100% Free Salesforce Identity-and-Access-Management-Architect Practice Test Questions

Question 1

A technology enterprise is planning to implement single sign-on login for users. When users log in to theSalesforce User object custom field, data should be populated for new and existing users.Which two steps should an identity architect recommend?Choose 2 answers

A : Implement Auth.SamlJitHandler Interface.

B : Create and update methods.

C : Implement RegistrationHandler Interface.

D : Implement SesslonManagement Class.

Answer: A,B

Question 2

Northern Trail Outfitters (NTO) wants its customers to use phone numbers to log in to their new digital portal,which was designed and built using Salesforce Experience Cloud. In order to access the portal, the user willneed to do the following:1. Enter a phone number and/or email address2. Enter a verification code that is to be sent via email or text.What is the recommended approach to fulfill this requirement?

A : Create a Login Discovery page and provide a Login Discovery Handler Apex class.

B : Create a custom login page with an Apex controller. The controller has logic to send and verify theidentity.

C : Create an Authentication provider and implement a self-registration handler class.

D : Create a custom login flow that uses an Apex controller to verify the phone numbers with the company's verification service.

Answer: A

Question 3

Northern Trail Outfitters recently acquired a company. Each company will retain its Identity Provider (IdP). Both companies rely extensively on Salesforce processes that send emails to users to take specific actions in Salesforce. How should the combined companys' employees collaborate in a single Salesforce org, yet authenticate to the appropriate IdP?

A : Configure unique MyDomains for each company and have generated links use the appropriate MyDomam in the URL.

B : Have generated links append a querystnng parameter indicating the IdP. The login service will redirect to the appropriate IdP.

C : Have generated links be prefixed with the appropriate IdP URL to invoke an IdP-initiated Security Assertion Markup Language flow when clicked.

D : Enable each IdP as a login option in the MyDomain Authentication Service settings. Users will then click on the appropriate IdP button.

Answer: D

Question 4

Northern Trail Outfitters recently acquired a company. Each company will retain its Identity Provider (IdP). Both companies rely extensively on Salesforce processes that send emails to users to take specific actions in Salesforce. How should the combined companys' employees collaborate in a single Salesforce org, yet authenticate to the appropriate IdP?

A : Configure unique MyDomains for each company and have generated links use the appropriate MyDomam in the URL.

B : Have generated links append a querystnng parameter indicating the IdP. The login service will redirect to the appropriate IdP.

C : Have generated links be prefixed with the appropriate IdP URL to invoke an IdP-initiated Security Assertion Markup Language flow when clicked.

D : Enable each IdP as a login option in the MyDomain Authentication Service settings. Users will then click on the appropriate IdP button.

Answer: D

Question 5

A multinational industrial products manufacturer is planning to implement Salesforce CRM to manage theirbusiness. They have the following requirements:1. They plan to implement Partner communities to provide access to their partner network .2. They have operations in multiple countries and are planning to implement multiple Salesforce orgs.3. Some of their partners do business in multiple countries and will need information from multiple Salesforcecommunities.4. They would like to provide a single login for their partners.How should an Identity Architect solution this requirement with limited custom development?

A : Create a partner login for the country of their operation and use SAML federation to provide access toother orgs.

B : Consolidate Partner related information in a single org and provide access through Salesforcecommunity.

C : Allow partners to choose the Salesforce org they need information from and use login flows toauthenticate access.

D : Register partners in one org and access information from other orgs using APIs.

Answer: A

100% Free Identity-and-Access-Management-Architect Practice Exam Questions (2026)

Stay Ahead with Updated Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Identity-and-Access-Management-Architect Practice Tests & Verified Answers