2026 New Plat-Arch-203 Dumps – Real Salesforce Exam Questions [Q99-Q120]

Rate this post

2026 New Plat-Arch-203 Dumps – Real Salesforce Exam Questions

Dependable Plat-Arch-203 Exam Dumps to Become Salesforce Certified

Q99. Universal containers (UC) has implemented SAML -based single Sign-on for their salesforce application. UC is using pingfederate as the Identity provider. To access salesforce, Users usually navigate to a bookmarked link to my domain URL. What type of single Sign-on is this?

Sp-Initiated

IDP-initiated with deep linking

IDP-initiated

Web server flow.

Q100. A manufacturer wants to provide registration for an Internet of Things (IoT) device with limited display input or capabilities.
Which Salesforce OAuth authorization flow should be used?

OAuth 2.0 JWT Bearer How

OAuth 2.0 Device Flow

OAuth 2.0 User-Agent Flow

OAuth 2.0 Asset Token Flow

Q101. Universal Containers (UC) would like to enable self-registration for their Salesforce Partner Community Users. UC wants to capture some custom data elements from the partner user, and based on these data elements, wants to assign the appropriate Profile and Account values.
Which two actions should the Architect recommend to UC1
Choose 2 answers

Configure Registration for Communities to use a custom Visualforce Page.

Modify the SelfRegistration trigger to assign Profile and Account.

Modify the CommunitiesSelfRegController to assign the Profile and Account.

Configure Registration for Communities to use a custom Apex Controller.

Q102. A division of a Northern Trail Outfitters (NTO) purchased Salesforce. NTO uses a third party identity provider (IdP) to validate user credentials against Its corporate Lightweight Directory Access Protocol (LDAP) directory. NTO wants to help employees remember as passwords as possible.
What should an identity architect recommend?

Setup Salesforce as a Service Provider to the existing IdP.

Setup Salesforce as an IdP to authenticate against the LDAP directory.

Use Salesforce connect to synchronize LDAP passwords to Salesforce.

Setup Salesforce as an Authentication Provider to the existing IdP.

Q103. Users logging into Salesforce are frequently prompted to verify their identity.
The identity architect is required to provide recommendations so that frequency of prompt verification can be reduced.
What should the identity architect recommend to meet the requirement?

Implement 2FA authentication for the Salesforce org.

Set trusted IP ranges for the organization.

Implement an single sign-on for Salesforce using an external identity provider.

Implement multi-factor authentication for the Salesforce org.

Q104. Universal containers (UC) wants to implement a partner community. As part of their implementation, UC would like to modify both the Forgot password and change password experience with custom branding for their partner community users. Which 2 actions should an architect recommend to UC? Choose 2 answers

Build a community builder page for the change password experience and Custom Visualforce page for the Forgot password experience.

Build a custom visualforce page for both the change password and Forgot password experiences.

Build a custom visualforce page for the change password experience and a community builder page for the Forgot password experience.

Build a community builder page for both the change password and Forgot password experiences.

Q105. Universal Containers (UC) has an e-commerce website where customers can buy products, make payments and manage their accounts. UC decides to build a Customer Community on Salesforce and wants to allow the customers to access the community from their accounts without logging in again. UC decides to implement an SP-initiated SSO using a SAML-compliant Idp. In this scenario where Salesforce is the Service Provider, which two activities must be performed in Salesforce to make SP-initiated SSO work? Choose 2 answers

Configure SAML SSO settings.

Create a Connected App.

Configure Delegated Authentication.

Set up My Domain.

Q106. A technology enterprise is setting up an identity solution with an external vendors wellness application for its employees. The user attributes need to be returned to the wellness application in an ID token.
Which authentication mechanism should an identity architect recommend to meet the requirements?

OpenID Connect

User Agent Flow

JWT Bearer Token Flow

Web Server Flow

Q107. Universal containers (UC) would like to enable self – registration for their salesforce partner community users. UC wants to capture some custom data elements from the partner user, and based on these data elements, wants to assign the appropriate profile and account values. Which two actions should the architect recommend to UC? Choose 2 answers

Modify the communitiesselfregcontroller to assign the profile and account.

Modify the selfregistration trigger to assign profile and account.

Configure registration for communities to use a custom visualforce page.

Configure registration for communities to use a custom apex controller.

Q108. Universal Containers (UC) has a strict requirement to authenticate users to Salesforce using their mainframe credentials. The mainframe user store cannot be accessed from a SAML provider. UC would also like to have users in Salesforce created on the fly if they provide accurate mainframe credentials.
How can the Architect meet these requirements?

Use a Salesforce Login Flow to call out to a web service and create the user on the fly.

Use the SOAP API to create the user when created on the mainframe; implement Delegated Authentication.

Implement Just-In-Time Provisioning on the mainframe to create the user on the fly.

Implement OAuth User-Agent Flow on the mainframe; use a Registration Handler to create the user on the fly.

Q109. Universal Containers (UC) has a desktop application to collect leads for marketing campaigns. UC wants to extend this application to integrate with Salesforce to create leads. Integration between the desktop application and Salesforce should be seamless. What Authorization flow should the Architect recommend?

JWT Bearer Token Flow

Web Server Authentication Flow

User Agent Flow

Username and Password Flow

Q110. A university is planning to set up an identity solution for its alumni. A third-party identity provider will be used for single sign-on Salesforce will be the system of records. Users are getting error messages when logging in.
Which Salesforce feature should be used to debug the issue?

Apex Exception Email

View Setup Audit Trail

Debug Logs

Q111. Universal containers (UC) wants users to authenticate into their salesforce org using credentials stored in a custom identity store. UC does not want to purchase or use a third-party Identity provider. Additionally, UC is extremely wary of social media and does not consider it to be trust worthy. Which two options should an architect recommend to UC? Choose 2 answers

Use a professional social media such as LinkedIn as an Authentication provider

Build a custom web page that uses the identity store and calls frontdoor.jsp

Build a custom Web service that is supported by Delegated Authentication.

Implement the Openid protocol and configure an Authentication provider

Q112. Universal containers (UC) has a mobile application that it wants to deploy to all of its salesforce users, including customer Community users. UC would like to minimize the administration overhead, which two items should an architect recommend? Choose 2 answers

Enable the “Refresh Tokens is valid until revoked ” setting in the Connected App.

Enable the “Enforce Ip restrictions” settings in the connected App.

Enable the “All users may self-authorize” setting in the Connected App.

Enable the “High Assurance session required” setting in the Connected App.

Q113. Universal Containers (UC) wants to build a custom mobile app for their field reps to create orders in salesforce. After the first time the users log in, they must be able to access salesforce upon opening the mobile app without being prompted to log in again. What Oauth flows should be considered to support this requirement?

Web Server flow with a Refresh Token.

Mobile Agent flow with a Bearer Token.

User Agent flow with a Refresh Token.

SAML Assertion flow with a Bearer Token.

Q114. Universal Containers (UC) has five Salesforce orgs (UC1, UC2, UC3, UC4, UC5). of Every user that is in UC2, UC3, UC4, and UC5 is also in UC1, however not all users 65* have access to every org. Universal Containers would like to simplify the authentication process such that all Salesforce users need to remember one set of credentials. UC would like to achieve this with the least impact to cost and maintenance. What approach should an Architect recommend to UC?

Purchase a third-party Identity Provider for all five Salesforce orgs to use and set up JIT user provisioning on all other orgs.

Purchase a third-party Identity Provider for all five Salesforce orgs to use, but don’t set up JIT user provisioning for other orgs.

Configure UC1 as the Identity Provider to the other four Salesforce orgs and set up JIT user provisioning on all other orgs.

Configure UC1 as the Identity Provider to the other four Salesforce orgs, but don’t set up JIT user provisioning for other orgs.

Q115. Universal containers (UC) has a custom, internal-only, mobile billing application for users who are commonly out of the office. The app is configured as a connected App in salesforce. Due to the nature of this app, UC would like to take the appropriate measures to properly secure access to the app. Which two are recommendations to make the UC? Choose 2 answers

Disallow the use of single Sign-on for any users of the mobile app.

Require high assurance sessions in order to use the connected App

Use Google Authenticator as an additional part of the logical processes.

Set login IP ranges to the internal network for all of the app users profiles.

Q116. A company with 15,000 employees is using Salesforce and would like to take the necessary steps to highlight or curb fraudulent activity.
Which tool should be used to track login data, such as the average number of logins, who logged in more than the average number of times and who logged in during non-business hours?

Q117. Universal Containers (UC) employees have Salesforce access from restricted IP ranges only, to protect against unauthorised access. UC wants to roll out the Salesforce1 mobile app and make it accessible from any location. Which two options should an Architect recommend? Choose 2 answers

Relax the IP restriction with a second factor in the Connect App settings for Salesforce1 mobile app.

Remove existing restrictions on IP ranges for all types of user access.

Relax the IP restrictions in the Connect App settings for the Salesforce1 mobile app.

Use Login Flow to bypass IP range restriction for the mobile app.

Q118. Universal containers (UC) has multiple salesforce orgs and would like to use a single identity provider to access all of their orgs. How should UC’S architect enable this behavior?

Ensure that users have the same email value in their user records in all of UC’s salesforce orgs.

Ensure the same username is allowed in multiple orgs by contacting salesforce support.

Ensure that users have the same Federation ID value in their user records in all of UC’s salesforce orgs.

Ensure that users have the same alias value in their user records in all of UC’s salesforce orgs.

Q119. Universal containers (UC) wants to integrate a Web application with salesforce. The UC team has implemented the Oauth web-server Authentication flow for authentication process. Which two considerations should an architect point out to UC? Choose 2 answers

The web application should be hosted on a secure server.

The web server must be able to protect consumer privacy

The flow involves passing the user credentials back and forth.

The flow will not provide an Oauth refresh token back to the server.

Q120. The executive sponsor for an organization has asked if Salesforce supports the ability to embed a login widget into its service providers in order to create a more seamless user experience.
What should be used and considered before recommending it as a solution on the Salesforce Platform?

OpenID Connect Web Server Flow. Determine if the service provider is secure enough to store the client secret on.

Embedded Login. Identify what level of UI customization will be required to make it match the service providers look and feel.

Salesforce REST apis. Ensure that Secure Sockets Layer (SSL) connection for the integration is used.

Embedded Login. Consider whether or not it relies on third party cookies which can cause browser compatibility issues.

Get Ready with Plat-Arch-203 Exam Dumps (2026): https://www.prepawaytest.com/Salesforce/Plat-Arch-203-practice-exam-dumps.html

Leave a Reply Cancel reply