Salesforce SHARING-AND-VISIBILITY-DESIGNER Online Practice Questions and Exam Preparation

Salesforce SHARING-AND-VISIBILITY-DESIGNER Online Questions & Answers

• Question 1:

  DreamHouse Realty has the following requirement:

  -

  A specific set of Account Management users should only see Accounts once the Account becomes a customer.

  -

  The Type field on the Account identifies whether the Account is a Customer, Partner, Prospect, or Other. Which two methods could the Architect use? (Choose two.)

  A. Create a Criteria-based Sharing rule that shares the Account to the Account Management Group when the Type is Customer.
  B. Create an Account Sharing Rule that shares all Account owned by Sales to be shared with Account Management roles and Subordinates.
  C. Create a Public List view, where Account of Type Customer are included and share the List view with the Account Management public group.
  D. Put a business process in place that calls for the Account Manager to be added to the Account Team once the Account becomes a customer.
  A. Create a Criteria-based Sharing rule that shares the Account to the Account Management Group when the Type is Customer.
  D. Put a business process in place that calls for the Account Manager to be added to the Account Team once the Account becomes a customer.

• Question 2:

  Cloud Kicks has multiple business partners that assist with product fulfillments, and requires a web service to be exposed to the business partners.

  Each business partner needs to be able to query Cloud Kicks' Salesforce instance to retrieve the status of orders. Additionally, each business partner should only be allowed access to orders for which the business partner is the fulfillment

  vendor.

  The Architect does NOT want the business partners to utilize the standard APIs and would prefer a custom API be developed.

  Which three design elements should the Architect consider in order to ensure the data security of the solution? (Choose three.)

  A. Create a custom Apex web service using the "With Sharing" keyword
  B. Give each partner their own Salesforce login set to API Enabled on the profile
  C. Create a custom Apex web service with a fulfillment ID input attribute
  D. Query the Orders object with Dynamic SOQL based upon the fulfillment ID
  E. Set the Orders object's sharing settings to Private in the Org-Wide Defaults
  A. Create a custom Apex web service using the "With Sharing" keyword
  C. Create a custom Apex web service with a fulfillment ID input attribute
  E. Set the Orders object's sharing settings to Private in the Org-Wide Defaults

• Question 3:

  Cloud Kicks has the following environment:

  -Two custom objects named Open Position and Candidate.

  - The Candidate object has a lookup relationship to Open Position.

  -Both objects are set to Private in sharing settings.

  -

  The Human Resources team will own all Open Position and Candidate records.

  Cloud Kicks requests that their Salesforce Architect automatically share the Candidate when the Interviewer (lookup to user record) has been populated. The interviewer can be from any department.

  What approach should the Architect use to accomplish this goal?

  A. Build Apex Managed Sharing code to share Candidate with the Interviewer user
  B. Build a workflow email notification to notify the interviewer of the record assignment
  C. Build a criteria-based sharing rule between the Candidate and the Interviewer
  D. Build a standard sharing rule between Candidate and the Interviewer
  C. Build a criteria-based sharing rule between the Candidate and the Interviewer

• Question 4:

  DreamHouse Realty partners with the healthcare sector to adapt housing for clients with specific health conditions. DreamHouse Realty wants to store client notes. These client notes are text data that may be long and often contain

  Personally Identifiable Information (PII) and Personal Health Information (PHI).

  This data must be encrypted at rest as well as in transit in order to comply with the Health Insurance Portability and Accountability Act (HIPA).

  Which action should the Architect perform to fulfill this requirement?

  A. Create a new Custom Field of type "Text (Encrypted)" and move the client notes data into the new field
  B. No action is required; all Salesforce data is encrypted at rest as part of Salesforce's standard trust measures
  C. Use an Apex trigger and the Apex Crypto class to encrypt client notes as soon as they are saved to Salesforce
  D. Enable Salesforce Shield Platform Data Encryption and mark the client notes field as encrypted
  D. Enable Salesforce Shield Platform Data Encryption and mark the client notes field as encrypted

• Question 5:

  Cloud Kicks is implementing a community and has the following requirements:

  -The Community will have High-Volume Community users.

  -

  Community users should be able to see records associated to their Account or Contact record.

  An Architect wants to use a Sharing Set to provide access to the records. However, when setting up the Sharing Set, certain objects are not available in the list of Available Objects.

  What are two explanations for why an object would be excluded from the list of Available Objects in a Sharing Set? (Choose two.)

  A. The object's Organization-Wide sharing setting is set to Private
  B. The custom object does NOT have a lookup to Accounts or Contacts
  C. The object's Organization-Wide sharing setting is set to Public Read/Write
  D. The object is a custom object, and therefore NOT available for a sharing set
  B. The custom object does NOT have a lookup to Accounts or Contacts
  C. The object's Organization-Wide sharing setting is set to Public Read/Write

• Question 6:

  The VP of Sales at Get Cloudy Consulting wants to give one sales member the ability to view other sales members' sales numbers as a point of comparison. If a Private model is being used, which two permissions are needed to create a dashboard for this purpose? (Choose two.)

  A. Manage Custom Report Types
  B. Customize Application
  C. Manage Dashboards
  D. View All Data
  C. Manage Dashboards
  D. View All Data

• Question 7:

  Get Cloudy Consulting needs to implement a solution for storing proprietary data in Salesforce. Users who own an Account should be restricted so that they see only the invoices that they or their subordinates own. Which two features should Get Cloudy Consulting consider while implementing this solution? (Choose two.)

  A. Deploy the Relationship between Accounts and the Invoices Object as Lookup
  B. Deploy the Relationship between Accounts and the Invoices Object as Master-Detail
  C. Ensure a Workflow is created that populates the Invoice sharing object upon Insert
  D. Verify that the Organization-Wide Default sharing for Invoices is set to Private
  B. Deploy the Relationship between Accounts and the Invoices Object as Master-Detail
  D. Verify that the Organization-Wide Default sharing for Invoices is set to Private

• Question 8:

  An Ursa Major Solar manager wants to store Payment Term Details, and has the following requirements:

  -Payment Term Details should be stored on the Account object.

  -

  Fields should only be visible on specific record types and for specific user profiles.

  A System Administrator needs to quickly determine which record types, user profiles, and page layouts include the specific fields.

  What should the System Administrator do to achieve this goal?

  A. Select the Field-Level Security for the field on each Profile
  B. Universally require the field at the field level
  C. Log in as each user profile and view the Account Page Layouts
  D. Utilize the Field Accessibility Viewer for the fields in question
  D. Utilize the Field Accessibility Viewer for the fields in question

• Question 9:

  Universal Containers has a custom Visualforce application that uses a standard Apex controller on the Lead object. What should the Architect do to ensure that object-level security is implemented within this application?

  A. Within the Visualforce page, use the {!$ObjectType.lead.accessible} expression
  B. When defining the Visualforce page, use the "With Sharing" keyword
  C. Within the Apex controller, use the Schema.DescribeSObjectResult isAccessible() method
  D. To enforce user permissions in the Apex controller, use the runAs() method
  A. Within the Visualforce page, use the {!$ObjectType.lead.accessible} expression

• Question 10:

  Review the following code snippet.

  

  Get Cloudy Consulting wants an Architect to assess this code snippet for potential security vulnerabilities. What is one appropriate response from the Architect?

  A. Access Control is the possible threat
  B. Cross-Site Scripting is the possible threat
  C. Arbitrary Redirects is the possible threat
  D. SOQL Injection is the possible threat
  A. Access Control is the possible threat