Pass with professional Plat-Arch-203 actual quiz materials

Universal Containers (UC) has an e-commerce website where customers can buy products, make payments and manage their accounts. UC decides to build a Customer Community on Salesforce and wants to allow the customers to access the community from their accounts without logging in again. UC decides to implement an SP-initiated SSO using a SAML-compliant Idp. In this scenario where Salesforce is the Service Provider, which two activities must be performed in Salesforce to make SP-initiated SSO work? Choose 2 answers

• A. Create a Connected App.
• B. Set up My Domain.
• C. Configure Delegated Authentication.
• D. Configure SAML SSO settings.

Universal Containers (UC) operates in Asia, Europe and North America regions. There is one Salesforce org for each region. UC is implementing Customer 360 in Salesforce and has procured External Identity and Customer Community licenses in all orgs.
Customers of UC use Community to track orders and create inquiries. Customers also tend to move across regions frequently.
What should an identity architect recommend to optimize license usage and reduce maintenance overhead?

• A. Enable Contactless User in all orgs and downgrade users from Experience Cloud license to External Identity license once users have moved out of that region.
• B. Merge three orgs into one instance of Salesforce. This will no longer require maintaining three separate copies of the same customer.
• C. Contacts are required since Community access needs to be enabled. Maintenance is a necessary overhead that must be handled via data integration.
• D. Delete contact/ account records and deactivate user if user moves from a specific region; Sync will no longer be required.

A service provider (SP) supports both Security Assertion Markup Language (SAML) and OpenID Connect (OIDC).
When integrating this SP with Salesforce, which use case is the determining factor when choosing OIDC or SAML?

• A. The SP needs to perform API calls back to Salesforce on behalf of the user after the user logs in to the service provider.
• B. They are equivalent protocols and there is no real reason to choose one over the other.
• C. If the user has a session on Salesforce, you do not want them to be prompted for a username and password when they login to the SP.
• D. OIDC is more secure than SAML and therefore is the obvious choice.

Universal Containers is budding a web application that will connect with the Salesforce API using JWT OAuth Flow.
Which two settings need to be configured in the connect app to support this requirement?
Choose 2 answers

• A. The "web" OAuth scope in the connected app,
• B. The Use Digital Signature option in the connected app.
• C. The "edair_api" OAuth scope m the connected app.
• D. The "api" OAuth scope in the connected app.

In a typical SSL setup involving a trusted party and trusting party, what consideration should an Architect take into account when using digital certificates?

• A. Use of self-signed certificate leads to higher maintenance for trusted party because they have to act as the trusted CA
• B. Use of self-signed certificate leads to lower maintenance for trusted party because multiple self-signed certs need to be maintained.
• C. Use of self-signed certificate leads to lower maintenance for trusting party because there is no trusted CA cert to maintain.
• D. Use of self-signed certificate leads to higher maintenance for trusting party because the cert needs to be added to their truststore.