Salesforce Salesforce Certifications SHARING-AND-VISIBILITY-ARCHITECT Questions & Answers

• Question 111:

  Which three advanced tools can Salesforce enable for large-scale role hierarchy realignments in organizations with large data volumes? Choose 3 answers.

  A. Partitioning by Divisions

  B. Granular Locking

  C. Parallel Sharing Rule Recalculation

  D. Deferred Sharing Calculation

  E. Skinny Table Indexing

  Correct Answer: ADE

• Question 112:

  Universal Containers has a strict security model enforced through object, field, and row- based security mechanisms. The Architect would like to ensure the security model is being thoroughly tested using Apex automated tests. Which three considerations should be made when using the runAs() method to design Apex until tests?

  A. runAs() does not enforce user permissions or field-level permissions in test classes

  B. runAs() can be used inside of test classes to validate record-level security

  C. runAs() can be used inside of test classes to validate field-level permissions

  D. runAs() can be used outside of test classes to bypass record-level security

  E. runAs () counts towards total DML statements issued within transaction

  Correct Answer: ABE

• Question 113:

  Universal Health is planning to store patient notes in Salesforce. Patient notes consist of long text notes taken by a use to document phone calls with a patient.

  A date audit has identified that these notes can contain Personally Identifiable Information (PII) and Personal

  Health Information (PHI). The regulatory requirements state that this data must be encrypted at rest as well as in transit.

  What should the Architect do in order to make sure Universal Health stays compliant?

  A. No action is required; all Salesforce data is encrypted at rest as part of Salesforce's standard trust measures.

  B. Enable Salesforce Shield Platform Data Encryption and mark the patient notes field as encrypted.

  C. Create a new Custom Field of type "Text (Encrypted)" and move the patient notes data into the new field.

  D. Use an Apex trigger and the Apex Crypto class to encrypt patient notes as soon as they are saved to Salesforce.

  Correct Answer: B

• Question 114:

  To grant Universal Containers sales managers access to shipment records properly it was necessarily to the IT Team is worried about improper access to records. Which two features and best practices should a Salesforce architect recommended to mitigate the risk?

  A. Use is Shareable keyword in Apex classes to assure record visibility will be followed

  B. Use run As system method in test classes to test using different users and profiles.

  C. Use With Sharing keyword in Apex classes to assure record visibility will be followed

  D. User is Access able keyword Apex classes to assure record visibility will be followed.

  Correct Answer: CD

• Question 115:

  Besides their own team accounts, sales managers at Universal Containers need to have READ access to all accounts of the same segment in other countries. Role hierarchy was implemented accordingly (based on countries), but a sales manager in the US is complaining that he cannot view account records of the same segment in Canada.

  What should be done to grant access in a proper way?

  A. Create an owner-based sharing rule to grant access to account records that have the same segment to all sales manager roles.

  B. Change the role hierarchy and put all of the sales managers in the US and Canada in the same role.

  C. Create criteria-based sharing rules to grant access to account records that have the same segment to all sales manager roles.

  D. Create a public group and include all accounts of the same segment and grant access through a permission set.

  Correct Answer: A

  A. Owner-Based Sharing RulesAn owner-based sharing rule opens access to records owned by certain users. For example, acompany's sales managers need to see opportunities owned by sales managers in a differentregion. The U.S. sales manager could give the APAC sales manager access to the opportunitiesowned by the U.S. team using owner-based sharing.

  https://help.salesforce.com/articleView?id=security_sharing_rule_types.htmandtype=

• Question 116:

  Universal Containers maintains Job information in a Custom Object that contains sensitive information. The only users who should be able to view and edit Job records are the user who owns the record and all users in the Delivery profile. Which three platform sharing tools are required to support the above requirements?

  Choose 3 answers.

  A. Grant access Using Hierarchy sharing setting on the Job Object set to false.

  B. "Modify All" permission for Job Object on the Delivery Profile.

  C. Criteria-Based sharing rule for the Delivery Profile on the Job Object.

  D. Organization-Wide Default sharing setting of Private on the Job Object.

  E. "View All Data" profile permission on the Delivery Profile.

  Correct Answer: ABD

• Question 117:

  A developer at Universal Container is building an integration within a managed package for their internal org that requires login to an external system. The end point requires basic authentication. The Architect would like to ensure that the username and password are managed securely. Which three options should the Architect recommend to secure the credentials?

  A. Store the credentials in a custom object using encrypted fields

  B. Store the credentials in named credentials that are used in the apex callout

  C. Store the credentials in the apex code, which will not be available to non-admins

  D. Store the credentials in protected custom metadata that are used in the apex callout

  E. Store the credentials in protected custom settings that are used in the apex callout

  Correct Answer: BDE

• Question 118:

  If you want to create some logic that will share certain records in APEX code, you just have to create special records that will open access to the desired records. The aim is to create records of certain type, for example , all share objects for custom objects are named as

  A. MyCustomObject__Share

  B. PlaceHolder

  Correct Answer: A

• Question 119:

  Which two access grants are stored in the Group Maintenance tables? Choose 2 answers

  A. Inherited access grants

  B. Explicit grants

  C. Group Membership grants

  D. Implicit grants

  Correct Answer: AC

• Question 120:

  Which two are potential vulnerabilities in the following code snippet?

  public class SOQLController { public String name { get { return name;} set {name=value;} } public PageReference query() { String qryString='SELECT Id FROM Contact WHERE '+ '(IsDeleted = false and Name like \'%' + name + '%\'}'; queryResult = Database.query(qryString); retunr null; } } Choose 2 answers

  A. FLS check

  B. SOQL Injection

  C. Data Access Control

  D. Arbitrary Redirects

  Correct Answer: BC