Identity-and-Access-Management-Designer Exam Dumps | Universal Containers (UC) is setting up delegated authentication to allow employees to log in using their

<< Prev Question Next Question >>

Question 50/80

Universal Containers (UC) is setting up delegated authentication to allow employees to log in using their corporate credentials. UC's security team is concerned about the risks of exposing the corporate login service on the internet and has asked that a reliable trust mechanism be put in place between the login service and Salesforce.
What mechanism should an Architect put in place to enable a trusted connection between the login service and Salesforce?

A. Require the use of Salesforce security tokens on passwords.

B. Include Client Id and Client Secret in the login header callout.

C. Set up a proxy service for the login service in the DMZ.

D. Enforce mutual authentication between systems using SSL.

Recent Comments (The most recent comments are at the top.)

PG - Oct 22, 2022

"Your org’s implementation of the web service must be accessible by Salesforce servers, so deploy the web service on a server in your DMZ. Remember to use your server’s external DNS name when entering the delegated gateway URL in Single Sign-On Settings.
For security reasons, make your web service available by TLS. A certificate from a trusted provider, such as Verisign or Thawte, is required. For a list of trusted providers, contact Salesforce."

Probably C is correct.

Monchak - Sep 12, 2022

D should be correct although C is also possible

Monchak - Sep 09, 2022

Seems C is correct here

Sampa - May 28, 2022

both A & D are correct answers

Question 50/80

Recent Comments (The most recent comments are at the top.)

LEAVE A REPLY

Download PDF File