Prepare with Salesforce Plat-Arch-203 exam practice material, pass for sure

Northern Trail Outfitters (NTO) has a requirement to ensure all user logins include a single multi-factor authentication (MFA) prompt. Currently, users are allowed the choice to login with a username and password or via single sign-on against NTO's corporate Identity Provider, which includes built-in MFA.
Which configuration will meet this requirement?

• A. Enable "MFA for User Interface Logins" for your organization from Setup -> Identity Verification.
• B. Create and assign a permission set to all employees that includes "MFA for User Interface Logins."
• C. Create a custom login flow that enforces MFA and assign it to a permission set. Then assign the permission set to all employees.
• D. For all employee profiles, set the Session Level Required at Login to High Assurance and add the corporate identity provider to the High Assurance list for the org's Session Security Levels.

Universal containers (UC) has multiple salesforce orgs and would like to use a single identity provider to access all of their orgs. How should UC'S architect enable this behavior?

• A. Ensure that users have the same Federation ID value in their user records in all of UC's salesforce orgs.
• B. Ensure the same username is allowed in multiple orgs by contacting salesforce support.
• C. Ensure that users have the same alias value in their user records in all of UC's salesforce orgs.
• D. Ensure that users have the same email value in their user records in all of UC's salesforce orgs.

Universal Containers (UC) wants to build a mobile application that will be making calls to the Salesforce REST API. UC's Salesforce implementation relies heavily on custom objects and custom Apex code. UC does not want its users to have to enter credentials every time they use the app. Which two scope values should an Architect recommend to UC? Choose 2 answers.

• A. Api
• B. Refresh_token
• C. Full
• D. Custom_permissions

Refer to the exhibit.

Outfitters (NTO) is using Experience Cloud as an Identity for its application on Heroku. The application on Heroku should be able to handle two brands, Northern Trail Shoes and Northern Trail Shirts. A user should select either of the two brands in Heroku before logging into the community. The app then performs Authorization using OAuth2.0 with the Salesforce Experience Cloud site. NTO wants to make sure it renders login page images dynamically based on the user's brand preference selected in Heroku before Authorization. what should an identity architect do to fulfill the above requirements?

• A. Create multiple login screens using Experience Builder and use Login Flows at runtime to route to different login screens.
• B. Authorize third-party service by sending authorization requests to the community-url/services/oauth2/authonze/expid_value.
• C. Authorize third-party service by sending authorization requests to the community-url/services/oauth2/authorize/cookie_value.
• D. For each brand create different communities and redirect users to the appropriate community using a custom Login controller written in Apex.

Universal containers (UC) has an e-commerce website while customers can buy products, make payments, and manage their accounts. UC decides to build a customer Community on Salesforce and wants to allow the customers to access the community for their accounts without logging in again. UC decides to implement ansp-Initiated SSO using a SAML-BASED complaint IDP. In this scenario where salesforce is the service provider, which two activities must be performed in salesforce to make sp-Initiated SSO work? Choose 2 answers

• A. Configure Delegated Authentication
• B. Configure SAML SSO settings.
• C. Set up my domain
• D. Create a connected App