Salesforce SHARING-AND-VISIBILITY-ARCHITECT Online Practice Questions and Exam Preparation

Salesforce SHARING-AND-VISIBILITY-ARCHITECT Online Questions & Answers

• Question 111:

  At Universal Containers, users should only see Accounts they or their subordinates own. All Accounts with the custom field "Kay Customer" should be visible to all Senior Account Managers. There is a custom field on the Account record that contains sensitive information and should be hidden from all users, except 3 designated users who require view and edit access. These three users come from different user groups, and will change occasionally. Which three platform security features are required to support these requirements with the minimum amount of effort?

  Choose 3 answers

  A. Criteria-Based Sharing Rules
  B. Owner-Based Sharing Rules
  C. Role Hierarchy
  D. Apex Managed Sharing
  E. Permission Sets
  A. Criteria-Based Sharing Rules
  C. Role Hierarchy
  E. Permission Sets

• Question 112:

  Universal Containers (UC) has a team that analyzes customer orders looking for fraud. This team needs access to Invoice records (Custom object, Private OWD). UC \as complex rules to control users' access. The Salesforce Architect recommended using Apex managed sharing to meet these requirements.

  Which two recommendations should a Salesforce Developer consider when implementing the changes? Choose 2 answers

  A. Use "With Sharing" keyword to make sure record visibility will always be considered.
  B. Use "Without Sharing" keyword to make sure record visibility will be considered.
  C. Use runAs system method to test different users accessing these records.
  D. Use "With Sharing" keyword to enforce field-level security.
  A. Use "With Sharing" keyword to make sure record visibility will always be considered.
  C. Use runAs system method to test different users accessing these records.

• Question 113:

  What vulnerability can exist when controllers use dynamic rather than static queries and bind variables?

  A. SOQL Injection.
  B. Buffer Overflow Attacks.
  C. Cross-site scripting.
  D. Record Access Override.
  A. SOQL Injection.

• Question 114:

  Sales reps at Universal Containers (UC) complain about the manual activities they need to perform in order to grant access to supporting internal users (legal, engineering, finance, and so forth) for customer records when they need help. In general, the sales reps involved in the deals will not change.

  How can a Salesforce architect help IK to Improve sales reps productivity?

  A. Create a permission set with "view all data" and assign to supporting users.
  B. Create a public group and replace the account ownership with it.
  C. Create a criteria-based sharing rule to grant access to other users.
  D. Leverage default Account team.
  C. Create a criteria-based sharing rule to grant access to other users.
  D. Leverage default Account team.

• Question 115:

  Universal Container (UC) is in a legal dispute regarding several orders. UC has found out these records VP of Sales has asked to ensure this cannot happen in the future.

  What approach would meet this requirement?

  A. Remove Order delete Permission from Profiles and Permission Sets
  B. Implement a Sharing Rule that changes access for order to Read.
  C. Remove the Delete button from the Order Page Layout.
  D. Change the Record Type/Page Layout assignment for orders to be Read Only.
  A. Remove Order delete Permission from Profiles and Permission Sets
  D. Change the Record Type/Page Layout assignment for orders to be Read Only.

• Question 116:

  Sales executives at Universal Containers (SC) want to create list views to filter opportunities for large at-risk Opportunities. These list views should only be available to certain executives that specialize in closing problematic deals.

  How can UC solve this requirement?

  A. Share the List Views with the appropriate Role in the Role Hierarchy.
  B. Share the List Views with the appropriate Public Group.
  C. Share the List Views with the appropriate individual users.
  D. Share the List Views with the appropriate Queue.
  B. Share the List Views with the appropriate Public Group.

• Question 117:

  For the Universal Containers Commercial and Consumer support departments, having access to Activities for Contacts with which they interact is important. Commercial support users should not see Consumer Accounts/Contacts and Consumer support users should not see Commercial Accounts/Contacts. Assuming the Organization-Wide Default for Activities is set to "Controlled by Parent" what is the minimum level of Sharing access a support user would need to Accounts/Contacts to view associated Activities?

  A. Private Account/Contact Sharing Default with a Sharing Rule for each department set to Public Read/Write access to Accounts/Contacts.
  B. Private Account/Contact Sharing Default with a Sharing Rule for each department set to Private access to Accounts/Contacts.
  C. The users need no access to Accounts/Contacts with the proper Activity Sharing Rules and Profile Permissions for the Accounts Tab.
  D. Private Account/Contact Sharing Default with a Sharing Rule for each department set to Public Read only access to Accounts/Contacts.
  D. Private Account/Contact Sharing Default with a Sharing Rule for each department set to Public Read only access to Accounts/Contacts.

• Question 118:

  Universal containers (UC) service reps are assigned to a profile which has ''View All'' in Case object..

  To make sure service reps have access to all relevant information to attend to customer requests, which Architect consider?

  Choose 2 answers

  A. Service reps will be able to access to Contact records if they are Controlled by Parent.
  B. Service reps will be able to access to Contact records due to Implicit Sharing.
  C. Service reps will NOT able to access to Contact records because Account OWD is private
  D. Service reps will NOT able to access to Contact records if they are controlled by Parent.
  A. Service reps will be able to access to Contact records if they are Controlled by Parent.

• Question 119:

  What is the security vulnerability in the following code snippet?

  Value of my Textfield is

  A. SOQL Injection
  B. Arbitrary Redirects
  C. Cross-Site Scripting
  D. Access Control
  C. Cross-Site Scripting

• Question 120:

  Universal Containers has junction object called "Job Production Facility", with 2 master- detail relationships to the Job and Production Facility custom objects. Both master records have a private sharing model.

  What statement is true if a user's profile allows access (Create/Read) to the Job, but no access to the Production Facility Object?

  A. The user will be granted read access to the Production Facility record
  B. The user will see the junction object and the link to the Production Facility.
  C. The user will see the junction object but not the link to the Production Facility.
  D. The user will not be able to see the junction object records or the field values.
  D. The user will not be able to see the junction object records or the field values.