Salesforce Salesforce Certifications SECURITY-AND-PRIVACY-ACCREDITED-PROFESSIONAL Questions & Answers

• Question 51:

  What user permission is required to view Security Center pages and manage app configurations?

  A. Customize Application

  B. Manage Security Center

  C. View All Data

  D. Modify All Data

  Correct Answer: B

• Question 52:

  Which feature in Heroku allows an organization to generate a URL that can be used to download selected data in various formats?

  A. Heroku Kafka

  B. Heroku Postgres Dataclips

  C. Heroku Redis

  D. Heroku Connect

  Correct Answer: B

• Question 53:

  A customer needs to track field history for more than 20 fields per object? How should the consultant advise them to proceed?

  A. Purchase additional storage capacity to unlock additional field history tracking.

  B. Purchase the Field Audit Trail add-on feature.

  C. Purchase additional field history tracking capacity in blocks of 20 fields.

  D. Enable and save field history tracking settings on the 21st field to automatically add additional field history tracking capacity to the org.

  Correct Answer: B

• Question 54:

  What two things occur if Platform Encryption is later enabled on fields that are enabled for Field Audit Trail?

  A. Customers must run encryption sync again to encrypt the previously stored data for these fields

  B. All data for these fields will be automatically encrypted

  C. Data that was stored prior to encryption enablement can be encrypted via a support case

  D. Only new data in these fields will be encrypted

  Correct Answer: A

• Question 55:

  What is the correct order of precedence of strong verification methods for MFA logins?

  A. Salesforce Authenticator, Third-party TOTP authenticator apps, Security keys

  B. Security keys, Salesforce Authenticator, Third-party TOTP authenticator apps

  C. Third-party TOTP authenticator apps, Security keys, Salesforce Authenticator

  D. Salesforce Authenticator, Security keys, Third-party TOTP authenticator apps

  Correct Answer: A

• Question 56:

  Which activity is not recommended for internal support teams after MFA is enabled?

  A. Adjusting policies that enable or disable MFA for Salesforce users

  B. Helping users recover access if they've lost or forgotten their verification methods

  C. Maintaining a supply of replacement security keys

  D. Enabling MFA for new employees as part of the new hire onboarding process

  Correct Answer: A

• Question 57:

  Within Data Mask a user wants to stop a configuration that is currently running. What dropdown option needs to be selected to terminate the execution?

  A. END

  B. STOP

  C. CANcEL

  D. ABORT

  Correct Answer: B

• Question 58:

  Which three login types must have MFA enabled when the MFA requirement goes into effect on February 1, 2022?

  A. User interface logins

  B. API logins

  C. Delegated authentication logins

  D. Automated test account logins

  E. Federated SSO logins

  Correct Answer: ACE

• Question 59:

  You need to limit when and where from users can access Salesforce- to help reduce the risks of unauthorized access. How should you go about this?

  A. Restrict Access based on Login IP Addresses but login hairs can't be set up in conjunction with this feature

  B. Use MFA to help ensure users are using a more secure login process

  C. Restrict Access based on Login IP Addresses and use the Login Hours feature together

  D. Do not allow users to access Salesforce from outside the office.

  Correct Answer: B

• Question 60:

  What are three recommended change management activities to prepare users for MFA?

  A. Provide launch day support such as office hours or an onsite help desk

  B. Enable MFA for a test period to see what issues arise.

  C. Create onboarding materials on how to obtain, set up, and use verification methods to log in

  D. Communicate frequently about when MFA is coming and why it's important Send users a single announcement email, the day before MFA is enabled

  Correct Answer: CD