Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

Integration Architect > Translate needs to Integration Requirements (22%) > Flashcards

Translate needs to Integration Requirements (22%) Flashcards

1
Q

What is SSL or TLS?

A

Mutual authentication certificate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Better SSL or TLS?

A

TLS (Transport Layer Security) is more secure and is improved version from SSL.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are API client certificate types?

A

Self-signed, CA-signed, mutual authentication (SSL or TLS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the difference between one-way and two-way authentication?

A

Two-way is more secure because both the server and client perform validation by verifying each other’s identities. In one-way authentication, only client does that.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are 3 protocols for authorization & authentication?

A

SAML, OAuth 2.0, OpenID Connect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

SAML:
- what is
- what language based
- where used?

A

Security Assertion Markup Language (SAML) is an XML-based standard for exchanging authentication and authorization data used in single-sign on.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

OAuth 2.0

A

The Open Authorization (OAuth) 2.0 protocol is the industry standard for authorization to allow secure sharing of data between systems.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

OpenID Connect

A

Used in social sign-on that adds an authentication layer on top of OAuth 2.0 for the secure exchange of user information.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

To implement SSO, what standards are supported by Salesforce? (3)

A

SAML, Delegated Authentication, OpenID Connect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

To create a Connected App, what protocols should the external application support? (3)

A

SAML, OAuth, OpenID Connect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Can a Connected App be created to integration service providers when SF acts as the identity provider?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Can Salesforce run as an OAuth authorization server?

A

Yes, SF can authorize and authenticate connected apps, which can be dynamically created from an external system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

How can we manage Connected App’s access? (3)

A
  • By setting security policies
  • Defining which users have access by assigning profiles
  • A refresh token policy can be scheduled to automatically revoke a connected app’s access
  • etc
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are 3 roles in SSO flows?

A
  • User
  • Identity provider
  • Service provider
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is SAML Assertion?

A

A proof of the user’s identity provided by the identity provider. It is an XML document.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is Access Token?

A

It represents the user’s permission to access resources
(and so authenticates requests sent to designated API endpoints)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Can OAuth 2.0 acquire access token for a client application?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Can external applications see user’s password or credentials when using OAuth 2.0?

A

No, they are not revealed nor exposed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

In an OAUth 2.0 flow, what are 4 key roles involved?

A
  • Resource Server (hosts the protected resources)
  • Resource Owner (entity or end user who grants access to the protected resource)
  • Authorization Server (issues access tokens)
  • Client (application requesting resource access on behalf of the resource owner)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What are 4 types of tokens in OAuth 2.0?

A
  • Authorization Code
  • Access Token
  • Refresh Token
  • ID Token
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is authorization code?

A

Temporary code that will be exchanged for an access token

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is refresh token?

A

Token that is long-lived and used to acquire a new access token

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is ID Token?

A

Security token that contains information related to the end user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Access Token?

A

Token used by client to access protected resources in the resource server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Bearer Token?
An access token is used as a bearer token, meaning the entity who bears the token can access protected resources without further identification requirements
26
Consumer Key?
The key used by consumer (client) such as an external application to authorize the Salesforce user and itself on the user's behalf. Also referred as Client Id.
27
Consumer Secret?
A secret, or confidential data, that is used to establish that the consumer holding the consumer secret owns the consumer key. Also referred as Client Secret.
28
OAuth Endpoints
OAuth endpoints are the URLs that you use to make OAuth authorization requests to Salesforce
29
What are the different OAuth flows? (9)
1. Web Server 2. User-Agent 3. JWT Bearer 4. Device 5. SAML Bearer Assertion 6. SAML Assertion 7. Username-Password 8. Client-Credentials 9. Refresh Token
30
Which OAuth flow to use to integrate external web applications?
Web Server
31
Which OAuth flow to use to integration desktop/mobile applications?
User-agent
32
Which OAuth flow to use for server-to-server integration?
JWT Bearer
33
Which OAuth flow to use for IoT integration?
Device
34
Which OAuth flow to use to request an access token via SAML?
SAML Bearer Assertion
35
Which OAuth flow to use as an alternative for services using SAML?
SAML Assertion
36
Which OAuth flow to use when the external app stores the user's credentials?
username-password
37
Which OAuth flow uses a consumer key and consumer secret?
Client-Credentials
38
Which OAuth flow is used to request a new access token?
Refresh Token
39
Does SAML Assertion Flow requires Connected App?
No. It's SAML Bearer Assertion flow that requires it.
40
Which is recommended: client credentials OAuth 2.0 flow or username-password?
Client credentials - it is more secure.
41
What OpenID Connect is used for?
To Identify details of the user associated with an access token. It's an authentication layer on top of OAuth 2.0
42
What is authentication?
The process that is used to verify that the user is actually who they say they are.
43
What is authorization?
The process of providing or determining the permissions or actions that an authenticated user can do.
44
Delegated Authentication?
Allows users to log in to SF using credentials that are verified by an external authentication provider
45
Does Delegated Authentication requires users to log in to each app separately?
Yes, even though they use the same ID for multiple apps.
46
Which integration pattern is the best for small volume, real-time activities?
Remote Process Invocation - Request & Reply
47
What is a continuation?
An asynchronous callout, used to avoid hitting the synchronous Apex transaction governor limits. Although asynchronous, its implementation still falls under the request & reply pattern since a reply is expected through a callback.
48
What's the max time-out for Request & Reply?
120 seconds
49
What's the max platform event message size in fire & forget?
1 MB
50
Can you receive a positive acknowledgement of a successful hand-off to the remote system in Fire & Forget pattern?
Yes
51
How many records should be processed to consider Bulk API 2.0?
More than 2000
52
Which API does Change Data Capture use?
Streaming API now pub/sub
53
How to avoid data contention?
With data segmentation techniqeus (e.g. filter criteria)
54
What's the max file size for upload via Remote Call-In?
2 GB for the ContentVersion and 500MB for all other objects
55
Which APIs can be used in remote call-in?
REST, SOAP or BULK API 2.0
56
Can a remote call-in time-out?
Yes. Each SOQL query has a limit of 120sec
57
How is System's processing capacity called?
Throughput
58
How is system's responsiveness to requests and demands is called?
Latency
59
What's throughput optimization?
Number of concurrent requests, which translates to workload, that an application can complete in a given time.
60
What contributes to the workload in the system? (3)
1. Number of transactions 2. Number of concurrent users 3. Complexity of the requests
61
What are some techniques to optimize throughput? (4)
- Async process - Bulk process - Proper queries (SOSL and SOQL) - Platform cache
62
What are some techniques to optimize latency? (4)
- Optimize reports - Optimize filters - Simplify sharing - Optimize interface
63
Which factors determines integration tool's performance? (3)
- Timing (sync vs async) - Volume - Ability to process multiple objects

Integration Architect (5 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions