Free Administration of Symantec Messaging Gateway 10.6 - 250-215 Exam Questions and Answers

In a typical SSL setup involving a trusted party and trusting party, what consideration should an Architect take into account when using digital certificates?

• AA. Use of self-signed certificate leads to lower maintenance for trusted party because multiple self-signed certs need to be maintained.
• BB. Use of self-signed certificate leads to higher maintenance for trusted party because they have to act as the trusted CA
• CC. Use of self-signed certificate leads to lower maintenance for trusting party because there is no trusted CA cert to maintain.
• DD. Use of self-signed certificate leads to higher maintenance for trusting party because the cert needs to be added to their truststore.

Which three are features of federated Single sign-on solutions? Choose 3 Answers

Select 3 answers.

• AA. It establishes trust between Identity Store and Service Provider.
• BB. It federates credentials control to authorized applications.
• CC. It solves all identity and access management problems.
• DD. It improves affiliated applications adoption rates.
• EE. It enables quick and easy provisioning and deactivating of users.

Universal Containers (UC) has a strict requirement to authenticate users to Salesforce using their mainframe credentials. The mainframe user store cannot be accessed from a SAML provider. UC would also like to have users in Salesforce created on the fly if they provide accurate mainframe credentials. How can the Architect meet these requirements?

• AA. Use a Salesforce Login Flow to call out to a web service and create the user on the fly.
• BB. Use the SOAP API to create the user when created on the mainframe; implement Delegated Authentication.
• CC. Implement Just-In-Time Provisioning on the mainframe to create the user on the fly.
• DD. Implement OAuth User-Agent Flow on the mainframe; use a Registration Handler to create the user on the fly.

An identity architect has built a native mobile application and plans to integrate it with a Salesforce Identity solution. The following are the requirements for the solution: * 1. Users should not have to login every time they use the app. * 2. The app should be able to make calls to the Salesforce REST API. * 3. End users should NOT see the OAuth approval page. How should the identity architect configure the Salesforce connected app to meet the requirements?

• AA. Enable the API Scope and Offline Access Scope, upload a certificate so JWT Bearer Flow can be used and then set the connected app access settings to
• BB. Enable the API Scope and Offline Access Scope on the connected app, and then set the connected app to access settings to 'Admin Pre-Approved".
• CC. Enable the Full Access Scope and then set the connected app access settings to "Admin Pre-Approved".
• DD. Enable the API Scope and Offline Access Scope on the connected app, and then set the Connected App access settings to "User may self authorize".

Northern Trail Outfitters (NTO) believes a specific user account may have been compromised. NTO inactivated the user account and needs U perform a forensic analysis and identify signals that could Indicate a breach has occurred. What should NTO's first step be in gathering signals that could indicate account compromise?

• AA. Review the User record and evaluate the login and transaction history.
• BB. Download the Setup Audit Trail and review all recent activities performed by the user.
• CC. Download the Identity Provider Event Log and evaluate the details of activities performed by the user.
• DD. Download the Login History and evaluate the details of logins performed by the user.

Sales users at Universal containers use salesforce for Opportunity management. Marketing uses a third-party application called Nest for Lead nurturing that is accessed using username/password. The VP of sales wants to open up access to nest for all sales uses to provide them access to lead history and would like SSO for better adoption. Salesforce is already setup for SSO and uses Delegated Authentication. Nest can accept username/Password or SAML-based Authentication. IT teams have received multiple password-related issues for nest and have decided to set up SSO access for Nest for Marketing users as well. The CIO does not want to invest in a new IDP solution and is considering using Salesforce for this purpose. Which are appropriate license type choices for sales and marketing users, giving salesforce is using Delegated Authentication? Choose 2 answers

Select 2 answers.

• AA. Salesforce license for sales users and Identity license for Marketing users
• BB. Salesforce license for sales users and External Identity license for Marketing users
• CC. Identity license for sales users and Identity connect license for Marketing users
• DD. Salesforce license for sales users and platform license for Marketing users.

An architect needs to set up a Facebook Authentication provider as login option for a salesforce customer Community. What portion of the authentication provider setup associates a Facebook user with a salesforce user?

• AA. Consumer key and consumer secret
• BB. Federation ID
• CC. User info endpoint URL
• DD. Apex registration handler

Universal containers uses an Employee portal for their employees to collaborate. employees access the portal from their company's internal website via SSO. It is set up to work with Active Directory. What is the role of Active Directory in this scenario?

• AA. Identity store
• BB. Authentication store
• CC. Identity provider
• DD. Service provider

A public sector agency is setting up an identity solution for its citizens using a Community built on Experience Cloud and requires the new user registration functionality to capture first name, last name, and phone number. The phone number will be used for identity verification. Which feature should an identity architect recommend to meet the requirements?

• AA. Integrate with social websites (Facebook, Linkedi
• BB. Twitter)
• CC. Use an external Identity Provider
• DD. Create a custom Lightning Web Component

The executive sponsor for an organization has asked if Salesforce supports the ability to embed a login widget into its service providers in order to create a more seamless user experience. What should be used and considered before recommending it as a solution on the Salesforce Platform?

• AA. OpenID Connect Web Server Flo
• BB. Determine if the service provider is secure enough to store the client secret on.
• CC. Embedded Logi
• DD. Identify what level of UI customization will be required to make it match the service providers look and feel.