Salesforce Fundamentals (Obj 3,4) Flashcards
The HR department is considering to use Salesforce for managing performance reviews for employees. It is concerned about access to this sensitive data such that the organization-wide default settings for the Performance Review object will be set to Private. What feature can then be used to open up access to this data to the employees’ manager only? (1)
A.) Permission Sets
B.) Role Hierarchy
C.) Manual Sharing
D.) Manager Group Sharing
C.) Manual Sharing
The HR Manager would like to give permission to only one Account Executive to access the Employee custom tab, which is currently only available for the ‘HR Employee’ profile. How can this be configured? (1)
A.) Use organization-wide default settings
B.) Use object level security to grant access
C.) Add a permission set to the Account Executive profile
D.) Add a permission set for the specific user
D.) Add a permission set for the specific user
Global Containers would like to provide all its sales reps ‘Read’ access to the Account object. However, ‘Edit’ access should only be given to a few senior sales reps who understand how the data should be updated and ensure that the data quality is upheld. What is the recommended way to achieve this requirement? (1)
A.) Use programmatic sharing based on a ‘Trusted?’ checkbox field on the User object
B.) Use the role hierarchy to grant edit access to senior sales reps
C.) Use two separate profiles for regular and senior sales reps
D.) Use one profile for sales reps and create a permission set for senior sales reps that allows editing accounts
D.) Use one profile for sales reps and create a permission set for senior sales reps that allows editing accounts
Global Insurance has created a custom object to gather feedback from employees about working at the company. The feedback should be private so that employees cannot see each other’s feedback. Only the CEO should be able to view the feedback from all the employees. How should the application be configured to meet this requirement? (1)
A.) Change the OWD setting for the Feedback object to ‘Private’, disable ‘Grant Access Using Hierarchies’ for the object, and create a sharing rule for the CEO role
B.) This is not possible as sharing settings cannot be configured for custom objects
C.) Change the OWD setting for the Feedback object to ‘Public Restricted’ and set a sharing exception for the CEO user
D.) Change the OWD setting for the Feedback object to ‘Private’, enable ‘Grant Access Using Hierarchies’ for the object, and create a sharing rule for the CEO user
A.) Change the OWD setting for the Feedback object to ‘Private’, disable ‘Grant Access Using Hierarchies’ for the object, and create a sharing rule for the CEO role
Global Containers is using a custom app to record performance review information for their employees. The performance review of a particular employee should be visible to the employee, the employee’s manager, and the HR director. There are users above the HR director in the role hierarchy, but they should not have access to the performance review. How can this be configured? (1)
A.) Set the OWD setting for Performance Review to ‘Private’ and enable ‘Grant Access Using Hierarchies’ to give visibility to the employee’s manager and HR director
B.) Use Manager Sharing to enable sharing with the employee’s manager and HR director
C.) Set the OWD setting for Performance Review to ‘Private’, disable ‘Grant Access Using Hierarchies’, and use manual sharing for the employee manager and HR director
D.) Set the OWD for Performance Review to ‘Private’ and add a criteria-based sharing rule to share Performance Review records with a public group that includes the employee managers and HR director
C.) Set the OWD setting for the Performance Review to ‘Private’, disable ‘Grant Access Using Hierarchies’, and use manual sharing for the employee manager and HR director.
Which of the following Salesforce features can allow one or more users to obtain delete access to an object? (2)
A.) Roles
B.) Permission Set
C.) Profiles
D.) User Setup
B.) Permission Set
C.) Profiles
A Salesforce organization uses a custom object to capture expense data. One of their requirements is to ensure that an expense record is only visible to the respective record owners and those above them in the organization hierarchy. Which of these Salesforce features can be configured to meet this requirement? (2)
A.) OWD
B.) Role Hierarchy
C.) Expense Sharing Rule
D.) Permission Sets
A.) OWD
B.) Role Hierarchy
A developer wants to specify the objects that an individual or group of users can access. Which of the following security settings can help him achieve his goal? (2)
A.) Permission Sets
B.) Profiles
C.) Field-level security
D.) Organization-Wide Defaults
A.) Permission Sets
B.) Profiles
The role of a sales manager of Cosmic Electronics was recently changed due to a transfer. She is now able to access an account record that is not owned by her. The Admin of the company would like to determine whether the role hierarchy is the reason for the record access. Which of the following can be used to quickly determine this? (1)
A.) Account Team related list
B.) Sharing Hierarchy button
C.) Sharing settings
D.) Apex sharing reason
B.) Sharing Hierarchy button
An Admin can define a sharing rule to share records with a public group. Which of the following can be included in a public group? (3)
A.) Other public groups
B.) Permission Sets
C.) Profiles
D.) Roles
E.) Users assigned to specific territories
A.) Other public groups
D.) Roles
E.) Users assigned to specific territories
Cosmic Smart Solutions has a group of support users who require access to Salesforce. All these users need access to Chatter features and activities. A few of these users also require the ability to view and edit cases and records of a custom object called ‘Product Issue’. None of the users should be able to view or edit the records of any other object. Which solution should be utilized to ensure that these users have the required permissions? (1)
A.) Assign the ‘Read Only’ profile to all the users and assign a permission set to the users who require additional access.
B.) Assign the ‘Standard Platform User’ profile to all the users and assign a permission set to the users who require additional access.
C.) Assign the ‘Minimum Access - Salesforce’ profile to all the users and assign a permission set to the users who require additional access.
D.) Assign the ‘Standard User’ profile to all the users and assign a permission set to the users who require additional access.
C.) Assign the ‘Minimum Access - Salesforce’ profile to all the users and assign a permission set to the users who require additional access.
The customer service department of Cosmic Solutions does not have access to Opportunities. Due to a new cross-selling initiative, access to the Opportunity object needs to be provided to allow customer service representatives to create and edit opportunities. Which of the following can be configured for this requirement? (1)
A.) Profiles
B.) Datasets
C.) User Roles
D.) Opportunity Settings
A.) Profiles
Only users with the ‘Executive’ profile should have visibility to the ‘Salary’ field on the ‘Position’ object. What is the best way to achieve this? (1)
A.) User permission sets
B.) Use object-level security
C.) Use field-level security
D.) Use record types
C.) Use field-level security
If a user has ‘Create and Read’ access to the Case object via their profile and Edit access via the role hierarchy, which of the following statements is true regarding the user’s access to the object? (1)
A.) The user will have create, read, and edit access due to the role hierarchy
B.) The user will not have create and read access due to the role hierarchy
C.) The user will have edit access as granted via the role hierarchy
D.) The user will only have create and read access as specified in their profile
D.) The user will only have create and read access as specified in their profile
Cosmic Consulting uses the Project custom object to store Sales and Service project records. Service projects, distinguished by a ticked “Service/Support” checkbox, must be accessible to Support Agents. Sales project records contain sensitive data and should not be accessed by Support agents. Which data security feature can best achieve this requirement? (1)
A.) Sharing Rules
B.) Restriction Rules
C.) Public Groups
D.) Permission Set
B.) Restriction Rules
Star Enterprises would like their Salesforce instance to be configured so that any account record which has the ‘Type’ field set to ‘Internal’ is visible to all users. The OWD setting for the account object is set to Private. The associated contracts and opportunities also need to be visible to everyone. How many sharing rules would be needed for this requirement? (1)
A.) None
B.) Three
C.) Two
D.) One
D.) One
Sam, a Salesforce developer, is trying to limit the visibility of contact records using the org wide default setting of Private. While testing, he is still able to see all contact records. What could be a reason? (2)
A.) Sam’s profile does not have role hierarchy permission
B.) Sam’s profile has ‘View All Data’ permission
C.) Sam’s profile has ‘View All’ permission for the Contact object
D.) Sam’s role has ‘View All Data’ permission
B.) Sam’s profile has ‘View All Data’ permission
C.) Sam’s profile has ‘View All’ permission for the Contact object
How would an Admin ensure that records of a particular standard object are visible only to the record owner, to his manager, and the executives? (2)
A.) Define a Role Hierarchy
B.) Set the OWD setting for the object to ‘Private’
C.) Enable the ‘Grant Access Using Hierarchies’ checkbox for the object
D.) Define a Profile List
A.) Define a Role Hierarchy
B.) Set the OWD setting for the object to ‘Private’
Cosmic Solutions has developed a new recruitment application in Salesforce for supporting their global recruitment team. The Admin wants to give access to this new application to several users from the HR and recruitment teams who have not used Salesforce before and do not need access to any other apps or functionality in Salesforce. What is the best option? (1)
A.) Modify an existing profile and modify it to only include permissions to the app.
B.) Create a new profile by cloning an existing profile and modify it to only include permissions to the app.
C.) Assign an existing profile to the users and add permission that allows the users to access the app.
D.) Clone the ‘Marketing User’ profile and assign it to the users.
B.) Create a new profile by cloning an existing profile and modify it to only include permissions to the app.
At Global Insurance, medical data related to policyholders is only available to those users who have access via the sharing model. However, the Chief Medical Officer, who uses a User Profile shared with the other medical staff, needs read access to all medical data. Medical data is held in one custom object. How can an Admin ensure that this requirement is met? (1)
A.) Enable the ‘View All Data’ system permission in the profile assigned to the Chief Medical Officer.
B.) Enable the ‘View All’ object permission for the custom object in a permission set assigned only to the Chief Medical Officer.
C.) Enable the ‘View All Data’ object permission for the custom object in the profile assigned to the Chief Medical Officer.
D.) Enable the ‘View All Data’ app permission in the profile assigned to the Chief Medical Officer.
B.) Enable the ‘View All’ object permission for the custom object in a permission set assigned only to the Chief Medical Officer.
Fun Toys Inc. allows all employees to view open positions, but only the HR department should be able to create and update the records. Create, read, edit, and delete permissions have been set on the HR user profile. Also, users with the same HR role are allowed to make changes to each others’ records. What other configurations are necessary for this requirement? (2)
A.) Set the OWD setting for the Position object to Public Read-Only
B.) Define the OWD setting for the Position object to Public Read/Write
C.) Configure field-level security to allow HR users to work on each other’s Position records
D.) Create a sharing rule that allows HR users to work on each others’ Position records
A.) Set the OWD setting for the Position object to Public Read-Only
D.) Create a sharing rule that allow HR users to work on each others’ Position records
The OWD setting for the Contact object is set to ‘Public Read/Write’. Sam is asked to ensure that sales representatives should not be able to edit Contact records. What should Sam do here? (1)
A.) Grant only ‘Read’ access to Contact in the profile of sales representatives
B.) Grant only ‘Read’ access to Contact in the role of sales representatives
C.) Change the existing OWD setting for Contact to ‘Public Read Only’
D.) Create a Contact sharing rule
A.) Grant only ‘Read’ access to Contact in the profile of sales representatives.
Global Systems has three kinds of users, namely, marketing users, sales users, and executive users. Marketing users must not have access to any kind of Opportunity data, while Sales users must not have access to any kind of Lead data. How should this be configured in the company’s Salesforce instance? (1)
A.) Use Object settings in the users’ roles
B.) Use Assigned App settings in the users’ roles
C.) Use Object settings in the users’ profiles
D.) Use Assigned App settings in the users’ profiles
C.) Use Object settings in the users’ profiles
SolarFlower would like to prevent its users with the ‘Support’ profile from accessing Documents in Salesforce. Which of the following is the best way to achieve this? (1)
A.) Set the Document Tab setting to ‘Default Off’ for the Support profile
B.) Use a permission set to restrict access to users with the Support profile
C.) Set the Document Tab setting to ‘Tab Hidden’ for the Support profile
D.) Disable object access to the Document Object for the Support profile
D.) Disable object access to the Document Object for the Support profile
