Salesforce SECURITY-AND-PRIVACY-ACCREDITED-PROFESSIONAL Online Practice Questions and Exam Preparation

Salesforce SECURITY-AND-PRIVACY-ACCREDITED-PROFESSIONAL Online Questions & Answers

• Question 31:

  Within Data Mask a user wants to stop a configuration that is currently running. What dropdown option needs to be selected to terminate the execution?

  A. END
  B. STOP
  C. CANcEL
  D. ABORT
  B. STOP

  ---

  Explanation/Reference:

• Question 32:

  What are three tactics for ensuring the success of an MFA implementation?

  A. Train users on how to bypass MFA if they forget or lose their verification methods
  B. Defer MFA logins for new hires until they're comfortable working in Salesforce
  C. Watch for recurring login problems and changes to how many users are logging in Collect and evaluate user feedback
  D. Have a clear and easy access recovery process for users who forget or lose their verification method
  A. Train users on how to bypass MFA if they forget or lose their verification methods
  C. Watch for recurring login problems and changes to how many users are logging in Collect and evaluate user feedback
  D. Have a clear and easy access recovery process for users who forget or lose their verification method

• Question 33:

  Identify users who don't need MFA18. If the client wants to record the set up changes users are making to fields for a three years, how would the client achieve this with the standard product?

  A. Buy Shield as this provides features that can do this
  B. The Setup Audit Trail is good for 180 days so, use this together with a process of exporting the changes out of Salesforce to another system
  C. The Setup Audit Trail is good for 5 years so can be used to record this as standard.
  D. Leverage Platform Encryption and enable the archive feature
  B. The Setup Audit Trail is good for 180 days so, use this together with a process of exporting the changes out of Salesforce to another system

• Question 34:

  Can a customer run a penetration test against Salesforce?

  A. Some types of penetration testing are permitted, but not in production
  B. No, this is not permitted under any circumstances
  C. Penetration testing is allowed, but the Salesforce Agreement needs to be signed before testing can comment
  D. Penetration testing can be carried out at anytime by anyone
  C. Penetration testing is allowed, but the Salesforce Agreement needs to be signed before testing can comment

  ---

  Explanation/Reference:

• Question 35:

  Which option does not require My Domain?

  A. Password policies
  B. OpenID Connect into a Salesforce org
  C. SAML SSO into a Salesforce org
  D. The ability to brand the login page
  A. Password policies

• Question 36:

  When is it necessary to set an object configuration to "Run in Serial Mode"?

  A. To mask objects that have multiple records with master detail or lookup relationships to the same record
  B. For each custom object that is part of the configuration
  C. Each time a configuration needs to be run more than one time
  D. When a user needs to replace sensitive data with a random number
  A. To mask objects that have multiple records with master detail or lookup relationships to the same record

• Question 37:

  Which Customer 360 Privacy Center capability is used to control how long data is stored in Salesforce?

  A. Date Archiving
  B. DeteRetention
  C. Date Subject Rights
  D. Data Privacy Law Compliance
  B. DeteRetention

• Question 38:

  A customer prefers to generate an encryption key for Salesforce to use. They prefer to generate it manually, once a year.

  What key management capability should the admin advise them to use?

  A. Export the tenant secret
  B. Implement a custom Apex key generation class
  C. Bring your own key, plus opt-out of key derivation
  D. Upload your own tenant secret
  A. Export the tenant secret

• Question 39:

  If a user is to have access to an object, but limit their access to individual fields in that object, how would a consultant address this?

  A. Use field level security or field permissions
  B. Use object level security or object permissions
  C. Use Apex managed sharing
  D. Use record level security settings
  A. Use field level security or field permissions

• Question 40:

  For products built on the Salesforce Platform, which three tools can admins use to monitor MFA usage patterns?

  A. Identity Verification Methods report
  B. Login History page in Setup
  C. Multi-Factor Authentication Dashboard App
  D. Multi-Factor Authentication Assistant
  E. Custom list view of Users in Setup
  A. Identity Verification Methods report
  C. Multi-Factor Authentication Dashboard App
  E. Custom list view of Users in Setup