Try and practice the latest Salesforce : Plat-Arch-203 real questions & answers

Universal Containers (UC) would like its community users to be able to register and log in with Linkedin or Facebook Credentials. UC wants users to clearly see Facebook &Linkedin Icons when they register and login. What are the two recommended actions UC can take to achieve this Functionality? Choose 2 answers

• A. Create custom buttons for Facebook and inkedin using JAVAscript/CSS on a custom Visualforce page.
• B. Enable Facebook and Linkedin as Login options in the login section of the Community configuration.
• C. Store the Linkedin or Facebook user IDs in the Federation ID field on the Salesforce User record.
• D. Create custom Registration Handlers to link Linkedin and facebook accounts to user records.

The security team at Universal containers(UC) has identified exporting reports as a high-risk action and would like to require users to be logged into salesforce with their active directory (AD) credentials when doing so. For all other uses of Salesforce, Users should be allowed to use AD credentials or salesforce credentials. What solution should be recommended to prevent exporting reports except when logged in using AD credentials while maintaining the ability to view reports when logged in with salesforce credentials?

• A. Use SAML Federated Authentication, treat SAML sessions as high assurance, and raise the session level required for exporting reports.
• B. Use SAML Federated Authentication and block access to reports when accesses through a standard assurance session.
• C. Use SAML Federated Authentication with a login flow to dynamically add or remove a permission set that grants the export reports permission.
• D. Use SAML Federated Authentication and Custom SAML jit provisioning to dynamically add or remove a permission set that grants the Export Reports permission.

Universal Containers (UC) is planning to deploy a custom mobile app that will allow users to get e-signatures from its customers on their mobile devices. The mobile app connects to Salesforce to upload the e-signature as a file attachment and uses OAuth protocol for both authentication and authorization. What is the most recommended and secure OAuth scope setting that an Architect should recommend?

• A. Api
• B. Web
• C. Custom_permissions
• D. Id

Universal containers(UC) has implemented SAML-BASED single Sign-on for their salesforce application and is planning to provide access to salesforce on mobile devices using the salesforce1 mobile app. UC wants to ensure that single Sign-on is used for accessing the salesforce1 mobile app. Which two recommendations should the architect make? Choose 2 answers

• A. Use the existing SAML SSO flow along with user agent flow.
• B. Configure the embedded Web browser to use my domain URL.
• C. Use the existing SAML SSO flow along with Web server flow
• D. Configure the salesforce1 app to use the my domain URL

Universal containers(UC) has decided to build a new, highly sensitive application on Force.com platform. The security team at UC has decided that they want users to provide a fingerprint in addition to username/Password to authenticate to this application. How can an architect support fingerprints as a form of identification for salesforce Authentication?

• A. Use an appexchange product that does fingerprint scanning with native salesforce identity confirmation.
• B. Use salesforce Two-factor Authentication with callouts to a third-party fingerprint scanning application.
• C. Use Delegated Authentication with callouts to a third-party fingerprint scanning application.
• D. Use custom login flows with callouts to a third-party fingerprint scanning application.