Salesforce Salesforce Certifications SHARING-AND-VISIBILITY-DESIGNER Questions & Answers

• Question 301:

  The Collections department at Universal Containers uses Salesforce to track its efforts. All Invoices and Invoice Line Items are stored in Salesforce. Invoice Line Item object details, such as Quantity and Extended Amount, should be summarized at the Invoice Object level, and all users who can see a given invoice should always see all invoice line items. Without leveraging Apex code, how should an Architect create the relationship between the Invoice object and the Invoice Line Item Object?

  A. The Invoice object should have a Master-Detail to the Invoice Line Item Object

  B. The Invoice Line Item Object should have a Lookup to the Invoice Object

  C. The Invoice Object should have an inner joint to the Invoice Line Item Object

  D. The Invoice Line Item Object should have a Master-Detail to the Invoice Object

  Correct Answer: D

• Question 302:

  Universal Containers has a custom object to maintain Job information with a private sharing model. The Delivery group is distributed through the Role Hierarchy based on geography. As the Delivery group often collaborates on Jobs, all users in the Delivery profile required View access to all Job records. In special case, the Delivery user who owns a job must be able to grant a Product Development user access to a Job record.Which two platform features can be used to support these requirements?

  Choose 2 answers

  A. Criteria-based Sharing Rules

  B. "View All" Profile settings

  C. Owner-based Sharing Rules

  D. Manual Sharing

  Correct Answer: BD

• Question 303:

  Which two are potential security vulnerabilities in the following code snippet?

  Public class SOQLController {

  Public String name{

  Get {return name;}

  Set {name=value;}

  }

  Public PageReference query() {

  String qryString= 'SELECT Id FROM Contact WHERE' +

  '(IsDeleted = false and Name like \'#' + name + '#\')';

  queryResult = Database.query{qryString};

  return null;

  } } Choose 2 answers.

  A. Cross-Site Scripting

  B. Arbitrary Redirects

  C. SOQL Injection

  D. Bypassing Field and Object Security

  Correct Answer: CD

• Question 304:

  Universal Containers has created a custom Sales Operations profile with read and edit access to the Category field on a custom object. There is a new requirement that 3 of the 100 users assigned to the Sales Operations Profile should have read-only access to the Category field.

  How can the Architect support this request?

  Choose one answer:

  A. Create a permission set in the Category field to read-only and assign it to the users.

  B. Create a new profile without edit access to Category and assign it to the users.

  C. Create a new page layout with the Category Field set to read-only for these users.

  D. Create a custom permission to grant read-only access to Category and assign it to the users.

  Correct Answer: B

• Question 305:

  The Architect notices that there are many duplicate Account records and numerous sharing rules created in Salesforce. What would be the reason?

  A. The Organization-Wide Default for the Account object is Private.

  B. The Organization-Wide Default for the Account object is Public Read/Write.

  C. The Organization-Wide Default for the Account object is Public Read-Only.

  D. The Object permissions for the Account object are Create, Read, and Edit.

  Correct Answer: A

• Question 306:

  In order to comply with regulatory requirements, Universal Health must encrypt all Personally Identifiable Information (PII), both while it is being transmitted over the network and while it is at rest. Universal Health has completed a data audit and has determined that 12 fields on the contact record can contain PII, including the contact name and several other standard fields. Universal Health would like the fields to remain accessible in Salesforce. Which two options does Universal Health have to maintain compliance?

  Choose 2 answers.

  A. Implement a custom Apex trigger to automatically encrypt the PII data using the Apex Crypto Class.

  B. Update the field type of each of the 12 fields to "Text (Encrypted)" so that they are encrypted at rest.

  C. Enable Salesforce Platform Encryption and select the 12 contact fields to be encrypted.

  D. Use an external, third party encryption service to encrypt PII before it enters Salesforce.

  Correct Answer: BC

• Question 307:

  Which three areas should the Architect review in order to increase performance of "Record Access" and "Sharing" calculations?

  Choose 3 answers.

  A. Custom Object data, to ensure that no Account has more than 10,000 Custom Objects that look up to it.

  B. Opportunity data, to ensure that no Account has more than 10,000 Opportunity records that are related to it.

  C. Record ownership, to ensure that no user owns more than 10,000 Object records in the system.

  D. Apex Managed Sharing triggers, to ensure that no trigger is querying more that 10,000 Object records.

  Correct Answer: ABC

• Question 308:

  Universal Containers has a set of Account Management users that should only see Accounts once the Account becomes a customer. The Type field on the Account identifies whether the Account is a Prospect, Customer, Partner or Other. Which two methods could an Architect use to enable this sharing requirement, assuming a private sharing model for Accounts?

  Choose 2 answers.

  A. Institute a process that calls for the Account Manager to be added to the Account Team once the Account becomes a customer.

  B. Create an Account Sharing Rule that shares all Accounts owned by Sales to be shared with Account Management roles and subordinates.

  C. Create a Public List View, where Accounts of Type Customer are included and share the List view with the Account Management public group.

  D. Create a Criteria-based Sharing rule that shares the Account to the Account Management Group when the Type is Customer.

  Correct Answer: AD

• Question 309:

  Universal Containers has a Private Sharing Model and restrictive data access settings in place. The data governance team is planning to deploy a master data management tool that will need write access to all system data, and the Architect hasbeen asked to prepare a Data Governance User Profile that has full access to all data regardless of Sharing and CRUD Settings. What is the optimal way to enable this requirement?

  A. Ensure the profile has the "Modify All Data permission enabled

  B. Create a Sharing Rule for required Objects, on an API Only profile

  C. Create an All Data Access app as a default for this Profile.

  D. Enable the "Edit Read -Only Fields" permission for this Profile.

  Correct Answer: A

• Question 310:

  Universal Containers would like to create a custom team solution that can be used on a custom Loan

  object.

  The following requirements must be met:

  The Loan custom object should be set to Private in the Org-Wide Defaults.

  Any user added to the Custom Team object should have Read Only access to the corresponding Loan

  record.

  If the Custom Team record is marked as "Primary" then the corresponding user should have Read/Edit

  access to the corresponding Loan record.

  Which two methods will allow the Architect to meet the requirements? Choose 2 answers.

  A. Create a custom trigger on the Custom Team object that inserts or updates records in the Loan_share object.

  B. Create a criteria-based sharing rule on the Loan object that will share the Loan record with the appropriate user in the Custom Team object.

  C. Create Apex Sharing Reasons on the Loan object to identify the reason the Loan record was share.

  D. Create an owner-based sharing rule on the Custom Team object that will share the Loan record to the owner of the Custom Team record.

  Correct Answer: BD