Salesforce Exam Identity and Access Management Architect Topic 8 Question 19 Discussion

Actual exam question for Salesforce's Identity and Access Management Architect exam

Question #: 19
Topic #: 8

[All Identity and Access Management Architect Questions]

Universal Containers (UC) is setting up delegated authentication to allow employees to log in using their corporate credentials. UC's security team is concerned about the risks of exposing the corporate login service on the internet and has asked that a reliable trust mechanism be put in place between the login service and Salesforce.

What mechanism should an Architect put in place to enable a trusted connection between the login service and Salesforce?

ARequire the use of Salesforce security tokens on passwords.

BEnforce mutual authentication between systems using SSL.

CInclude Client Id and Client Secret in the login header callout.

DSet up a proxy service for the login service in the DMZ.

Show Suggested Answer

Suggested Answer: B, D

by Detra at Apr 01, 2023, 03:32 PM

Limited Time Offer

25%

Off

Get Premium Identity and Access Management Architect Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Gennie

27 days ago

Mutual authentication using SSL? More like 'Mutual Annihilation using SSL' - am I right, folks?

upvoted 0 times

Catrice

11 days ago

A) Require the use of Salesforce security tokens on passwords.

upvoted 0 times

...

Karol

1 months ago

C) Including the Client Id and Client Secret in the login header callout? That sounds a bit risky to me, like exposing sensitive credentials.

upvoted 0 times

...

Silva

1 months ago

A) Requiring Salesforce security tokens on passwords might work, but it feels a bit outdated. I'd go with the more robust SSL mutual authentication.

upvoted 0 times

...

Marguerita

1 months ago

D) Setting up a proxy service in the DMZ could be a good idea to add an extra layer of security and isolate the internal login service.

upvoted 0 times

Talia

11 days ago

A) Require the use of Salesforce security tokens on passwords.

upvoted 0 times

...

Lenora

20 days ago

D) Setting up a proxy service in the DMZ could be a good idea to add an extra layer of security and isolate the internal login service.

upvoted 0 times

...

Serita

1 months ago

B) Enforce mutual authentication between systems using SSL.

upvoted 0 times

...

Krissy

2 months ago

B) Enforcing mutual authentication using SSL seems like the most secure option to establish a trusted connection between the login service and Salesforce.

upvoted 0 times