Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

Integration Architect > Translate needs to Integration Requirements (22%) > Flashcards

Translate needs to Integration Requirements (22%) Flashcards

1
Q

What is SSL or TLS?

A

Mutual authentication certificate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Better SSL or TLS?

A

TLS (Transport Layer Security) is more secure and is improved version from SSL.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are API client certificate types?

A

Self-signed, CA-signed, mutual authentication (SSL or TLS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the difference between one-way and two-way authentication?

A

Two-way is more secure because both the server and client perform validation by verifying each other’s identities. In one-way authentication, only client does that.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are 3 protocols for authorization & authentication?

A

SAML, OAuth 2.0, OpenID Connect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

SAML:
- what is
- what language based
- where used?

A

Security Assertion Markup Language (SAML) is an XML-based standard for exchanging authentication and authorization data used in single-sign on.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

OAuth 2.0

A

The Open Authorization (OAuth) 2.0 protocol is the industry standard for authorization to allow secure sharing of data between systems.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

OpenID Connect

A

Used in social sign-on that adds an authentication layer on top of OAuth 2.0 for the secure exchange of user information.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

To implement SSO, what standards are supported by Salesforce? (3)

A

SAML, Delegated Authentication, OpenID Connect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

To create a Connected App, what protocols should the external application support? (3)

A

SAML, OAuth, OpenID Connect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Can a Connected App be created to integration service providers when SF acts as the identity provider?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Can Salesforce run as an OAuth authorization server?

A

Yes, SF can authorize and authenticate connected apps, which can be dynamically created from an external system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

How can we manage Connected App’s access? (3)

A
  • By setting security policies
  • Defining which users have access by assigning profiles
  • A refresh token policy can be scheduled to automatically revoke a connected app’s access
  • etc
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are 3 roles in SSO flows?

A
  • User
  • Identity provider
  • Service provider
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is SAML Assertion?

A

A proof of the user’s identity provided by the identity provider. It is an XML document.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is Access Token?

A

It represents the user’s permission to access resources
(and so authenticates requests sent to designated API endpoints)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Can OAuth 2.0 acquire access token for a client application?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Can external applications see user’s password or credentials when using OAuth 2.0?

A

No, they are not revealed nor exposed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

In an OAUth 2.0 flow, what are 4 key roles involved?

A
  • Resource Server (hosts the protected resources)
  • Resource Owner (entity or end user who grants access to the protected resource)
  • Authorization Server (issues access tokens)
  • Client (application requesting resource access on behalf of the resource owner)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What are 4 types of tokens in OAuth 2.0?

A
  • Authorization Code
  • Access Token
  • Refresh Token
  • ID Token
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is authorization code?

A

Temporary code that will be exchanged for an access token

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is refresh token?

A

Token that is long-lived and used to acquire a new access token

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is ID Token?

A

Security token that contains information related to the end user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Access Token?

A

Token used by client to access protected resources in the resource server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Bearer Token?

A

An access token is used as a bearer token, meaning the entity who bears the token can access protected resources without further identification requirements

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Consumer Key?

A

The key used by consumer (client) such as an external application to authorize the Salesforce user and itself on the user’s behalf. Also referred as Client Id.

27
Q

Consumer Secret?

A

A secret, or confidential data, that is used to establish that the consumer holding the consumer secret owns the consumer key. Also referred as Client Secret.

28
Q

OAuth Endpoints

A

OAuth endpoints are the URLs that you use to make OAuth authorization requests to Salesforce

29
Q

What are the different OAuth flows? (9)

A
  1. Web Server
  2. User-Agent
  3. JWT Bearer
  4. Device
  5. SAML Bearer Assertion
  6. SAML Assertion
  7. Username-Password
  8. Client-Credentials
  9. Refresh Token
30
Q

Which OAuth flow to use to integrate external web applications?

A

Web Server

31
Q

Which OAuth flow to use to integration desktop/mobile applications?

A

User-agent

32
Q

Which OAuth flow to use for server-to-server integration?

A

JWT Bearer

33
Q

Which OAuth flow to use for IoT integration?

34
Q

Which OAuth flow to use to request an access token via SAML?

A

SAML Bearer Assertion

35
Q

Which OAuth flow to use as an alternative for services using SAML?

A

SAML Assertion

36
Q

Which OAuth flow to use when the external app stores the user’s credentials?

A

username-password

37
Q

Which OAuth flow uses a consumer key and consumer secret?

A

Client-Credentials

38
Q

Which OAuth flow is used to request a new access token?

A

Refresh Token

39
Q

Does SAML Assertion Flow requires Connected App?

A

No. It’s SAML Bearer Assertion flow that requires it.

40
Q

Which is recommended: client credentials OAuth 2.0 flow or username-password?

A

Client credentials - it is more secure.

41
Q

What OpenID Connect is used for?

A

To Identify details of the user associated with an access token. It’s an authentication layer on top of OAuth 2.0

42
Q

What is authentication?

A

The process that is used to verify that the user is actually who they say they are.

43
Q

What is authorization?

A

The process of providing or determining the permissions or actions that an authenticated user can do.

44
Q

Delegated Authentication?

A

Allows users to log in to SF using credentials that are verified by an external authentication provider

45
Q

Does Delegated Authentication requires users to log in to each app separately?

A

Yes, even though they use the same ID for multiple apps.

46
Q

Which integration pattern is the best for small volume, real-time activities?

A

Remote Process Invocation - Request & Reply

47
Q

What is a continuation?

A

An asynchronous callout, used to avoid hitting the synchronous Apex transaction governor limits. Although asynchronous, its implementation still falls under the request & reply pattern since a reply is expected through a callback.

48
Q

What’s the max time-out for Request & Reply?

A

120 seconds

49
Q

What’s the max platform event message size in fire & forget?

50
Q

Can you receive a positive acknowledgement of a successful hand-off to the remote system in Fire & Forget pattern?

51
Q

How many records should be processed to consider Bulk API 2.0?

A

More than 2000

52
Q

Which API does Change Data Capture use?

A

Streaming API
now pub/sub

53
Q

How to avoid data contention?

A

With data segmentation techniqeus (e.g. filter criteria)

54
Q

What’s the max file size for upload via Remote Call-In?

A

2 GB for the ContentVersion and 500MB for all other objects

55
Q

Which APIs can be used in remote call-in?

A

REST, SOAP or BULK API 2.0

56
Q

Can a remote call-in time-out?

A

Yes. Each SOQL query has a limit of 120sec

57
Q

How is System’s processing capacity called?

A

Throughput

58
Q

How is system’s responsiveness to requests and demands is called?

59
Q

What’s throughput optimization?

A

Number of concurrent requests, which translates to workload, that an application can complete in a given time.

60
Q

What contributes to the workload in the system? (3)

A
  1. Number of transactions
  2. Number of concurrent users
  3. Complexity of the requests
61
Q

What are some techniques to optimize throughput? (4)

A
  • Async process
  • Bulk process
  • Proper queries (SOSL and SOQL)
  • Platform cache
62
Q

What are some techniques to optimize latency? (4)

A
  • Optimize reports
  • Optimize filters
  • Simplify sharing
  • Optimize interface
63
Q

Which factors determines integration tool’s performance? (3)

A
  • Timing (sync vs async)
  • Volume
  • Ability to process multiple objects

Integration Architect (5 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions