Home Certifications Editorials

Exam overview and study plan

Platform Identity and Access Management Architect Practice Questions

Salesforce Certified Platform Identity and Access Management Architect

Read questions, check verified answers and discuss the reasoning. Use reading options to shape your revision, or switch to the simulator for timed practice.

View 32 free questions

32 questions in this view

Page 1 of 6

Question 1

The CMO of an advertising company has invited an Identity and Access Management (IAM) specialist to discuss Salesforce out-of-box capabilities for configuring the company's login and registration experience on Salesforce Experience Cloud.

The CMO is looking to brand the login page with the company's logo, background color, login button color, and dynamic right-frame from an external URL.

Which two solutions should the IAM specialist recommend?

Build custom pages for branding requirements in Experience Cloud.
Login & Registration pages can be branded in the Community Administration settings.
Build custom site pages for reset and forgot password features.
Use Experience Builder to build branded Reset and Forgot Password pages.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

Universal Containers want users to be able to log in to the Salesforce mobile app with their Active Directory password. Employees are unable to use mobile VPN.

Which two options should an identity architect recommend to meet the requirement?

Salesforce Trigger & Field on Contact Object
Salesforce Identity Connect
Configure Cloud Provider Load Balancer
Active Directory Password Sync Plugin

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

A Salesforce customer is implementing Agentforce Sales and a custom pricing application for its call center agents. An Enterprise single sign-on solution is used to authenticate and sign-in users to all applications. The customer has the following requirements:

1. The development team has decided to use a Canvas app to expose the pricing application to agents.
2. Agents should be able to access the Canvas app without needing to log in to the pricing application.

Which two options should the identity architect consider to provide support for the Canvas app to initiate login for users?

Select "Enable as a Canvas Personal App" in the connected app settings.
Enable OAuth settings in the connected app with required OAuth scopes for the pricing application.
Enable SAML in the connected app and Security Assertion Markup Language (SAML) Initiation Method as Service Provider Initiated.
Configure the Canvas app as a connected app and set Admin-approved users as pre-authorized.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

Universal Containers is creating a mobile application that will be secured by Salesforce Identity using the OAuth 2.0 user-agent flow. Application users will authenticate using username and password. They should not be forced to approve API access in the mobile app or reauthenticate for 3 months.

Which two connected app options need to be configured to fulfill this use case?

Set Permitted Users to "All users may self-authorize".
Set the Session Timeout value to 3 months.
Set the Refresh Token Policy to expire refresh token after 3 months.
Set Permitted Users to "Admin approved users are pre-authorized".

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

A farming enterprise offers smart farming technology to its farmer customers, which includes a variety of sensors for livestock tracking, pest monitoring, climate monitoring etc. They plan to store all the data in Salesforce. They would also like to ensure timely maintenance of the installed sensors. They have engaged a Salesforce Architect to propose an appropriate way to send an alert when something goes wrong.

Which OAuth flow should the architect recommend?

OAuth 2.0 Asset Token Flow
OAuth 2.0 SAML Bearer Assertion Flow
OAuth 2.0 JWT Bearer Token Flow
OAuth 2.0 Device Authentication Flow

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

An identity architect has been asked to recommend a solution that allows administrators to configure personalized alert messages to users before they land on the Experience Cloud site (formerly known as Community) homepage.

What is recommended to fulfill this requirement with the least amount of customization?

Build a Lightning Web Component (LWC) for a homepage that shows custom alerts.
Use Login Flows to add a screen that shows personalized alerts.
Customize the registration handler Apex class to create a routing logic navigating to different home pages based on the user profile.
Create custom metadata that stores user alerts and use a LWC to display alerts.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Page 1 of 6

Build confidence for exam day with expert-reviewed questions and realistic practice. Your next certification starts here.

Company

About Contact Our Authors FAQ

Trust and policies

Methodology Editorial policy Terms and conditions Privacy policy

Contact

ExamPrepare LLC5203 Juan Tabo Blvd STE 2BAlbuquerque, NM 87111[email protected]

© 2026 ExamPrepare LLC. All rights reserved. All certification names, exam codes and logos are the property of their respective owners. All associated trademark and copyright rights belong to those owners. ExamPrepare is not affiliated with, endorsed by, or sponsored by any certification vendor.