Identity and Access Management Designer Free Sample Questions

### Case Study: Global Finance Inc. Identity Modernization **Company Background:** Global Finance Inc. (GFI) is a multinational financial services company. Their primary Salesforce org serves as the central hub for customer relationship management. They are developing a new suite of applications to be used by internal employees, external financial partners, and retail customers. The primary Salesforce org must act as the central Identity Provider (IdP) for this new ecosystem. **Application Ecosystem:** 1. **Internal Analytics Dashboard:** A confidential web application hosted on-premise that requires server-to-server API access to pull Salesforce data. The app must act on behalf of the logged-in user to respect sharing rules. 2. **Partner Portal:** A separate Salesforce Experience Cloud org for financial partners. Partners should log in to the primary GFI org and then access the Partner Portal seamlessly. 3. **Mobile Client App:** A native iOS/Android application for retail customers that will use the primary GFI org for authentication and API access. The app must securely handle sessions on the mobile device. **Requirements & Constraints:** * The primary GFI org must be the single source of truth for identity. * Server-to-server communication must not involve storing user passwords. * Partner access must be seamless after initial login (SSO). * The mobile app must provide a secure and long-lived session without requiring frequent logins. Which combination of identity protocols and flows represents the most secure and appropriate architectural solution for this ecosystem? ```mermaid graph TD subgraph Primary_Org [Primary Salesforce Org (IdP)] direction LR Users((Users)) end subgraph Applications A[Internal Analytics Dashboard] B[Partner Portal (Experience Cloud)] C[Mobile Client App] end Users --> Primary_Org Primary_Org --> A Primary_Org --> B Primary_Org --> C ```

Universal Containers (UC) has decided to build a new, highly sensitive application on the Lightning platform. The security team at UC has decided that they want users to provide a fingerprint in addition to username/password to authenticate to this application.How can an Architect support fingerprints as a form of identification for Salesforce authentication?