the answer has to do with the subprocess itself rather than the broader process or project.

upvoted 0 times

...

Gennie

11 months ago

Mutual authentication using SSL? More like 'Mutual Annihilation using SSL' - am I right, folks?

upvoted 0 times

Silva

10 months ago

D) Set up a proxy service for the login service in the DMZ.

upvoted 0 times

...

Rodrigo

10 months ago

C) Include Client Id and Client Secret in the login header callout.

upvoted 0 times

...

Shawn

10 months ago

B) Enforce mutual authentication between systems using SSL.

upvoted 0 times

...

Catrice

11 months ago

A) Require the use of Salesforce security tokens on passwords.

upvoted 0 times

...

Karol

11 months ago

C) Including the Client Id and Client Secret in the login header callout? That sounds a bit risky to me, like exposing sensitive credentials.

upvoted 0 times

...

Silva

11 months ago

A) Requiring Salesforce security tokens on passwords might work, but it feels a bit outdated. I'd go with the more robust SSL mutual authentication.

upvoted 0 times

Darrin

10 months ago

B) Enforce mutual authentication between systems using SSL.

upvoted 0 times

...

Ahmad

10 months ago

D) Set up a proxy service for the login service in the DMZ.

upvoted 0 times

...

Justine

10 months ago

B) Enforce mutual authentication between systems using SSL.

upvoted 0 times

...

Marguerita

12 months ago

D) Setting up a proxy service in the DMZ could be a good idea to add an extra layer of security and isolate the internal login service.

upvoted 0 times

Talia

11 months ago

A) Require the use of Salesforce security tokens on passwords.

upvoted 0 times

...

Lenora

11 months ago

D) Setting up a proxy service in the DMZ could be a good idea to add an extra layer of security and isolate the internal login service.

upvoted 0 times

...

Serita

11 months ago

B) Enforce mutual authentication between systems using SSL.

upvoted 0 times

...

Krissy

1 year ago

B) Enforcing mutual authentication using SSL seems like the most secure option to establish a trusted connection between the login service and Salesforce.

upvoted 0 times