Configuration & Setup Flashcards

20%

1
Q

Company Settings Options (list what they are)

A

1) Business Hours
2) Public Calendars & Resources (Resource calendar)
3) Company Information (licenses, etc.)
4) Data Protection & Privacy
5) Fiscal Years
6) Holiday Days
7) Language Settings
8) Currency Management
9) My Domain

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Locales

  • Where located?
  • What does it control the language & format of?
  • What level is it set at?
A

Company Information Page

Locale controls the language and format of
- date
- time
- address
- currency (only if single currency in use)
- name
- number fields

Default Locale set at org level, but user locale settings override

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Company Defaults (where set?)

A

Company defaults are set on the Company Information page

New users use the company default settings

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Language Support Levels

A

3 levels:

  • fully supported (all features displayed in selected language) - currently 18
  • end user (translations for setup, help, all STANDARD object field labels and pages) - currently 17
  • platform (for CUSTOM stuff. possible to provide translations for customizations and standard fields, but not informational text or non-field label text - if no translation provided, falls back to English) - over 100

Translation Workbench used to apply translations. Addtl. languages beyond company default must be enabled in Language Settings before they can be selected. Any in use cannot be deactivated.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Org ID

A

15-character unique identifier found on the Company Information page

Different across environments (e.g., Development, Test, and Production)

Used for support, enabling features

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

User Licenses (what are they & where/how assigned & where to see which have been allocated)

A

Define baseline of features available to a user.

Each user must be assigned ONE license when being created.

See which have been allocated in Company Information page (total, used, and remaining)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Feature Licenses (what are they & where/how assigned & where to see which have been allocated)

A

Grant access to additional features not included in a standard license (e.g. Marketing, Knowledge, CRM content).

Assigned via checkboxes in user’s profile.

See which have been allocated in Company Information page (total, used, and remaining)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Permission Set Licenses (what are they & where/how assigned & where to see which have been allocated)

A

Gradually grant users access to tools & functions not included in their user licenses. Extend access without changing profiles.

Assigned via checkboxes in user’s profile.

See which have been allocated in Company Information page (total, used, and remaining)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Salesforce API (what is it, which editions, where to see limits/events & how they’re determined)

A

Application Programming Interface.

Allows access programatically instead of using the user interface. (E.g. bulk data loading tools like Data Loader, integration tools like Informatica, etc.)

Limits in 24-hour period are based on edition & number of user licenses.

Available for Developer, Unlimited, Performance, Enterprise editions. (“Can’t DUPE the API”)

See events in Company Information page.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Time Zone (where set?)

A

Org default set in Company Information page.

Users can change their own personal time zone.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Currencies (where set & what kinds)

A

Company Information page > Currency Locale

Single currency is default

Multi-currency must be enabled by a system administrator in the Company Information page. Irreversible change (“Advanced Currency Management”).

Currencies must be made active to use them.

Reporting & forecasting can be done in the record currency AND corporate currency.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Where can you input available currencies, set the Corporate Currency, and set exchange rates?

A

“Manage Currencies”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Where can you add new exchange rates values with a start date?

A

“Manage Dated Exchange Rates”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Business Hours and Holidays (what are they/where defined/how used)

A

When users are available to support customers and are the basis for computation of support processes hours.

Part of Company Settings.

Can be defined in case records.

Used in case escalation rules (holidays excluded)
Used in entitlement processes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Standard Fiscal Year

A

Follow Gregorian calendar (12 month structure)

Can start on the first day of ANY MONTH

Can be named for starting or ending year/month

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Custom Fiscal Year
(and what it impacts)

A

“Fiscal Year” page
Defined using custom periods
Can be based on existing template or modified existing template
Irreversible to enable.

Impacts forecasts, reports, and quotas.

After enabling, all existing forecasts & quotas from the first period of that year forward will be deleted, but forecasts for periods before the first custom fiscal year are not deleted.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Data Storage (how used, exceptions, Enterprise limit)

A

Used by creating records

Most records use 2KB of storage, except:
- Person Account (4KB)
- Articles (4KB)
- Campaigns (8KB)
- Email Messages (according to the size of the email)

Enterprise Limit: 10GB plus 20MB per user license

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

File Storage (how used, Enterprise limit)

A

Used by storing files

  • Attachments
  • Documents tab
  • Files tab
  • Content
  • Chatter (incl. user photos)
  • Site.com assets

Enterprise Limit: 10GB plus 2GB per user license

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Big Object

A

If used, up to 1 million big object records can be stored. Addtl. capacity purchasable. Usually used in write-once, read-many situations (archives, etc.)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Default Language (where it’s set)

A

Set on Company Information page and will be applied to new users.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Language Translation (name of the tool)

A

Translation Workbench - allows translations to be applied to custom fields, labels, and translations from managed packages and custom picklist values

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Changing Display Language & Time Zone (user process)

A

My Settings > Personal > Language & Time Zone

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Usage-Based Entitlement (what is it)

A

A limited resource that your org can use on a periodic basis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

User Currency (what is it, where set, where can it be used)

A

Corporate Currency is defined; users may set their own in personal settings under Language & Time Zone on their Personal Information page.

Can be used in:

  • reports
  • quotes
  • forecasts
  • other records that use currency amounts
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Exchange Rates (where set)

A

Manage Currencies page

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Dated Exchange Rates (where set)

A

First, enable Advanced Currency Management

Then, Manage Dated Exchange Rates (tracks exchange rate at the date opportunities close)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Multi-Currency in Reports (two types)

A

Primary currency: default corporate currency OR currency selected for the record

Secondary currency: personal default currency (of user running report) OR currency specified in the report criteria

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Storage Usage (where to find)

A

“Storage Usage” under Setup

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What does the default locale configuration impact?

A

Format of Date, Time, Number, Phone Number, Name and Address fields

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What do business hours and holidays impact?

A

Business hours and holidays are used in calculations to determine when to escalate a case or when an entitlement milestone is reached.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What are the options to define fiscal years?

A

Standard or custom fiscal years. Standard fiscal years are based on a monthly structure and can start on any month. Custom Fiscal years can use a different structure such as quarters.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What level of language support does Salesforce provide, and how is a user’s language setting controlled?

A

Salesforce offers a number of Fully Supported, End User and Platform Only languages. The language on the Company Settings page is applied to new users, but it can be overriden in My Settings.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What is the Salesforce API?

A

The API (Application Programming Interface) is a way of accessing Salesforce programmatically and is used by Data Loading and Integration tools.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What is the organization ID?

A

A unique 15 character identifier that identifies each Salesforce organization and is different in each environment.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What time zone is used for new users?

A

The time zone for new users is set using default time zone on the Company Settings page, but users can override it in My Settings.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Why would multi-currency be used?

A

Multi-currency is used to be able to add amounts in different currencies on records and be able to forecast and report using the corporate currency or record currency.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Why would advanced currency management be used?

A

Advanced currency management allows dated exchange rates to be recorded to track the amounts when opportunities were closed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What are the types of licenses?

A

User, Feature, and Permission Set licenses.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

How is storage managed in Salesforce?

A

Salesforce has two categories of storage, Data and File storage. Records use Data Storage and File Storage is used by Attachments, Documents, Files, Content and Chatter.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

How can users set their correct time zones if the organization default is set to a different time zone?

A

Under My Settings, users can set their own time zones to override the organizational default.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

Default Record Page View (two options, where set, overriding)

A

Full View OR Grouped View

Setup > Record Page Settings

To override a default view, Custom Lightning record page can be created for a specified object & activated using Lightning App Builder

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

User Interface Settings (name a few important ones)

A

Enable Hover Details (enables summary when hovering over a record link; fields displayed determined by compact page layout)

Enable Inline Editing (pencil icon will appear if a cell is editable while hovering over the cell)

Enable Enhanced Lists (sets inline editing to be available in list views)

Disable Navigation Bar Personalization in Lightning Experience (exactly what it sounds like)

Enable Printable List Views

Enable Salesforce Notification Banner

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

Compact Layout Settings (determines what)

A

Determines which fields are included in hover details (first 7)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

Lightning Experience Navigation Bar (what can it contain)

A

Can contain most of the following:

  • Standard Objects
  • Custom Objects
  • Lightning Component Tabs
  • Web Tabs
  • Utilities like Lightning Voice
  • Lightning page tabs
  • Canvas apps
  • Visualforce tabs

Usually a horizontal navigation bar used to access the items and functionality in the app

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

App Navigation Bar (what is customizable?)

A

Horizontal bar within an app.

  • Custom apps
  • Interface (color & logo for each Lightning app)
  • Navigation items (rearrangeable & utility bar in the footer can be enabled by adding a utility item to the app)
  • App Access is assigned to user profiles
  • Rename & remove items (except the ones added by admin by default)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

Where do you view, create, and customize apps?

A

Setup > App Manager

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

How do you define access to an app?

A

Via the app’s visibility settings (user profiles) or permission sets.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

Utility Bar (what does it do, where is it set, where does it display)

A

Allows access to common productivity tools

Set in Lightning App Builder.

Displays at the bottom of the screen (right or left)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

Temporary Tabs (what are they, what can you do with them)

A

Used to access relevant items from the navigation bar; displayed with an asterisk *

Can be made permanent in the navigation bar via “Add to Nav Bar”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

Lightning Experience App Launcher (what is it, how is it customized, how is app access & visibility determined)

A

Lets you switch between apps

Apps that appear can be changed via Setup > App Menu

App access depends on each app’s visibility settings & user permissions. (Profile or permission sets)

Apps can be made visible or hidden for all users

Apps can be dragged & sorted by users

Apps are large tiles under “All Apps” while other items show up under “All Items”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

Where are themes set? Where don’t they work? How can you override them?

A

Setup > User Interface > Themes and Branding

Admins can choose from built-in themes or create a custom theme with brand logo, images, colors, and background.

Only one can be active at a time, they don’t apply to mobile, and apps can override a custom theme’s brand image & nav bar color with the app’s.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

In-App Guidance (where located, what pages can they be assigned to, who can make them)

A

Setup > User Engagement > In-App Guidance

Interactive tour via step-by-step prompts

Can be assigned to a specific record type, on a specific page or app, or any page or app

Manage Prompts permission required & a myTrailhead subscription for more than 3 custom walkthroughs.

Direct links can be shared.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

In-App Guidance (types)

A

Single prompt or walkthrough (multiple steps)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

In-App Guidance (prompt types)

A

floating
docked
targeted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

Guidance Center

A

Guides admins in setting up & enhancing the org and provides tailored recommendations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

How can lookup search results be made more relevant?

A

Via lookup filters, which restrict valid values & lookup dialog results for relationship fields, and dependent lookups, which include a lookup filter that references field(s) on the source object record.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

Search Layout (where set up, what’s customizable)

A

Set up via Object Manager or Setup > Einstein Search > Search Layouts

Customizable:
- Fields in a record’s instant results preview
- Fields that can be filtered (shown as columns on search results page)
- Fields shown in a recommended result
- The secondary field in instant results (always the related account for contacts and opportunities)

Profile-specific layouts can be created for each object.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

List View Button Layout (where set up, what’s customizable)

A

Can be edited in the Object Manager per object

Standard buttons can be selected or removed.
New custom list buttons can be created.
List view actions can be selected.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

Einstein Search features are available in which editions?

A

In Lightning Experience in Essentials, Professional, Enterprise, Performance, and Unlimited Editions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

Search Manager (where set up, what’s it do)

A

Setup > Search Manager

View all searchable objects and the search status of each field.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

Record List Display Types

A

Table/list view
Kanban view
Split view

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

List View Features

A
  • Search Bar
  • Show Charts
  • Inline Editing
  • Filters
  • Import
  • List Email
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

Where do you change List View Button Layout?

A

Object Manager > the object you want to change the view for

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

What are the steps to create a custom list view?

A
  1. Create and name a new list view or clone an existing list view (settings drop-down).
  2. Select the List View sharing.
  3. Add List View filters.
  4. Select the fields to display.
  5. Optionally create a list view chart.
  6. Use Sharing Settings to adjust visibility if required.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

What is the Lightning App Builder? How is it accessed? What can it be used to customize?

A

Tool used to build & configure Lightning apps & custom pages.

It’s accessed via Setup > User Interface > Lightning App Builder

It can customize:
- Lightning Apps (can edit them directly)
- Lightning Pages (using the Pages menu)
- Visibility Rules (app, home, and record pages can be made dynamic by setting visibility rules for components)
- Component Visibility (based on standard & custom user permissions)
- Collapsible sections (via Accordion component)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

What are the steps to create a custom home page?

A
  1. Create a new Home page or clone an existing Home page.
  2. Select a standard or custom template.
  3. Add components to the layout.
  4. Optionally set component visibility.
  5. Activate the Home page.
  6. Set as default for Org, App or App/Profile combination.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

Where are the Home Page settings located? What are the options for assigning them?

A

Setup > Feature Settings > Home

Assigned as org default, app default, or via app & profile combinations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

What’s the Lightning Usage App?

A

Helps with monitoring adoption metrics & page performance.

  • Activity
  • Usage
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
69
Q

What’s the Lightning Page Analysis tool?

A

Calculates page performance of a Record Page and IDs the components that have the most impact on page load time.

Accessible via Lightning App Builder.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
70
Q

What has to exist for a Lightning component or page in order to add it to the navigation bar of an app or the navigation menu of the Salesforce mobile app?

A

A tab! Setup > Tabs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
71
Q

What are the two types of actions?

A

Global actions (available in places like the home page, have no automatic relationship with any record)
Object-specific actions (allow creating a record related to the object for which the action is created)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
72
Q

Global Actions (where set up, what do they do, where accessible)

A

Setup > Global Actions

Can be added to any page that supports actions.
Allow creation of object records without any auto relationship

Available from home page, Chatter tab & groups, object pages, and custom Lightning app pages.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
73
Q

What are some things that Global Actions can perform?

A
  • Create a Standard or Custom Object Record
  • Log a call
  • Send an email
  • Display a Visualforce page
  • Display a Custom Canvas
  • Launch a Lightning Component
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
74
Q

Where are global actions’ layouts customized?

A

Setup > User Interface > Global Actions > Publisher Layouts

Global Publisher Layouts can be assigned by profile.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
75
Q

What are Mass Quick Actions?

A

Performed on a Recently Viewed list, up to 100 records can be selected in a list view and have a mass update performed on them.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
76
Q

What are Dynamic Actions used for?

A

To control the visibility of Action buttons on a record page based on the values on the record.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
77
Q

What are Object-Specific Actions?

A

Actions used by users to create or update records in the context of a particular object. Records created are automatically associated with related records.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
78
Q

What must be done in order for an Object-Specific Action to display?

A

It needs to be added to the Publisher Actions section of the object’s page layout (in Object Manager), and “Override global publisher layout” must be ticked.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
79
Q

Where are object-specific actions’ layouts configured from?

A

Setup > Object Manager > (Object) > Buttons, Links, and Actions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
80
Q

What’s a Sandbox?

A

A separate environment that’s a copy of a production organization, used for development and testing.

There are different types, based on storage limit, initial data, and refresh interval, the availability of which depends on the org edition.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
81
Q

What are the four types of Sandbox?

A

Developer
Developer Pro
Partial Copy
Full Copy

82
Q

What is deployment? What are the options available?

A

Moving developments or customizations from one organization (the source org) to another (the target org).

  • Change sets (related sandbox/production orgs)
  • Visual Studio Code (tools for development + deployment between orgs)
  • Ant Migration Tool (local directory + Salesforce org)
  • Salesforce CLI (command-line interface for metadata migration, allows interactive login)
  • Workbench (retrieve or deploy metadata using package.xml file)
  • Unmanaged Package (used to distribute open-source projects or application templates to any org)
83
Q

Where can users perform record search?

A

Global searches most information;

List View Search looks for a record within a list view;

Lookup search allows searching of related records from a lookup field.

84
Q

What do the User Interface Settings control?

A

General User Interface,
Sidebar (Classic Only) and
Calendar

85
Q

What is the global layout? (actions)

A

The global layout is the set of actions that can be used if an action layout has not been overridden. The global layout can be customized, and multiple publisher layouts can be defined and assigned to different profiles.

86
Q

What are some of the search settings that can be enabled or customized?

A

Search Optimization,
Recently Viewed Records,
Document Content Search,
Number of search results displayed,
Limit search to records owned by the user

87
Q

What actions and features are available on a list view?

A

Edit, Delete and Follow records,
Sort,
Filter,
Create Printable View

88
Q

What are the different types of search layouts?

A

Lightning Experience UI: List View, Search Filter Fields

Classic UI: Search Results, Lookup Dialog, Lookup Phone Dialog, Tab

89
Q

Where can an app’s logo and navigation bar color be changed?

A

‘App Manager’ in Setup

90
Q

Where can the apps that appear in the Lightning Experience App Launcher be changed?

A

‘App Menu’ in Setup

91
Q

What can be used to create, customize, and assign home pages to different profiles in Lightning Experience?

A

Lightning App Builder

92
Q

What types of custom components can be added to the home page layout?

A

Links, Images, HTML, and Visualforce

93
Q

How can a user look for a company in a List View by keyword?

A

By using the List View Search Bar at the top of the List View.

94
Q

Which users can view a list view created in Lightning Experience? (i.e., what are the options)

A

The creator, all users, or groups of users

95
Q

What can be used to search records from within the Kanban view in Lightning Experience?

A

List View search bar

96
Q

Which option can be selected from the List View Controls menu to share a custom list view with other users?

A

Sharing Settings

97
Q

What can be customized to include Lightning Knowledge fields in global search results in Lightning Experience?

A

Search results layout of the Knowledge object

98
Q

Which capability is available for list views in Lightning Experience to allow users to view opportunities that fall within a certain amount or probability range?

A

Filtering search results by number range

99
Q

How can a Lightning component on a home page be made visible to only users from a certain country using the Lightning App Builder?

A

By setting a component visibility filter in the ‘Set Component Visibility’ section of the component’s properties

100
Q

What are the six different areas of user setup & maintenance?

A

User Details
User License
Feature License
Resetting Passwords
Unlocking User Accounts
Localization

101
Q

How do you create a new user in Salesforce? What are the five steps to fill in?

A

Setup > Users

Then, you set up/fill in:

  • User Details
  • User License & Feature License(s)
  • Role
  • Profile
  • Localization

Then, an account verification link will be sent via email to the user. They’ll create a password & security question.

102
Q

What are some restrictions related to usernames?

A

Usernames are unique across all Salesforce orgs globally and cannot be reused.

They must be in email format but do not need to be valid email addresses.

103
Q

Is it required to assign a role to a user on creation?

A

Role is marked as required but does not need to be selected to create a new user.

104
Q

What are the required fields when creating a new user?

A

Last Name
Alias
Email
Username
Nickname

User License
Profile

105
Q

How can the email domains allowed in a user’s Email field be restricted?

A

Via Setup > User Management Settings > enable the Email Domain Allowlist toggle.

Then, in Setup > Users > Allowed Email Domains, you can specify the email domains that can be used.

106
Q

What’s the default expire length on an account verification email link?

A

7 days

107
Q

What happens on an admin-initiated email update?

A

The user is required to reset their password via a password reset link.

108
Q

How do you add multiple users to an org? What are three considerations?

A

The “Add Multiple Users” button on the Manage Users screen.

  1. The username will be the same as the email address when adding a user with this method.
  2. All users will have the same license assigned.
  3. Individual records will need to be edited after creation to choose further details.
109
Q

How can users be created in batch by the Data Loader?

A
  • Required fields in the user record should be included in the import file.
  • Use the insert operation. The user object fields should be mapped to columsn in the csv file.
  • Proper picklist values should be used for Email Encoding Key, Locale, Language, TimeZone, and Currency fields.
  • Activate & Generate password.
110
Q

How do you delete a user record?

A

You can’t! User records are permanent and cannot be deleted. It’s possible, though not recommended, to reuse inactive user records.

111
Q

Where can you see an org’s login history? What are five considerations related to it?

A

Identity > Login History

The status column will indicate success or reason for failure to login.
It can be viewed as a related list on a user record or for all users.
It shows up to 20,000 login records for the past 6 months.
It can be downloaded as a csv or gzip file.
API access logins will be included in All Logins option.

112
Q

How can a user’s password be reset?

A

Either by the user themselves via the “forgot password” link on the login page

OR

By the administrator via a User record in setup. Multiple passwords can be reset at once. In the User record’s detail section, the admin can see how many failed login attempts the user has. The counter will reset to 0 if the user gets locked out.

113
Q

How can an administrator resolve locked user accounts?

A

From a User record’s detail page.
- Unlock an account due to too many failed attempts to access.
- Unfreeze an account that has been frozen previously.

114
Q

What does freezing users do? How and why? Does it release their license?

A

It prevents user access to the org, and is done via the User Record’s detail page.

Freezing a user record can be used when steps to deactivate a user are incomplete.
It is an immediate action that prevents them from logging in or having access. No emails or Chatter alerts will be sent.
It does not release their license; to do that, the user must be deactivated.

115
Q

What does deactivating a user do?

A

It disables them from logging in and having access to Salesforce. They will no longer get email or Chatter alerts. Done via the user record.

A user cannot be deactivated if they’re the sole recipient of a Workflow Email Alert, Customer Portal Administrator, or User selected in a Custom Hierarchy Field.

Self Deactivation can be enabled to allow external Community and Chatter users to deactivate their own accounts (under User Management Settings).

116
Q

What is Delegated Administration? What controls what admin privileges are granted?

A

The system admin can delegate certain administrated tasks to delegated administrators. A delegated group controls what admin privileges are granted.

117
Q

What can users in a delegated administration group do?

A
  • Manage users (create and edit users in specified roles)
  • Assign profiles (assign users to specified profiles)
  • Unlock and reset passwords (for users in specified roles)
  • Manage permission sets
  • Create public groups (and assign users to specified public groups)
  • Manage specific custom objects
118
Q

How can an admin log in as another user? (Where’s the setting to enable? Otherwise, what must be done?)

A

Setup > Security Controls > Login Access Policies

Check the box to enable the feature. If it’s not enabled, each user needs to Grant Account Login Access from the Personal Setup menu.

119
Q

What are eight common user access issues? (Reasons why they can’t log in.)

A
  • Password case sensitivity
  • Login hours (the user may be trying to access the org outside of the login hours set by the System Admin)
  • Inaccurate username
  • Incorrect domain (trying to login using test.salesforce.com, used for sandbox, instead of login.salesforce.com)
  • myDomain policy (user tries to log in with login.salesforce.com when myDomain is deployed and login policy restricts login.salesforce.com)
  • Profile based IP restriction (IP restrictions may be in place, and the user is outside of set IPs)
  • Unverified account (the new user has not verified their account via the “Verify Account” link within the allotted time)
  • Locked out (the account may be locked from too many failed login attempts)
120
Q

What are the four levels of security in Salesforce (plus examples of each)?

A

Organization Security Controls (e.g., Login Hours, IP Restrictions & Network Settings, Password Policies, Device Activation)
Objects (e.g., Profiles, Permission Sets)
Object Record (e.g., Org-Wide Defaults, Role Hierarchy, Sharing, Teams)
Fields on a Record (e.g., Field-Level Security, Page Layouts)

121
Q

How can you see recent setup changes made to an org? How far back does it go?

A

Via the View Setup Audit Trail screen.

It shows the 20 most recent changes and stores history for the last 6 months (downloadable in .csv format).

122
Q

What kinds of changes are tracked by Setup Audit Trail?

A
  • Administration-related changes
  • Customization changes
  • Groups & Sharing
  • Data Management
  • Email deliverability and delivery
  • Delegated administrators
  • Notification types
  • Apex
  • Lightning components
123
Q

What are four settings that administrators can configure to ensure users’ passwords are strong and secure?

A
  • Password Policies
  • Password Expiration
  • Password Resets
  • Login Attempts and Lockout Periods
124
Q

What levels can password policies be set at?

A

Both at the organization level and the profile level. Profile Password Policies override the Org-Wide policies for that profile’s users.

125
Q

What are the default password requirements for new orgs?

A
  • Minimum 8 characters, including one alphabetic character and one number.
  • The security question answer can’t contain the user’s password.
  • When users change their password, they cannot reuse their last three passwords.
  • 90 day expiration
126
Q

What is single sign-on (SSO)? What does it need in order to implement it?

A

It allows users to log in to Salesforce and other applications using single user credentials with an external identity provider.

Needs either federated authentication via Security Assertion Markup Language (SAML) or delegated authentication.

127
Q

What is multi-factor authentication? How is it enabled?

A

It Increases an org’s security by requiring a second level of authentication for every user login. Not required by default for SSO logins.

Setup > Session Settings > Make sure “Multi-Factor Authentication” is in the “High Assurance” column in the “Session Security Levels” section.

You can also enable it for all users of the org in the same place.

It can be enforced via profiles as well.

128
Q

What are some org-wide session security settings that are configurable?

A

Session connection type (secure connection settings)
Timeout restrictions
IP address ranges (incl. locking to the IP address from which the session originated)
Caching settings
Clickjack protection
Session Security Levels (standard or high assurance)
Additional security protections…

129
Q

What are some profile session security settings that are configurable?

A

(These will override org-wide settings)
Session timeout
Session security level
Login policies

130
Q

What are the two different kinds of IP restrictions? At what levels can they be configured?

A

Login IP addresses - define the range of IPs from which a user can log in

Trusted IP addresses - define the range of IPs from which a user can log in without receiving a login challenge for verification of their identity.

Login IP addresses can be configured at a profile level.
Trusted IP addresses can be configured at an org-wide level (Network Access page in Setup).

Note: An activation code is sent for logins from devices/browsers that Salesforce doesn’t recognize, even if the IP is in range, or if the user has deleted browser cookies.

131
Q

What are three things to consider when setting Login Hours for a profile?

A
  • Login hours can be set only at the profile level.
  • You can set the days & hours.
  • If a user tries to log in outside these hours, they’re denied access.
132
Q

What is the flow for login access checks?

A

<login>
Is login time outside of Login Hours for Profile? YES > Login denied
NO:
Is user's IP outside range defined for Profile? YES > Login denied
NO:
Is user's IP outside of trusted range defined for Org? YES? Activation Code sent > Entered correctly > Login successful
NO:
Login successful
</login>

133
Q

When is device activation triggered? Where is it stored?

A

When a user logs in from an unrecognized browser or device and is logging in from outside a trusted IP range. It’s stored in browser cookies.

134
Q

What is the priority order for device activation verification methods?

A

1) Salesforce Authenticator Mobile App
2) Built-In Authenticator
3) U2F Security Key
4) One-Time Password Generator
5) SMS Text Message
6) Email

135
Q

What are login forensics? Where is it enabled? How do you see it?

A

Provides critical login info to admins, such as:
- Users who have suspicious login activity
- Users who logged in more than the average number of times
- The average number of logins per user per a specified time period
- Users who logged in during non-business hours
- Users who logged in using suspicious IP ranges

Setup > Event Manager > Login Event (enable storage)

There is no user interface; track events using API objects LoginEvent & Platform Event Metrics.

136
Q

What is Security Health Check? How can you access it?

A

A score to help admins see how they measure up against security baselines. Setup > Health Check

137
Q

What is myDomain?

A

A feature that allows the creation of a subdomain for the company’s Salesforce org. It’s required in order to activate other Salesforce features:

  • Company branding
  • Login management (helps)
  • URL replacement
  • Single Sign-On
138
Q

What is one way to improve download times and org performance in myDomain?

A

Route myDomain through the Salesforce Edge Network, which routes requests to the closest Salesforce location where Salesforce Edge Network is deployed.

139
Q

What are Enhanced Domains? Where are they set up? What are the qualifications for enabling them?

A

They enable the use of the company’s unique My Domain name on all URLs across the org, including Experience Cloud sites, Salesforce sites, etc.

Recommended for all orgs. Available in Hyperforce orgs and in orgs that have deployed My Domain that is routed via the Salesforce Edge Network.

Setup > My Domain

140
Q

What does Enhanced Transaction Security do? Where is it set?

A

It’s used to intercept real-time events and apply appropriate actions to monitor and control user activity, like blocking or requiring MFA authentication, as well as what kind of notification is sent and to whom.

Security Policies tab.

141
Q

What are Release Updates? Where are they accessed? What’s a consideration when updating?

A

Salesforce’s periodic updates.

Setup > Release Updates

Some updates can affect the existing customization of an org. Many have test runs to evaluate their impact before being enforced.

142
Q

What is GDPR?

A

General Data Protection Regulation is an EU data protection law that regulates the processing, collection, storage, transfer, or use of personal data about EU individuals.

143
Q

GDPR: Data Processor

A

Processes data on behalf of the data controller. This is Salesforce.

144
Q

GDPR: Data Controller

A

Salesforce customer that is responsible for managing customer data.

145
Q

GDPR: Data Subject

A

An individual data collected relates to, such as a Lead, Contact, or Person Account. Can also be a Salesforce end user.

146
Q

What are the key principles of GDPR?

A

Secure
Consent
Accurate
Legitimate Purpose
Accountable
Data Deletion

147
Q

What are the seven areas of Salesforce Security Control?

A

Field Access
Record Access
Object Access
Role Hierarchy
Sharing Rules
Manual Sharing
Public Groups

148
Q

What determines object access & permissions?

A

Profiles determine which objects a user can access and what actions they can take on those objects.

149
Q

What can the permissions on objects be set to?

A

Permissions on objects can be set to:
- Create
- Read
- Edit
- Delete
- View All/Modify All (grants access to all records of the object & overrides sharing settings)

150
Q

What determines access to tabs and apps? What are the different settings & what do they mean?

A

Profiles!

“Default On” - The tab for the object will be in the nav bar if it’s part of the App selected.
“Default Off” - The tab will be available for the user to add by customizing tabs.
“Tab Hidden” - The tab will not be visible for the object.

151
Q

What, exactly, do “object permissions” control?

A

Object permissions control what users can do with records they own within an object.

152
Q

What do organization-wide defaults (OWD) determine in terms of access to data?

A

OWD determine users’ access to other users’ data for records they do not own. They do not grant more access than the object access granted in the user’s profile.

Increasing access takes effect immediately; decreasing access takes time for Salesforce to recalculate.

153
Q

What are the access options for OWD on objects and what do they mean?

A

Public Read/Write/Transfer - Users can view, edit, and change ownership (only for leads and cases)

Public Read/Write - Users can view and edit other users’ records

Public Read Only - Users can view other users’ records but not edit

Private - Users cannot see others’ records unless they’re shared or if the user is above the record owner in the role hierarchy

Controlled by parent - Users can perform an action based on if they can perform the action on the parent object (e.g., contact actions are controlled by the actions available on an account)

154
Q

What are the OWD sharing default options for Pricebook?

A

Use - All users can view pricebooks, add them to opps, and add products in the pricebook to opps

View Only - Users can view them, but only users with edit permission on opps or users that have been manually granted access can add pricebooks to opps

No Access - Users cannot see pricebooks and cannot add them to opps unless it’s been manually shared with them

155
Q

What are the OWD sharing default options for Activities?

A

Private - Only the owner & users above the owner in the role hierarchy can edit & delete the activity. Users that have read access to the record related to the activity can view the activity.

Controlled by parent - Permissions are determined by the access the user has on the record or records related to the activity.

156
Q

What are the OWD custom sharing default options for Campaigns & Campaign Members?

A

Campaign: Public Full Access - All users can view, edit, transfer, delete, and report on all Campaign records

Campaign Member: Controlled by Campaign - Only users who have access to the campaign can see the details of the campaign members related to the campaign.

Campaign Member: Controlled by Campaign Member - Users can only see the campaign members whose lead or contact records they already have access to.

157
Q

What are the OWD sharing default options for Users?

A

Private: All users have read access to their own user record and those below them in the hierarchy.

Public Read Only: All users can see one another’s user detail pages. They can also see all users in lookups, list views, ownership changes, user operations, and search.

158
Q

What are the OWD sharing default options for Personal calendars?

A

Hide Details - Others can see availability, but not information about the events

Hide Details and Add Events - Same as Hide Details but can insert events into other users’ calendars

Show Details - Others can see info about events in others’ calendars

Show Details and Add Events - Same as Show Details, but can insert events into other users’ calendars

159
Q

What are two caveats about Record Access?

A

If a custom object is on the detail side of a master-detail relationship with a standard object, the OWD setting will be “Controlled by Parent” and cannot be changed.

User visibility will affect which users are displayed in the People tab of Chatter. If user visibility is set to Private, then users will not see any other users.

160
Q

What are the differences between Restriction Rules and Scoping Rules?

A

What they do: Restriction Rules prevent access to certain records. Scoping Rules let users focus on a certain set of records and filter out the remaining. They do not change access.

Where they can be applied: Scoping rules are applied on Account, Contact, Lead, Opportunity, and Case, none of which are available for Restriction Rules. Both can be applied on all Custom Objects.

Where they can be used: Scoping Rules can only be used in List Views, Reports, and SOQL. Restriction Rules can be applied on all these and also on Lookups, Related Lists, Search, and SOSL.

161
Q

What are the different levels of Record Access? What is the concept behind it?

A

The concept is to open up record access from more restrictive to less restrictive:

Object - First defined at the object level for a user profile for records the user owns (also permission sets)

Org-Wide Defaults - Opens access to records the user does NOT own

Sharing Rules - Open up record access to users when the OWD settings are set to anything more restrictive than Public Read/Write

Manual Sharing - Individual records can be manually shared

Restriction Rules - Allow certain users more granular access to specified records

Scoping Rules - Allow certain users more granular visibility to specified records

162
Q

How is access to specific fields controlled? What are the options?

A

Field-Level Security

Note: It doesn’t prevent searching on the values in a field.

The options are “visible” and “read-only” based on profile.

163
Q

What do field level security settings override?

A

Field properties if the field-level security setting is more restrictive

164
Q

What is the role hierarchy? What is a limitation of it? Where is it accessed?

A

It is a data-access hierarchy that grants access to records to users that have a role above the record owner in the role hierarchy if the OWD setting is not already Public.

Note: Role hierarchy access does not override object access determined by profiles.

Manage Users > Roles

165
Q

What are manager groups? What are they based on? Where can they be enabled?

A

They allow users to share records up or down their management chain. They’re based on the “Manager” field on the user detail page. They can be enabled on the Sharing Settings page.

166
Q

What do Sharing Rules do? What can they be based on? What are the access options granted?

A

They allow record access (in addition to what’s granted by the OWD) to be extended based on role, territory, public group membership, or manager groups. They go across role & territory hierarchy, sharing records owned by a role with another at the same level. Object access is still required.

They can be based on record owner or record criteria.

The access options granted can be read only or read/write.

167
Q

What does manual sharing do? Who can records be shared with?

A

It allows users to share records with other users on a one-off basis.

The “Sharing” button will only display if appropriate.

Records can be shared with other
Users
Roles (& Subordinates)
Territories (& Subordinates)
Public, Manager, or Manager Subordinate Groups

168
Q

What should a user be in order to manually share a record?

A

Owner of the record
Above the owner in the role hierarchy
A user with “full” access
Administrator

169
Q

How can you determine why a user has access to a record?

A

Via the “Sharing Hierarchy” button on the menu of a record.

170
Q

How can you share reports and dashboards?

A

Via Enhanced Folder Sharing

171
Q

With whom can folders be shared using Enhanced Folder Sharing?

A

Users, public groups, roles, or roles & subordinates

172
Q

What are the three levels of access provided to a user, group, or role via Enhanced Folder Sharing, and what does each level do?

A

View (view reports & dashboards)
Edit (Viewer + save, delete, or rename a report or dashboard in the folder)
Manage (Editor + share or delete a folder, change the folder’s name, change the folder’s sharing setting)

173
Q

Which user permissions determine access to reports & dashboards?

A

A combination of user permissions. Some might include:
- Run Reports
- Schedule Reports
- Report Builder
- Create and Customize Reports
- Create and Customize Dashboards
- Manage Reports in Public Folders
- Manage Dashboards in Public Folders
- Subscribe to Dashboards

174
Q

What are public groups used for, and what can they contain? Who can create them?

A

They’re used for Sharing Rules, Folder access, Sharing Records, and adding Users to a Content Library.

They can contain specific users, users in particular roles or territories, users in roles & those below them in the hierarchy, and other public groups.

Only Administrators can create Public Groups.

175
Q

Who can list views be shared with?

A

Users
Roles (& Subordinates)
Public Groups
Territories (& Subordinates)

176
Q

What are permission sets?

A

Permission sets can be assigned to a user to extend the user’s settings and permissions granted by their profile. They can only be used to increase privileges, not remove them. Users can be assigned one or more permission sets.

177
Q

What are the two categories of settings included in Profiles?

A

App settings (settings specific to apps & objects)
System settings (apply to all apps, such as security settings & overall data visibility)

178
Q

What are some examples of Standard Profiles?

A

Standard User (Create, Read, Edit and Delete for most objects, Run Reports, View Org Setup, View but not manage campaigns, and Create but not review solutions)

Contract Manager (Standard User + Manage Contracts)

Minimum Access - Salesforce (Least-privilege access with Access Activities, Chatter Internal User, Lightning Console User, and View Help Link Permissions)

Marketing User (Standard User + Import Leads, Manage Campaigns, Create Email Templates, Manage Public Documents)

Solution Manager (Standard User + Review and Publish Solutions)

System Administrator (access to all functionality that doesn’t require an additional license. Configure & customize the application. Can View and Modify all Data, which overrides all sharing rules)

179
Q

Which editions of Salesforce are Custom Profiles NOT available in?

A

Contact Manager and Group Editions

180
Q

How can you ensure that only permissions accessible to the org are enabled when a profile is cloned?

A

User Management Settings > Restricted Profile Cloning (enable)

181
Q

What are the types of settings that can be customized for each profile?

A

Settings are object based
Object Permissions can be set at the profile level and include: No Access, Read, Create, Edit, Delete and View All/Modify All
Allows access to certain Apps and Tabs
Determines which Page Layout a profile uses

182
Q

What are the three general groups of permissions in a Salesforce org?

A

App permissions (what actions can be performed in different apps)
Custom permissions (must be enabled & are used to grant access to custom apps or processes)
System permissions (grant access to org-wide actions)

183
Q

T/F: Any privilege that can be granted on a profile can be allocated through a permission set.

A

True!

184
Q

What are Permission Set Groups used for?

A

To group permission sets together for assignment to a user. Permissions in a permission set group can be disabled or “muted” by adding a Muting Permission Set (only one allowed per group).

185
Q

How can you analyze, report, and manage access & permissions within an organization?

A

User Access and Permissions Assistant

186
Q

How does the Security Health Check work?

A

Security Health Check measures setting values in Password Policies, Network Access Config and Session Settings against baseline values and calculates a percentage score to indicate risk. 100% means all settings meet or exceed the standard.

187
Q

When is identity verification invoked?

A

When a user logs in from an unrecognized (based on cookies) browser or device, and outside the trusted IP range

188
Q

What can be enabled that helps the administrator spot suspicious login activity?

A

Login Forensics

189
Q

What are the different risk categories associated with a Security Health Check in Salesforce?

A

High, Medium, Low, and Informational

190
Q

What password requirements can an administrator set?

A

Minimum password length, complexity, password history enforcement, expiration period, minimum password lifetime

191
Q

Where can session security settings be configured at the organization level and the profile level in an org?

A

On the ‘Session Settings’ page at the organization level and in a user profile at the profile level

192
Q

How is the role hierarchy related to record access? What toggle must be enabled to make it work?

A

Users will have access to other users’ records if they have a role above the record owner in the role hierarchy and grant access through hierarchies is enabled.

193
Q

What is the purpose of a public group?

A

It’s a way of grouping users, roles, and territories so that sharing settings and permissions can be granted efficiently.

194
Q

Which sharing setting allows a user to manually share their own user record with other users of an organization?

A

‘Manual User Record Sharing’ checkbox on the ‘Sharing Settings’ page in Setup

195
Q

Which organization-wide default sharing setting can be used for the Campaign Member object to allow all users to see only the campaign members associated with the campaigns they have access to?

A

Controlled by Campaign

196
Q

Which access level for a report folder would allow a user to change the folder’s sharing setting?

A

Manage

197
Q

Why would a user be freezed?

A

To prevent the user from logging in without deactivating them, allowing for changes to any customization where the user has been used (e.g. workflow email alerts)

198
Q

What administration tasks can an administrator delegate?

A

Create and assign users in certain roles and profiles, assign permissions sets, public groups, reset passwords, manage specific custom objects

199
Q

What field must be marked on the user record for users to be able to log in?

A

The “Active” checkbox

200
Q

How would it be possible to check why a user is not able to log in?

A

Login history on user record, or Login History for all users will give information regarding a login attempt.