Security

Question 1

What are the four levels of data access and primary controls?

Answer 1

• Organisation: controlled primarily by IP addresses and login hours
• Objects: controlled primarily by profiles
• Records: controlled primarily by roles and role hierarchy
• Fields: controlled by field level security

Question 2

Where do you set password policies?

Answer 2

Globally:

Setup > Password policies

By profile:

Setup > Profiles > Pick a profile > Password Policies

Question 3

How do you restrict login access by IP Address for the whole org?

Answer 3

Setup > Network Access

Question 4

How do you restrict login access by IP Address per profile?

Answer 4

• Setup > Profiles > Pick and edit a profile
• Click New in the Login IP Range related list.

Question 5

How do you restrict login access by time?

Answer 5

• Setup > Profiles > pick a profile
• Under Login Hours, click Edit.

Question 6

How are profiles used to manage object permissions?

Answer 6

They are used to restrict access as much as possible.

Conversely, permission sets are used to grant access.

First, turn on the enhanced profile user interface:

• Setup > User Management Settings
• Enable Enhanced Profile User Interface

Then :

• create a profile
• edit its object settings
• assign profile to users

Question 7

How are permission sets used to manage object permissions?

Answer 7

They are used to grant access, contrary to profiles that are used to restrict access

• create a permission settings
• edit its object settings
• assign users to permission sets

Question 8

How to create a hierarchy of roles?

Answer 8

• Setup > Roles
• Create roles
• Set accesses (Private/Public)
• Assign users

Question 9

How do you create a sharing rule?

Answer 9

Create a public group:

• Setup > Public groups
• Add users, roles or roles and subordinates

Create sharing rule:

• Setup > Sharing settings
• Create rule by owner or criteria
• Select level of access (Private / Public)
• Select public group or role or role and subordinates to share records with

Question 10

Wnat are the four increasingly permissive ways of sharing records?

Answer 10

• Organisation wide defaults
• Role hierarchy
• Sharing rules
• Manual sharing

Question 11

How to create a two-factor authentication permission set?

Answer 11

Make sure that two-factor authentication is in the High Assurance category:

Setup > Session Settings

Then create the permission set

Setup > Permission set > New > System Permissions > select Two-Factor Authentication for User Interface Logins.

Assign to users

Question 12

How to set field tracking history?

Answer 12

• Go to the object settings
• Set History Tracking
• Select the relevant field(s)

Question 13

How do you access the Sharing Settings screen and how does it look like?

Answer 13

Setup > Sharing Settings

It first lists the “Organization-Wide Defaults” values for all objects then has sub sections to create sharing rules for most objects

Question 14

How do you set up who gets to see which field?

Answer 14

Setup > Field accessibility

Question 15

How do you enable admins to log in as users?

Answer 15

Setup > Login Access Policies

Question 16

What do the “Organization-Wide Defaults” do?

Answer 16

They set the baseline of all security controls. They are meant to be the most restrictive settings that will be expanded upon by other security controls.

Question 17

What does the “Enable External Sharing Model” button do?

Answer 17

It enables sharing of the Salesforce records to external users:

• Authenticated website users
• Chatter external users
• Community users: customers, partners, high volume portal users, guest users, service cloud portal users

Question 18

What are sharing rules used for?

Answer 18

The default sharing model in Salesforce follows the vertical role hierarchy. The sharing rules introduce the ability to horizontally share the records of public groups, roles or roles and their subordinates to other public groups, roles or roles and their subordinates.

Question 19

How do you share records manually?

Answer 19

• Setup > Sharing settings > Other settings
• Check “Manual usesr records sharing”

If enabled in the pages layout, you can add a button fpor users to share their records regardless of other sharing rules

Question 20

What is a quick explanation of the difference between sharing settings and rules, profiles and permission sets?

Answer 20

Sharing settings and rules determine who can see data whilst profiles and permission sets determines wjhat they can do with it.

Personal understanding

Question 21

What level of data access does the organization give you?

Answer 21

At the highest level, you can secure access to your organization by:

• maintaining a list of authorized users
• setting password policies
• limiting login access to certain hours and certain locations

Question 22

What happens if permission sets conflict with one another?

Answer 22

The more permissive one gets applied