Salesforce SECURITY-AND-PRIVACY-ACCREDITED-PROFESSIONAL Online Practice Questions and Exam Preparation

Salesforce SECURITY-AND-PRIVACY-ACCREDITED-PROFESSIONAL Online Questions & Answers

• Question 1:

  What kind of threats can be detected by Event Monitoring Threat Detection?

  A. Session Hijacking, Credential Stuffing, Report Anomaly
  B. Cross Site Scripting, Phishing
  C. Login outside of IP Range, Failed Password Attempt
  D. Multiple login attempts, SQL injection
  A. Session Hijacking, Credential Stuffing, Report Anomaly

• Question 2:

  Which two options are available for masking data outside of objects and fields?

  A. Update Contacts
  B. Anonymize Case Comments
  C. Query All Entries
  D. Delete All Emails
  B. Anonymize Case Comments
  D. Delete All Emails

• Question 3:

  Which method should an admin use to view the Security Center Metrics?

  A. Utilize the built-in dashboard and detail pages
  B. Use an analytics tool of your choosing
  C. Export to SEIM tool
  D. Make a call to the REST API
  A. Utilize the built-in dashboard and detail pages

• Question 4:

  When enabled for streaming, Real-Time Events are published where?

  A. To the EventMonitoring subscription channel
  B. To independent custom object streams
  C. To independent event subscription channels
  D. To independent Big Objects
  C. To independent event subscription channels

• Question 5:

  What is the type and length of the key used to encrypt data?

  A. AES-256
  B. AES-192
  C. 3DES
  D. RSA-4096
  A. AES-256

• Question 6:

  Which activity is not recommended for internal support teams after MFA is enabled?

  A. Adjusting policies that enable or disable MFA for Salesforce users
  B. Helping users recover access if they've lost or forgotten their verification methods
  C. Maintaining a supply of replacement security keys
  D. Enabling MFA for new employees as part of the new hire onboarding process
  A. Adjusting policies that enable or disable MFA for Salesforce users

• Question 7:

  How does SF control access to its APIs?

  A. OAuth Flows
  B. OAuth Everywhere
  C. Connected Apps
  D. Customer 360 API Connect
  C. Connected Apps

• Question 8:

  What are two differences between MFA and Device Activation?

  A. Users can opt out of receiving Device Activation challenges, but can't opt out of MFA challenges
  B. MFA challenges users on every login; Device Activation challenges users only when they log in from a new device
  C. Device Activation allows SMS as a verification method while MFA does not
  D. MFA is enabled for all users by default, admins must enable Device Activation
  B. MFA challenges users on every login; Device Activation challenges users only when they log in from a new device

• Question 9:

  How does a user schedule automated runs for a policy?

  A. Execute an APEX script in the Developer Console
  B. Set email notifications in Salesforce for when to run a Policy
  C. Scheduling of automated executions is not an included feature
  D. Under Run Frequency, indicate how often you want the policy to run.
  D. Under Run Frequency, indicate how often you want the policy to run.

• Question 10:

  What consideration should be made when connecting Salesforce orgs hosted in different data centers?

  A. Data Residency
  B. Fallover
  C. IP restrictions
  D. Scalability
  C. IP restrictions