The CMO of an advertising company has invited an Identity and Access Management (IAM) specialist to discuss Salesforce out-of-box capabilities for configuring the company ' s login and registration experience on Salesforce Experience Cloud.
The CMO is looking to brand the login page with the company ' s logo, background color, login button color, and dynamic right-frame from an external URL.
Which two solutions should the IAM specialist recommend?
Choose 2 answers:

• A. Build custom pages for handling requirements as Experienced Cloud.
• B. Login & Registration pages can be branded in the Community Administration settings.
• C. Use Experience Builder to build branded Reset and Forget Password pages.
• D. Build custom site pages for reset and forget password features.

Which two things should be done to ensure end users can only use single sign-on (SSO) to login in to Salesforce?
Choose 2 answers

• A. Once SSO is enabled, users are only able to login using Salesforce credentials.
• B. Request Salesforce Support to enable delegated authentication.
• C. Enable My Domain and select " Prevent login from https://login.salesforce.com " .
• D. Assign user " Is Single Sign-On Enabled " permission via profile or permission set.

Northern Trail Outfitters (NTO) believes a specific user account may have been compromised. NTO inactivated the user account and needs to perform a forensic analysis and identify signals that could indicate a breach has occurred.
What should NTO's first step be in gathering signals that could indicate account compromise?

• A. download the identity provider Event log and contact the details of activities performed by the user.
• B. Review the User record and evaluate the login and transaction history.
• C. download the Setup Audit Trail and review all recent activities performed by the user.
• D. download the Login history and evaluate the details of topics performed by the user.

Users logging into Salesforce are frequently prompted to verify their identity.
The identity architect is required to provide recommendations so that frequency of prompt verification can be reduced.
What should the identity architect recommend to meet the requirement?

• A. Implement multi-factor authentication for the Salesforce org.
• B. Implement an single sign-on for Salesforce using an external identity provider.
• C. Set trusted IP ranges for the organization.
• D. Implement 2FA authentication for the Salesforce org.

A client is planning to rollout multi-factor authentication (MFA) to its internal employees and wants to understand which authentication and verification methods meet the Salesforce criteria for secure authentication.
Which three functions meet the Salesforce criteria for secure MFA?
Choose 3 answers

• A. Lightning Login
• B. Third-party single sign-on with Mobile Authenticator app
• C. Username & password = Email Verification Code
• D. Username and password = security key
• E. Username and password = SMS passwords