Northern Trail Outfitters (NTO) has a requirement to ensure all user logins include a single multi-factor authentication (MFA) prompt. Currently, users are allowed the choice to login with a username and password or via single sign-on against NTO's corporate Identity Provider, which includes built-in MFA.
Which configuration will meet this requirement?
Suggested Answer: C
Get Premium Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
23 comments · newest first
CA
Carolann
25 days ago
I agree with Novella. B covers all bases.
RE
Rene
30 days ago
D could work, but it’s too restrictive.
LA
Laurel
1 month ago
C seems easier to implement.
LA
Laticia
1 month ago
I prefer A. Simple and effective.
NO
Novella
2 months ago
It enforces MFA directly. More secure!
FR
Frank
2 months ago
Why B? Sounds complicated.
NO
Novella
2 months ago
I think option B is the best choice.
FL
Flo
2 months ago
A is easy but not as secure as B.
SU
Sue
2 months ago
D seems too restrictive for some users.
MA
Maryann
2 months ago
But C might not cover all scenarios.
PE
Pearlene
3 months ago
I prefer C. Just enabling MFA is simpler.
KE
Kerry
3 months ago
It enforces MFA directly. More secure!
VI
Viola
3 months ago
Why B? Sounds complicated.
KE
Kerry
3 months ago
I think option B is the best choice.
DO
Dona
3 months ago
I'm surprised there's no mention of user training for MFA!
LA
Lauryn
3 months ago
Option A is just a permission set, not enough for MFA.
GA
Gail
4 months ago
Wait, does that mean we can't use SSO anymore?
GI
Gianna
5 months ago
I disagree, option C seems simpler to implement.
HY
Hyman
5 months ago
I think option B is the best choice for enforcing MFA.
JA
Janey
6 months ago
I’m leaning towards option A since it seems straightforward to assign a permission set, but I wonder if it really enforces MFA for all login methods as required.
LA
Laticia
6 months ago
I feel like option D could be a solution too, especially since it mentions session security levels, but I’m not clear on how that ties into MFA specifically.
PA
Pansy
6 months ago
I remember discussing option C in class, but I’m a bit confused about whether enabling it from Setup alone would meet the requirement without additional configurations.
JO
Johnson
6 months ago
I think option B sounds familiar because we practiced creating custom login flows in our last session, but I'm not entirely sure if it’s the only way to enforce MFA.