Configuration and setup III (20%) Flashcards

1
Q

How do you create a new user in salesforce. And then what happens when you create one?

A

setup>users>new

  1. account verification link will be sent via email
  2. a password is created
  3. a security question is created
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Why are user licenses required and what’s the difference b/w feature and user licenses to grant access to features

A

user licenses are required because you have to determine the level of access to the org and which profiles can be selected.

feature licenses entitle users to access additional features not included with the user license.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How can multiple users be added to salesforce.
How many can you add at once
consideration before you do it in respect to licenses and what could be a work around to that consideration

A

You can add multiple users at one time (up to 10)
setup>users>add multiple users
they all will be assigned the same license

to create more at a time you’ll need to use the data loader application.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the use of login history to troubleshoot login issues

A

Login history pages provides information on past login attempts.

Examples
Login status: Indicates success or reason for failure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Identify the options for resetting passwords and what if the administrator needs to reset multiple at once

A

It can be reset by themselves or by the administrator.

administrator can reset multiple accounts at once

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How can an administrator unlock or unfreeze and account

A

from the users detail page

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is freezing a user

A

its what done to prevent users access to the org

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are the considerations related to user deactivation?

A

It takes time to do so if the user is involved in a lot of processes, in the mean time they can be frozen, until that is handled.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the use of delegated administration groups?

A

Can be created to help administrators spread out certain tasks.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

How can an Admin log in as another user?

A

setup>login access> “Make sure that enabled> go to any user profile

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are some of the most common user access issues?(

A

passwords are case-sensitive, wrong username, locked due to too many failed login attempts, wrong URL, IP restrictions, outside of login hours, account not verified, sandbox url

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are the required fields for user creation? (8)

A

Last Name, Alias, Nickname, Email, username, user license, profile

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Permission set vs permission set licenses

A

Permission set licenses, you can assign more permissions to users than their user license supports.

Permission sets extend users’ functional access without changing their profiles.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Can a user be deleted?

A

No users are permanent, their records cannot be deleted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

what is the failed login attempts section on the user detail section mean?

A

how many failed login attempts they have, once you reach the limit you’re locked out and have to have at least one successful login the number resets to 0

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

when would you freeze a user?

A

when deactivating them isn’t an immediate option

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

how does freezing an account affect the license?

A

It doesn’t, for a license to be available the user must be deactivated

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

what can users in a delegated group do?

A

manage users, manage permission sets, unlock and reset passwords, assign profiles, manage custom objects, create public groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

How does Setup Audit Trail work to monitor setup changes?

A

Helps track the recent setup changes that admins have made to their org, Shows 20 most recent setup changes. Shows: date of change, who made it, and what the change was

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

How do you use password policies to implement restrictions related to password requirements

A

by creating settings that govern the login and password rules for all users in your org

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What are the different types of user authentication

A

Single Sign-On

Multi-Factor Authentication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What level can you set login hours

A

at the profile level but not at the org level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

what is device activation

A

Acts as a second form of user authentication. its triggered when a user log in from an un recognized browser or device. browser wont be asked again unless cookies have been cleared

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

what is login forensics and what does it allow for

A

Allows salesforce admins to monitor login behavior and keep a sales org secure.

-Things you can monitor-

+ Suspicious login activity,
+ Who logged in more than the average number of times
+ Average number of logins per user per a specified time period
+ Who logged in during business hours,
+ Who logged in using suspicious IP ranges

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

what is security health check

where do you set it up

A

Helps in identifying, and fixing potential vulnerabilities in key areas of the security settings.
setup>health check

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Where does Fields, and Page Layouts security level fall under?

A

Field level security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What are some of the password policies

A

Password can’t contain a user’s username, and can’t match a users first or last name.

Password must contain at least eight characters including one alphabetic character and one number.

Security Question answer can’t contain the user’s password.

When users change their password, they cannot reuse their last three passwords

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

at what level can passwords policies be set at?

and what overrides what

A

organization or profile level

Profile password policies override the Organization-wide password policies for that profile’s users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What are some of the password policies

A

Password can’t contain a user’s username, and can’t match a users first or last name.

Password must contain at least eight characters including one alphabetic character and one number.

Security Question answer can’t contain the user’s password.

When users change their password, they cannot reuse their last three passwords

passwords expire for all users the default is after 90 days but this can be changed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

How does single sign-on work?

A

allows users in the org to login to salesforce and other applications using single user credentials.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What options are available for implementing single sign-on capability to simplify and standardize user authentication?

A

Federated authentication and delegated authentication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Federated authentication

A

Allows for affiliated but unrelated web services to share authentication data.

automatically enabled for an org

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Delegated authentication

A

allows for the usage of preferred authentication provider.

stronger form of user authentication and makes the login page private and accessible only behind a corporate firewall

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

org-wide session settings

A

are settings that configure the session time while your online

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

session timeout

A

can be configured to log out inactive users after the specified length of time. or can force sessions time out at a specified time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

session locking

A

sessions can be locked to the IP address for which they originated or the domain in which they were first used. This helps prevent unauthorized hijacking of a live session

37
Q

Session Security Levels

A

access to certain types of resources can be restricted based on the security level (standard or high assurance)

38
Q

High assurance sessions

A

Are meant for operations that require a higher level of security for sensitive data. Policies can be set to require high assurance security level reports, dashboards, and connected apps

39
Q

What is IP restrictions and where can it be specified at

A

Is a way to control access to salesforce organization. It can be set at the profile level and the organization level

40
Q

what must be true in order for a use to login without verifying identity?

A

If inside trusted IP for org and profile, and Within login hours,

41
Q

Verification is done via the highest priority verification method available list them from highest to lowest

A

salesforce authenticator mobile app> U2F security Key > One-Time Password Generator>SMS Text Message>Email

42
Q

what are the percentages associated with every risk level in health check?

A

Urgent: 0-33%
High Risk/Medium risk: 34%-66%
Acceptable: 67%-100%

43
Q

My Domain Capabilities

A

allows for the addition of a subdomain
allows for highlighting the brand
allows for SSO
replaces URL

44
Q

What do profiles determine?

A

Object access and permissions

Object: which objects a user can access

Permissions: what those users can do with the records of that object. can be set to; Create, Read, Edit, Delete, View All/Modify All

45
Q

OWD determines access to what?

A

to users’ data for records they do NOT own

46
Q

Considerations to take into account when decreasing or increasing OWD default access

A

when increasing access it will take effect immediately, when decreasing access it will take some time for salesforce to re-calculate use access.

47
Q

OWD sharing defaults: What does Public read/write/transfer mean?

A

users can view, edit, and change ownership ( only for leads and cases )

48
Q

OWD sharing defaults: What does Public Read/Write mean?

A

Allows users to view and edit other users records

49
Q

OWD sharing defaults: What does Public Read only mean?

A

Allows for users to view other users records but not edit

50
Q

OWD sharing defaults: What does Private mean?

A

User cannot see other users records unless it is shared or if the user above the record owner in the role hierarchy

51
Q

OWD sharing defaults: What does controlled by parent mean?

A

Users can preform an action based on if they can perform the action on the parent object. Example:

contact actions are controlled by the actions available on an account

52
Q

Campaign: Public full access

A

User can view, edit, transfer, delete and report on all campaign records

53
Q

Campaign Member: Controlled by Campaign

A

Only users who have access to the campaign are able to see the details of the campaign members related to the campaign

54
Q

Campaign Member: Controlled by Campaign Member

A

Users can only see the campaign members whose lead or contact records they already have access to.

55
Q

what is the order of record access levels from most restrictive to least

A
  1. Access to objects is first defined at the object level for a user profile for records a user owns
  2. OWD settings open up access to records the user does not own for specific objects
  3. Role hierarchy
  4. sharing rules open up record access to users whos OWD settings are set to anything more restrictive than Public Read/Write
  5. Individual records can then be manually shared
56
Q

what are the record access levels from most restrictive to least

A
  • Object*: Profile object permissions and permission sets
  • OWD settings*: Determines access to record a user does not own
  • Role hierarchies*
  • Sharing Rules*: access is granted based on record owner or criteria
  • Manual Sharing*: Users can manually share records with other users
57
Q

What is field level security

A

controls the visibility to data within records at the field level

58
Q

What is Role hierarchy

A

Grants access to records to users that have a role above the record owner

59
Q

What is manager group access?

A

Allows users to share records up and down their management chain

60
Q

Manual sharing

A

Allows for users to share records with other users on a one-off basis

61
Q

how do you make the sharing button visible on user detail pages

A

Sharing settings> Edit> Scroll to the bottom and check manual user record sharing

62
Q

how to you enable manual sharing button?

A

setup>sharing settings>edit>all the way down

63
Q

sharing rules

A

extend the access that have been established via OWD and role hierarchy

64
Q

what is a users access to reports and dashboards determined by?

A

combination of user permissions

65
Q

User Permissions for Reports & Dashboards: Run Reports

A

Allows users to run reports

66
Q

User Permissions for Reports & Dashboards: Schedule Reports

A

Allows users to schedule reports

67
Q

User Permissions for Reports & Dashboards: Subscribe to dashboards

A

Allows users to subscribe to dashboards

68
Q

User Permissions for Reports & Dashboards: Report Builder

A

Allows users to create, edit, and delete reports in public and private folders

69
Q

User Permissions for Reports & Dashboards: Create and customize reports

A

Allows users to create, edit, and delete reports in the ‘my personal custom reports’ folder

70
Q

User Permissions for Reports & Dashboards: Create and customize dashboards

A

Allows a user to create, edit, and delete reports in the ‘My Personal custom Dashboards’

71
Q

User Permissions for Reports & Dashboards: Manage reports in public folders

A

When this permission is assigned, a user can create, edit, and delete reports and manage their sharing in all public report folders

72
Q

User Permissions for Reports & Dashboards: Manage Dashboards in public folders

A

When this permission is assigned, a user can create, edit, and delete dashboards, and manage their sharing in all public dashboard folders

73
Q

how can reports and dashboards shared?

A

through enhanced folder sharing

74
Q

Public groups

A

can be used in an organization and may contain specific users, users in particular roles or territories

used for sharing rules, folder access sharing records etc.

75
Q

who can create public groups?

A

only admins

76
Q

How can reports and dashboards shared?

A

through enhanced folder sharing

77
Q

How do you enable manager groups?

A

setup> share settings> manager groups

78
Q

Access to reports and dashboards are determined by the access level of what?

A

the folders in which their contained in.

79
Q

What is the viewer access level for folders allow for?

A

for a user to view reports and dashboards

80
Q

What is the editor access level for folders allow for?

A

Allows a user to do what a viewer can do, but they can also save, delete, or rename a report or dashboard inside the folder

81
Q

What is the manager access level for folders allow for?

A

Allows a user to do what an editor can do, but they can also share or delete a folder, change the folders name, and change the folders sharing settings

82
Q

what is a standard profile?

A

Standard profiles are existing profiles in an org which can be assigned to users and cloned but cannot be edited

83
Q

what is a custom profile?

A

Profile that can be created by cloning an existing profile. It can be fully customized based on security requirements

84
Q

what are the two types of settings for profiles?

A

app settings: include settings that are specific to app and objects

system settings: Include settings that apply to all apps such as security settings and overall data visibility.

85
Q

what are 6 standard profiles?

A

Standard user, Contract manager, Minimum Access - Salesforce, Marketing User, Solution Manager, System Administrator

86
Q

what are the three permission categories in salesforce

A

App Permissions:
control what actions can be performed in different apps.

Custom Permissions:
must be enabled, they’re used to grant access to custom apps or processes

System Permissions:
grant access to actions that are org-wide

87
Q

What are permission sets used for?

A

to expand user privileges beyond what their profile allows

88
Q

What are permission sets used for?

A

to expand user privileges beyond what their profile allows

89
Q

Permission set group

A

groups permission sets together, so you don’t have to assign individual sets to a group one by one