SP Service Provider Technology-Based 3 — Questions and Answers
Question 1: A service provider needs to implement single sign-on between a customer's Active Directory and their Salesforce org. Which protocol should they configure?
- OAuth 2.0 Client Credentials Flow
- SAML 2.0 with Salesforce as the Service Provider (Correct answer)
- OpenID Connect with a Named Credential
- SCIM 2.0 with Identity Provider provisioning
Correct answer: SAML 2.0 with Salesforce as the Service Provider
SAML 2.0 configured with Salesforce as the Service Provider and Active Directory (via ADFS) as the Identity Provider is the standard SSO pattern.
Question 2: When building a customer community portal using Experience Cloud, which license type provides the most cost-effective option for high-volume external users who only need to access one custom object?
- Salesforce Platform License
- External App License
- Customer Community Login License (Correct answer)
- Partner Community License
Correct answer: Customer Community Login License
Customer Community Login Licenses are billed per login rather than per user, making them cost-effective for high-volume portals with infrequent access per user.
Question 3: A partner is evaluating where to host custom business logic that must process large data volumes without governor limit constraints. What is the recommended approach?
- Execute the logic using Apex Batch with 200-record chunks
- Offload processing to Heroku using Salesforce Connect
- Use External Services to call a Heroku-hosted microservice (Correct answer)
- Run logic in a Salesforce Sandbox and sync results
Correct answer: Use External Services to call a Heroku-hosted microservice
External Services with Heroku-hosted microservices allows partners to offload heavy processing outside Salesforce governor limits while maintaining declarative integration.
Question 4: Which Salesforce feature enables partners to display data from an external database inside Salesforce without physically copying the data?
- Salesforce Data Import Wizard
- Salesforce Connect with External Objects (Correct answer)
- Apex Callouts with data caching
- Custom metadata types with remote data sync
Correct answer: Salesforce Connect with External Objects
Salesforce Connect with External Objects creates virtual Salesforce objects backed by external data sources via OData or custom adapters, without ETL.
Question 5: A managed package subscriber reports that a critical Apex class in the package is behaving incorrectly in their org. As the package developer, what is the correct remediation path?
- Push a patch version of the managed package to the subscriber org (Correct answer)
- Ask the subscriber to clone and modify the protected Apex class
- Recreate the class in an unmanaged package and override the managed one
- Have the subscriber raise a Salesforce Support case for hotfix deployment
Correct answer: Push a patch version of the managed package to the subscriber org
Patch versions of managed packages allow ISVs to push bug fixes to subscriber orgs without subscribers needing to manually install upgrades.
Question 6: A Salesforce partner wants to ensure their Lightning Web Component renders correctly in all Experience Cloud templates. What is the key configuration requirement?
- Add isExposed: true and define targets in the component's meta XML (Correct answer)
- Deploy the LWC to a Salesforce CDN endpoint before use in communities
- Register the LWC as a Visualforce component override for community pages
- Configure a Custom Metadata record to map LWC names to community template slots
Correct answer: Add isExposed: true and define targets in the component's meta XML
Setting isExposed: true and specifying community-compatible targets in the .js-meta.xml file makes an LWC available in Experience Builder.
Question 7: Which Salesforce security feature encrypts data at rest at the platform level, including files, fields, and search indexes, while maintaining functionality like search and workflows?
- Salesforce Shield Platform Encryption (Correct answer)
- AES-256 transport-layer encryption (TLS)
- Field-Level Security with restricted profiles
- Custom Apex encryption using the Crypto class
Correct answer: Salesforce Shield Platform Encryption
Salesforce Shield Platform Encryption encrypts data at rest using tenant-specific keys while preserving platform functionality like SOQL and workflow evaluation.
SP Service Provider Technology-Based 3
A service provider needs to implement single sign-on between a customer's Active Directory and their Salesforce org.
Which protocol should they configure?