Salesforce SHARING-AND-VISIBILITY-DESIGNER Online Practice Questions and Exam Preparation

Salesforce SHARING-AND-VISIBILITY-DESIGNER Online Questions & Answers

• Question 11:

  Universal Containers (UC) implemented Sales Cloud and requested that only certain branch staff trained to sell high risk products can create opportunities for high risk products. In which two ways can an Architect allow only specific branch staff to sell high risk products? Choose 2 answers

  A. Set Price Book Organization Wide Default to View Only and share the price book (High Risk) with the trained staff.
  B. Configure Price book Organization wide default to No Access.
  C. Share (High Risk) price book with the trained staff via manual sharing.
  D. Share (High Risk) price book with the trained staff via sharing rule.
  A. Set Price Book Organization Wide Default to View Only and share the price book (High Risk) with the trained staff.
  C. Share (High Risk) price book with the trained staff via manual sharing.

• Question 12:

  Which two are potential security vulnerabilities in the following code snippet?

  Public class SOQLController {

  Public String name{

  Get {return name;}

  Set {name=value;}

  }

  Public PageReference query() {

  String qryString= 'SELECT Id FROM Contact WHERE' +

  '(IsDeleted = false and Name like \'#' + name + '#\')';

  queryResult = Database.query{qryString};

  return null;

  }

  }

  Choose 2 answers.

  A. Cross-Site Scripting
  B. Arbitrary Redirects
  C. SOQL Injection
  D. Bypassing Field and Object Security
  C. SOQL Injection
  D. Bypassing Field and Object Security

• Question 13:

  Universal Containers has a private sharing model on Accounts. Apex Managed Sharing is required to share certain account records with all users who are assigned to a specific Role in the Role Hierarchy. What should be the recommended way for the Architect to implement this?

  A. Create an AccountShare record associated to a public group containing the Users in the Role.
  B. Create an AccountShare record associated to each user who is assigned to the Role.
  C. Create an AccountShare record associated to the required Role.
  D. Create an AccountShare record associated to a public group containing the Role.
  A. Create an AccountShare record associated to a public group containing the Users in the Role.

• Question 14:

  Universal Containers (UC) has a requirement to expose a web service to their business partners. The web service will be used to allow each business partner to query UC's Salesforce instance to retrieve the status of orders. The business partner should only be allowed access to orders for which the business partner is the fulfillment vendor. The Architect does not want the business partners to utilize the standard APIs and would prefer a custom API be developed. Which three design elements should the Architect consider in order to ensure the data security of the solution?

  Choose 3 answers

  A. Query the Orders object with Dynamic SOQL based upon the fulfillment ID.
  B. Set the Orders object's sharing settings to Private in the Org-Wide Defaults
  C. Provide each partner with their own Salesforce login set to API Enabled on the profile.
  D. Develop a custom Apex web service with a fulfillment ID input attribute
  E. Develop a custom Apex web service using the "With Sharing" keyword.
  A. Query the Orders object with Dynamic SOQL based upon the fulfillment ID.
  B. Set the Orders object's sharing settings to Private in the Org-Wide Defaults
  E. Develop a custom Apex web service using the "With Sharing" keyword.

• Question 15:

  Universal Containers (UC) has implemented Service Cloud. There is a flag field on the case object that marks a case as (Sensitive). UC requested that this flag can be viewed by all users who have access to the case but only be edited by the assigned case assessor. The case assessor is a lookup field on the case object. How can an architect achieve this requirement?

  A. Permission Set.
  B. Object Permissions.
  C. Custom Lightning Component.
  D. Field-level security
  C. Custom Lightning Component.

• Question 16:

  Ursa Major Solar is writing test methods.

  Which functionality does the system method "runAs()" verify?

  A. Enforcement of a user's field-level security
  B. Enforcement of a user's record sharing
  C. Enforcement of a user's public group assignments
  D. Enforcement of user's permissions
  B. Enforcement of a user's record sharing

• Question 17:

  Universal Containers created a custom object called Defect and would like to enable the Sharing button on the Defect page layout to share the records manually to other users in the organization. In which scenario will the Sharing button appear?

  A. The Sharing model is either Private or Public Read only.
  B. The Sharing button always appears.
  C. The Sharing model is Public Read/Write.
  D. The Sharing model is Public Read/Write/Transfer.
  A. The Sharing model is either Private or Public Read only.

• Question 18:

  Universal Containers has a strict security model enforced through object, field, and row-based security mechanisms. The Architect would like to ensure the security model is being thoroughly tested using Apex automated tests. Which three considerations should be made when using the runAs() method to design Apex until tests?

  A. runAs() does not enforce user permissions or field-level permissions in test classes
  B. runAs() can be used inside of test classes to validate record-level security
  C. runAs() can be used inside of test classes to validate field-level permissions
  D. runAs() can be used outside of test classes to bypass record-level security
  E. runAs () counts towards total DML statements issued within transaction
  A. runAs() does not enforce user permissions or field-level permissions in test classes
  B. runAs() can be used inside of test classes to validate record-level security
  E. runAs () counts towards total DML statements issued within transaction

• Question 19:

  By default, how many roles are created when the first external user is created on a partner account?

  B. 3
  C. 2
  D. 1
  B. 3

• Question 20:

  Which two options provide implicit record access to users? Choose 2 answers

  A. Read-only access to parent account for a user, based on a criteria-based sharing rule.
  B. Read-only access to parent account for a user with access to a child case.
  C. Access to Child opportunities for the owner of the parent account.
  D. Access to related leads for the owner of the parent campaign.
  B. Read-only access to parent account for a user with access to a child case.
  C. Access to Child opportunities for the owner of the parent account.