Salesforce Exam Identity and Access Management Architect Topic 5 Question 54 Discussion

Actual exam question for Salesforce's Identity and Access Management Architect exam

Question #: 54
Topic #: 5

[All Identity and Access Management Architect Questions]

Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the OAuth 2.0 user-agent flow. Application users will authenticate using username and password. They should not be forced to approve API access in the mobile app or reauthenticate for 3 months.

Which two connected app options need to be configured to fulfill this use case?

Choose 2 answers

ASet Permitted Users to 'Admin approved users are pre-authorized'.

BSet Permitted Users to 'All users may self-authorize'.

CSet the Session Timeout value to 3 months.

DSet the Refresh Token Policy to expire refresh token after 3 months.

Show Suggested Answer

Suggested Answer: B, D

by Renea at Nov 13, 2024, 09:50 PM

Limited Time Offer

25%

Off

Get Premium Identity and Access Management Architect Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Stephaine

4 months ago

Okay, let me think this through. A and D, for sure. I mean, who wants to approve API access every time? Not this guy!

upvoted 0 times

Francine

2 months ago

Definitely, it will make the user experience much smoother without constant approvals.

upvoted 0 times

...

Dylan

2 months ago

That sounds right. Those options should work well for the mobile app.

upvoted 0 times

...

Millie

2 months ago

D) Set the Refresh Token Policy to expire refresh token after 3 months.

upvoted 0 times

...

Monroe

3 months ago

A) Set Permitted Users to 'Admin approved users are pre-authorized'.

upvoted 0 times

...

Nan

4 months ago

Ha, this is a classic case of 'read the question carefully'. A and D, no doubt about it. 3 months, no need to approve, easy peasy!

upvoted 0 times

...

Berry

4 months ago

Hmm, I'm gonna go with A and C. 3-month session timeout should keep them logged in without the need for re-authentication.

upvoted 0 times

Keshia

3 months ago

C) Set the Session Timeout value to 3 months.

upvoted 0 times

...

Brandon

3 months ago

A) Set Permitted Users to 'Admin approved users are pre-authorized'.

upvoted 0 times

...

Mable

4 months ago

Definitely A and D. We don't want users to have to approve API access every time, and 3 months for the refresh token sounds about right.

upvoted 0 times

Lashawn

3 months ago

Exactly, it's important to balance convenience with security measures in place.

upvoted 0 times

...

Glynda

3 months ago

That makes sense, we want to provide a seamless user experience while maintaining security.

upvoted 0 times

...

Laurena

3 months ago

Yes, and setting the Refresh Token Policy to expire after 3 months will ensure users do not have to reauthenticate frequently.

upvoted 0 times

...

Ronald

4 months ago

I agree, setting Permitted Users to 'Admin approved users are pre-authorized' will prevent users from having to approve API access every time.

upvoted 0 times

...

Brett

4 months ago

Option A and D seem like the right choices here. Admin-approved users and 3-month refresh token policy, that's what the question is asking for.

upvoted 0 times

Flo

3 months ago

Definitely. It's all about balancing security with a good user experience.

upvoted 0 times

...

Valentin

3 months ago

That's what the question is asking for. It's important to ensure security and user convenience.

upvoted 0 times

...

Scarlet

4 months ago

Yes, I agree. Admin-approved users and a 3-month refresh token policy make sense.

upvoted 0 times

...

Selma

4 months ago

I think option A and D are the correct choices.

upvoted 0 times

...

Ceola

5 months ago

I'm not sure about A. Wouldn't setting Permitted Users to 'All users may self-authorize' be more user-friendly for a mobile app?

upvoted 0 times

...

Daryl

5 months ago

I agree with Cheryl. Setting Permitted Users to 'Admin approved users are pre-authorized' and Refresh Token Policy to expire after 3 months makes sense.

upvoted 0 times

...

Cheryl

5 months ago

I think we should choose A and D.

upvoted 0 times

...