Salesforce PDI Online Practice Questions and Exam Preparation

Salesforce PDI Online Questions & Answers

• Question 11:

  Assuming that name is a String obtained by an tag on a Visualforce page, which two SOQL queries performed are safe from SOQL injection? Choose 2 answers

  A. String query = '%' + name + '%';List results = [SELECT Id FROM Account WHERE Name LIKE :query];
  B. String query = 'SELECT Id FROM Account WHERE Name LIKE \'%' + name.noQuotes() + '%\'';List results = Database.query(query);
  C. String query = 'SELECT Id FROM Account WHERE Name LIKE \'%' + String.escapeSingleQuotes(name) + '%\'';List results = Database.query(query);
  D. String query = 'SELECT Id FROM Account WHERE Name LIKE \'%' + name + '%\'';List results = Database.query(query);
  A. String query = '%' + name + '%';List results = [SELECT Id FROM Account WHERE Name LIKE :query];
  C. String query = 'SELECT Id FROM Account WHERE Name LIKE \'%' + String.escapeSingleQuotes(name) + '%\'';List results = Database.query(query);

  ---

  Explanation

  Option A is safe because it uses bind variables in static SOQL, which prevents SOQL injection by design.

  Option C is safe because String.escapeSingleQuotes sanitizes user input before it is concatenated into a dynamic SOQL query.

  Option B is unsafe because noQuotes() does not provide proper SOQL injection protection.

  Option D is unsafe because it directly concatenates untrusted user input into a dynamic SOQL string.

• Question 12:

  A developer needs to confirm that a Contact trigger works correctly without changing the organization's data.

  What should the developer do to test the Contact trigger?

  A. Use Deploy from the VSCode IDE co deploy an 'insert Contact' Apex class.
  B. Use the New button on the Salesforce Contacts Tab to create a new Contact record.
  C. Use the Test menu on the Developer Console to run oil test classes for the Contact trigger.
  D. Use the Open Execute Anonymous feature on the Developer Console to run an "insert Contact' DML statement.
  C. Use the Test menu on the Developer Console to run oil test classes for the Contact trigger.

  ---

  Explanation

  The Test menu in the Developer Console allows the developer to run specific or all test classes, ensuring that the trigger works correctly without affecting production data. Test methods in Salesforce run in an isolated environment and do not modify the actual data.

  Why not other options?

  A: Deploying code does not confirm that the trigger works correctly.

  B: Creating a new Contact directly modifies production data, which is not recommended.

  D: Executing a DML statement in Execute Anonymous directly affects production data and is not a safe testing method.

• Question 13:

  A developer is creating an app that contains multiple Lightning web components.

  One of the child components is used for navigation purposes. When a user clicks a button called Next in the child component, the parent component must be alerted so it can navigate to the next page.

  How should this be accomplished?

  A. Update a property on the parent.
  B. Call a method in the Apex controller.
  C. Fire a notification.
  D. Create a custom event.
  D. Create a custom event.

  ---

  Explanation

  To notify the parent component when the child component's Next button is clicked, the child component can dispatch a custom event. The parent component listens to this event and handles navigation accordingly.

• Question 14:

  A developer is asked to write helper methods that create test data for unit tests.

  

  What should be changed in the TestUtils class so that its methods are only usable by unit test methods?

  A. @isTest above line 03.
  B. Add @istest above line 01.
  C. Change public to private on line 01.
  D. Remove static from line 03.
  B. Add @istest above line 01.

  ---

  Explanation

  To ensure that the TestUtils class and its methods are only accessible by unit test methods, the class must be annotated with the @isTest annotation. This annotation limits the scope of the class and its methods to test contexts only.

  Why @isTest?

  Purpose of @isTest:

  The @isTest annotation marks a class or method for use exclusively within test scenarios. It prevents the methods from being accidentally invoked in production code.

  This ensures better test isolation and prevents misuse.

  Static Test Data Methods:

  Marking helper methods for test data creation as @isTest ensures they do not interfere with production code and are strictly for testing purposes.

  Analysis of Options:

  Option A: @isTest above line 03:

  Incorrect. Applying @isTest only to the createAccount method would work, but the other methods in the class would still be accessible. This does not satisfy the requirement of restricting the entire class.

  Option B: Add @isTest above line 01:

  Correct. Annotating the class ensures all methods within the class are accessible only in the context of tests.

  Option C: Change public to private on line 01:

  Incorrect. Changing the class to private would cause a compilation error, as top-level classes in Salesforce cannot be declared private.

  Option D: Remove static from line 03:

  Incorrect. Removing static does not affect the test scope of the class or its methods. Static methods can still be invoked, and this does not restrict access to test contexts.

  Correct Implementation:

  

  References:

  Apex Testing: Test Classes and Methods Trailhead Module on Apex Testing

• Question 15:

  Universal Containers wants a list button to display a Visualforce page that allows users to edit multiple records.

  Which Visualforce feature supports this requirement?

  A. Standard Controller with Custom List Controller extension
  B. Custom List Controller with recorasetvar page attribute
  C. Controller Extension and tag
  D. Standard controller and the recordsetvar page attribute
  D. Standard controller and the recordsetvar page attribute

  ---

  Explanation

  The recordSetVar attribute of the tag allows a Visualforce page to handle multiple records, which is ideal for list buttons that display a page for bulk editing.

  Why not other options?

  A: Standard controllers can be extended, but using recordSetVar is the direct and best-supported method for this scenario.

  B: There is no such concept as a "Custom List Controller" in Visualforce.

  C: is not a valid Visualforce tag.

  References: Visualforce Standard Controller with RecordSetVar

• Question 16:

  A developer is tasked to perform a security review of the ContactSearch Apex class that exists in the system. Within the class, the developer identifies the following method as a security threat:

  

  What are two ways the developer can update the method to prevent a SOQL injection attack? Choose 2 answers.

  A. Use variable binding and replace the dynamic query with a static SOQL.
  B. Use the sacapeSingleQuotes method to sanitize the parameter before its use.
  C. Use the Readonly annotation and the with sharing keyword on the class.
  D. Use a regular expression on the parameter to remove special characters.
  A. Use variable binding and replace the dynamic query with a static SOQL.
  B. Use the sacapeSingleQuotes method to sanitize the parameter before its use.

  ---

  Explanation

  Option A: Using variable binding eliminates the need for concatenating dynamic values in the query, which is the safest approach.

  Option B: Using String.escapeSingleQuotes ensures special characters are handled safely, reducing the risk of SOQL injection.

  Not Suitable:

  Option C: While with sharing ensures sharing rules are applied, it does not prevent SOQL injection.

  Option D: Regular expressions are not a reliable method for sanitizing input.

• Question 17:

  A developer wrote Apex code that calls out to an external system using REST API.

  How should a developer write the test to prove the code is working as intended?

  A. Write a class that implements HTTPcalloutMock.
  B. Write a class that extends webserviceloo.
  C. Write a class that implements webservicemock.
  D. Write a class that extends HTTPcalloutMock.
  A. Write a class that implements HTTPcalloutMock.

  ---

  Explanation

  To test Apex code that makes HTTP callouts, Salesforce provides the HTTPCalloutMock interface. Developers create a test class that implements HTTPCalloutMock to define the fake response that will be returned when the callout is executed during the test.

  This ensures that tests do not depend on the availability or behavior of the external system.

  Why not other options?

  B and C: These are not relevant for testing HTTP callouts.

  D: There is no concept of extending HTTPCalloutMock. It is implemented, not extended.

  References: Apex Testing for HTTP Callouts

• Question 18:

  A developer is designing a new application on the Salesforce platform and wants to ensure it can support multiple tenants effectively.

  Which design framework should the developer consider to ensure scalability and maintainability?

  A. Waterfall Model
  B. Flux (view, action, dispatcher, and store)
  C. Model-View-Controller (MVC)
  D. Agile Development
  C. Model-View-Controller (MVC)

  ---

  Explanation

  MVC: The Model-View-Controller design pattern is ideal for Salesforce development as it separates the business logic (model), user interface (view), and controller logic, ensuring scalability and maintainability.

  Salesforce's architecture inherently supports MVC, with sObjects as the model, Visualforce or Lightning components as the view, and Apex controllers as the controller.

  Why not other options?

  A: The Waterfall model is a development methodology, not a design framework.

  B: Flux is a front-end application architecture and not relevant to Salesforce.

  D: Agile is a development methodology, not a design framework.

  References:Salesforce MVC Architecture

• Question 19:

  A developer needs to allow users to create a record from a Lightning record page with some fields automatically populated. JavaScript buttons are no longer supported in Lightning Experience.

  Which feature should be used?

  A. Apex trigger
  B. Record-triggered Flow
  C. Quick Action
  D. Validation rule
  C. Quick Action

  ---

  Explanation

  Quick Actions are the modern replacement for JavaScript buttons in Lightning Experience. They allow developers and administrators to define actions that users can initiate from a record page, including creating or updating records with predefined field values. Quick Actions support prepopulation of fields, provide a consistent user experience across desktop and mobile, and do not require custom JavaScript. Triggers and flows can automate logic but are not designed for direct user-initiated record creation from the UI. Validation rules only enforce constraints and do not create or populate records.

• Question 20:

  The following code snippet is executed by a Lightning web component in an environment with more than 2,000 lead records:

  

  Which governor limit will likely be exceeded within the Apex transaction?

  A. Total number of SOOL quires issued
  B. Total number of DML statements issued
  C. Total number of records retrieved by SOQL queries
  D. Total number of records processed as a result of DML statements
  B. Total number of DML statements issued

  ---

  Explanation

  The provided code attempts to update all Lead records in an environment with more than 2,000 records. This will likely exceed the governor limit for the total number of records processed in DML statements, which is 10,000 per transaction. To avoid this, the developer can use Database.update with batching logic.