Free Administration of Symantec Messaging Gateway 10.6 - 250-215 Exam Questions and Answers

Last updated: August 29, 2026

Exam code

250-215

Provider

Symantec

Questions in our bank

1000+

Free to read

First 10, with answers

Official page

Official Exam website

Our test mode duration & pass mark

130 mins · 70%

Recommended: Switch to Test Mode to start a practice test that simulates the real exam experience.

1. Question #1

   In a typical SSL setup involving a trusted party and trusting party, what consideration should an Architect take into account when using digital certificates?

   • A. Use of self-signed certificate leads to lower maintenance for trusted party because multiple self-signed certs need to be maintained.
   • B. Use of self-signed certificate leads to higher maintenance for trusted party because they have to act as the trusted CA
   • C. Use of self-signed certificate leads to lower maintenance for trusting party because there is no trusted CA cert to maintain.
   • D. Use of self-signed certificate leads to higher maintenance for trusting party because the cert needs to be added to their truststore.
   Reveal Answer

2. Question #2

   Universal Containers (UC) has a strict requirement to authenticate users to Salesforce using their mainframe credentials. The mainframe user store cannot be accessed from a SAML provider. UC would also like to have users in Salesforce created on the fly if they provide accurate mainframe credentials. How can the Architect meet these requirements?

   • A. Use a Salesforce Login Flow to call out to a web service and create the user on the fly.
   • B. Use the SOAP API to create the user when created on the mainframe; implement Delegated Authentication.
   • C. Implement Just-In-Time Provisioning on the mainframe to create the user on the fly.
   • D. Implement OAuth User-Agent Flow on the mainframe; use a Registration Handler to create the user on the fly.
   Reveal Answer

3. Question #3

   An identity architect has built a native mobile application and plans to integrate it with a Salesforce Identity solution. The following are the requirements for the solution: * 1. Users should not have to login every time they use the app. * 2. The app should be able to make calls to the Salesforce REST API. * 3. End users should NOT see the OAuth approval page. How should the identity architect configure the Salesforce connected app to meet the requirements?

   • A. Enable the API Scope and Offline Access Scope, upload a certificate so JWT Bearer Flow can be used and then set the connected app access settings to
   • B. Enable the API Scope and Offline Access Scope on the connected app, and then set the connected app to access settings to 'Admin Pre-Approved".
   • C. Enable the Full Access Scope and then set the connected app access settings to "Admin Pre-Approved".
   • D. Enable the API Scope and Offline Access Scope on the connected app, and then set the Connected App access settings to "User may self authorize".
   Reveal Answer

4. Question #4

   Northern Trail Outfitters (NTO) believes a specific user account may have been compromised. NTO inactivated the user account and needs U perform a forensic analysis and identify signals that could Indicate a breach has occurred. What should NTO's first step be in gathering signals that could indicate account compromise?

   • A. Review the User record and evaluate the login and transaction history.
   • B. Download the Setup Audit Trail and review all recent activities performed by the user.
   • C. Download the Identity Provider Event Log and evaluate the details of activities performed by the user.
   • D. Download the Login History and evaluate the details of logins performed by the user.
   Reveal Answer

5. Question #5

   An architect needs to set up a Facebook Authentication provider as login option for a salesforce customer Community. What portion of the authentication provider setup associates a Facebook user with a salesforce user?

   • A. Consumer key and consumer secret
   • B. Federation ID
   • C. User info endpoint URL
   • D. Apex registration handler
   Reveal Answer

6. Question #6

   Universal containers uses an Employee portal for their employees to collaborate. employees access the portal from their company's internal website via SSO. It is set up to work with Active Directory. What is the role of Active Directory in this scenario?

   • A. Identity store
   • B. Authentication store
   • C. Identity provider
   • D. Service provider
   Reveal Answer

7. Question #7

   A public sector agency is setting up an identity solution for its citizens using a Community built on Experience Cloud and requires the new user registration functionality to capture first name, last name, and phone number. The phone number will be used for identity verification. Which feature should an identity architect recommend to meet the requirements?

   • A. Integrate with social websites (Facebook, Linkedi
   • B. Twitter)
   • C. Use an external Identity Provider
   • D. Create a custom Lightning Web Component
   Reveal Answer

8. Question #8

   The executive sponsor for an organization has asked if Salesforce supports the ability to embed a login widget into its service providers in order to create a more seamless user experience. What should be used and considered before recommending it as a solution on the Salesforce Platform?

   • A. OpenID Connect Web Server Flo
   • B. Determine if the service provider is secure enough to store the client secret on.
   • C. Embedded Logi
   • D. Identify what level of UI customization will be required to make it match the service providers look and feel.
   Reveal Answer

9. Question #9

   Universal containers (UC) has a mobile application that calls the salesforce REST API. In order to prevent users from having to enter their credentials everytime they use the app, UC has enabled the use of refresh Tokens as part of the salesforce connected App and updated their mobile app to take advantage of the refresh token. Even after enabling the refresh token, Users are still complaining that they have to enter their credentials once a day. What is the most likely cause of the issue?

   • A. The Oauth authorizations are being revoked by a nightly batch job.
   • B. The refresh token expiration policy is set incorrectly in salesforce
   • C. The app is requesting too many access Tokens in a 24-hour period
   • D. The users forget to check the box to remember their credentials.
   Reveal Answer

10. Question #10

    Universal Containers (UC) has an existing Salesforce org configured for SP-Initiated SAML SSO with their Idp. A second Salesforce org is being introduced into the environment and the IT team would like to ensure they can use the same Idp for new org. What action should the IT team take while implementing the second org?

    • A. Use the same SAML Identity location as the first org.
    • B. Use a different Entity ID than the first org.
    • C. Use the same request bindings as the first org.
    • D. Use the Salesforce Username as the SAML Identity Type.
    Reveal Answer