Salesforce Salesforce Certifications SECURITY-AND-PRIVACY-ACCREDITED-PROFESSIONAL Questions & Answers

• Question 41:

  What are three tactics for ensuring the success of an MFA implementation?

  A. Train users on how to bypass MFA if they forget or lose their verification methods

  B. Defer MFA logins for new hires until they're comfortable working in Salesforce

  C. Watch for recurring login problems and changes to how many users are logging in Collect and evaluate user feedback

  D. Have a clear and easy access recovery process for users who forget or lose their verification method

  Correct Answer: ACD

• Question 42:

  When will a user select the "Unique' check box next to a field as part of their Data Mask configuration?

  A. If a user wants to mask with data generated using a defined pattern.

  B. When a user wants to prevent unintended reuse of library words or random characters

  C. Whenever a user needs to delete sensitive data entirely, leaving an empty data set

  D. When a user needs to specify a minimum and maximum value for the field.

  Correct Answer: B

• Question 43:

  What are two differences between MFA and Device Activation?

  A. Users can opt out of receiving Device Activation challenges, but can't opt out of MFA challenges

  B. MFA challenges users on every login; Device Activation challenges users only when they log in from a new device

  C. Device Activation allows SMS as a verification method while MFA does not

  D. MFA is enabled for all users by default, admins must enable Device Activation

  Correct Answer: B

• Question 44:

  What consideration should be made when connecting Salesforce orgs hosted in different data centers?

  A. Data Residency

  B. Fallover

  C. IP restrictions

  D. Scalability

  Correct Answer: C

• Question 45:

  What do Right to be Forgotten policies automate?

  A. How to compile and send PII to customers.

  B. How PII is anonymized

  C. How and when PII is deleted.

  D. How PII is stored and archived

  Correct Answer: C

• Question 46:

  Can a customer run a penetration test against Salesforce?

  A. Some types of penetration testing are permitted, but not in production

  B. No, this is not permitted under any circumstances

  C. Penetration testing is allowed, but the Salesforce Agreement needs to be signed before testing can comment

  D. Penetration testing can be carried out at anytime by anyone

  Correct Answer: C

• Question 47:

  Which three options can be controlled through password policies in Salesforce?

  A. Password expiration

  B. Password complexity

  C. Password length

  D. Password with special characters

  E. Disallowed passwords

  Correct Answer: ABC

• Question 48:

  Which of the following is a blocker to rolling out MFA?

  A. Licensing for Transaction Security Policies

  B. Users refusing to install applications on their personal phones

  C. Shared accounts or credentials

  D. Licensing for Login Flows

  Correct Answer: C

• Question 49:

  Which Customer 360 Privacy Center capability is used to control how long data is stored in Salesforce?

  A. Date Archiving

  B. DeteRetention

  C. Date Subject Rights

  D. Data Privacy Law Compliance

  Correct Answer: B

• Question 50:

  Which filter operator is supported by Deterministic Encryption?

  A. contains

  B. like

  C. equals

  D. starts with

  Correct Answer: C