Salesforce Salesforce Certifications SHARING-AND-VISIBILITY-ARCHITECT Questions & Answers

• Question 101:

  An architect from a previous project implemented Platform Shield Encryption for a company.

  However, based on a recent audit, the company's Privacy Team identified three additional fields in their Account Records (Billing Street, Billing City and Phone) that needs to be secure end protected.

  How should an architect proceed with this new policy change?

  A. Use Encryption Policy and contact Salesforce to update the existing records so that their field values are encrypted.

  B. Use Classic Encryption to ensure all fields are protected and contact Salesforce for help with encryption verification,

  C. Use Encryption Policy and wait for an email from Salesforce indicating the field values are encrypted.

  Correct Answer: A

• Question 102:

  Universal Containers has a customer that meets criteria for two Enterprise territory Management territories (Portugal and Southern Europe).

  What is necessary to assign opportunities to a territory for this account?

  A. Create a criteria-based sharing rule on the Opportunity to assign It to a territory.

  B. Create a Process Builder Process that updates the Territory field on the Opportunity

  C. The territory with the highest Territory Type Priority is automatically assigned to the Opportunity

  D. Create an Apex class that implement. Filter-Based Opportunity Territory Assignment

  Correct Answer: C

• Question 103:

  Universal Containers (UC) service reps are assigned to a profile which has "View All" in Case object (Private OWD). To make sure service reps have access to all relevant information to attend to customer requests, which two details should a

  salesforce Architects consider?

  Choose 2 answers:

  A. Service reps will be able to access all UC contact records if they are controlled by parent.

  B. Service reps will not be able to access all UC contact records if they are controlled by parent.

  C. Service reps will be able to access all the UC Account records due to Implicit Sharing.

  D. Service reps will not be able to access all the UC Accounts records because Account OWD is private.

  Correct Answer: BD

  How can an architect achieve this https://developer.salesforce.com/docs/atlas.en-us.apexcode.meta/apexcode/apex_classes_perms_enforcing.htm Example: To check the field-level read permission of the contact's email field before querying

  for this field:

  if (Schema.sObjectType.Contact.fields.Email.isAccessible()) { Contact c = [SELECT Email FROM Contact WHERE Id= :Id]; }

  Answer for B https://developer.salesforce.com/docs/atlas.en-us.apexcode.meta/apexcode/apex_classes_keywords_sharing.htm The "with sharing" keyword allows you to specify that the sharing rules for the current user are considered for the class. You have to explicitly set this keyword for the class because Apex code runs in system context. In system context, Apex code has access to all objects and fields-- object permissions, field-level security, sharing rules aren't applied for the current user. This strategy ensures that code doesn't fail to run because of hidden fields or objects for a user.

• Question 104:

  Universal Containers has Controlled by Parent sharing settings on the Contact object and Public Read Only sharing settings on Account, Opportunity, and Case objects. Which two options can the user see while adding Account team members to the Account?

  A. Case Access

  B. Opportunity Access

  C. Contact Access

  D. Activity Access

  Correct Answer: AB

• Question 105:

  The architect at Universal Containers would like to prevent users from editing encrypted fields. Assuming no customizations are implemented, which two options should the Architect choose to support the requirement? Choose 2 answers

  A. Validation Rules

  B. Page Layout settings

  C. Apex Triggers

  D. Workflow Rules

  Correct Answer: AB

• Question 106:

  A sales representative at Universal Containers needs assistance from specific product managers when selling certain deals. Product managers do not have access to opportunities they don't own, as the sharing model is Private, but need to gain access when they are assisting with a specific deal. How can an Architect accomplish the requirement?

  A. Create a sharing rule to allow the product manager to access the opportunity.

  B. Enable opportunity teams and allow users to add the product manager.

  C. Enable account team and allow users to add the product manager.

  D. Use similar opportunities to share opportunities related to the product manager.

  Correct Answer: B

• Question 107:

  How should the Architect ensure that OBJECT-LEVEL SECURITY is enforce within a custom Visualforce application that was a standard Apex controller on the Lead object?

  A. Use the runAs() method to enforce user permissions in the Apex controller.

  B. Use the Schema.DescribeSObjectResultisAccessible() method in the Apex controller.

  C. Use the {!$ObjectType.lead.accessible} expression within the Visualforce page.

  D. Use the "With Sharing" keyword when defining the Visualforce page.

  Correct Answer: C

• Question 108:

  What is the security vulnerability in the following code snippet?

  Value of my Textfield is

  A. SOQL Injection

  B. Arbitrary Redirects

  C. Cross-Site Scripting

  D. Access Control

  Correct Answer: C

• Question 109:

  Universal Containers has a global 24x7 Salesforce.com implementation that supports Sales, Services, Order Management, and various other parts of their business. They have a nested territory hierarchy, 10,000 sales users, and 20,000 support agents. Territory changes happen daily. The demand for new applications and changes to the platform is high and they follow an agile development methodology and deliver new releases every two weeks on the platform.

  What Salesforce.com feature would help the system recover from a maintenance restart on Salesforce.com servers?

  A. Enable Granular Locking on the system.

  B. Enable Deferred Sharing Rule recalculation.

  C. Enable Parallel Sharing Rule recalculation.

  D. Enable Filter -Based Opportunity Territory Assignment.

  Correct Answer: B

• Question 110:

  Universal Containers has junction object called "Job Production Facility", with 2 master- detail relationships to the Job and Production Facility custom objects. Both master records have a private sharing model.

  What statement is true if a user's profile allows access (Create/Read) to the Job, but no access to the Production Facility Object?

  A. The user will be granted read access to the Production Facility record

  B. The user will see the junction object and the link to the Production Facility.

  C. The user will see the junction object but not the link to the Production Facility.

  D. The user will not be able to see the junction object records or the field values.

  Correct Answer: D