Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AB > Security > Flashcards

Security Flashcards

1
Q

What controls access to applications and objects (including fields and record types)?

A

Profiles and Permission sets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are the 4 capabilities available on an object via a profile?

A

Create
Read
Edit
Delete

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What controls access to specific records?

A

OWD, sharing rules

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What level of access can be granted at the record level?

A

Read or Read/Write

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Do profile object permissions override the org’s sharing model or role hierarchy?

A

No, even with full CRED access – an object could not be edited/deleted if OWD is Read Only

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What two settings are the exception when it comes to profile not being able to override sharing settings?

A

View All
Modify All
*these will override sharing settings and grant full access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What determines access to tabs and apps?

A

Profiles

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What does ‘Default On’ mean for a tab?

A

It will be visible in the selected app

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What does ‘Default Off’ mean for a tab?

A

It will be available to choose by user while they are customizing tabs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What does ‘Default Hidden’ mean?

A

Tab will not be visible for the object

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are six standard profiles?

A 
Standard User
Read Only
System Administrator
Marketing User
Solution Manager
Contract Manager
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Can you assign permission sets via a user list view?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the purpose of permission sets?

A

To grant additional access to specific users so that profiles do not need to be altered/created

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Can the OWD grant more access than object access defined in a user’s profile?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What two objects does the ‘Public/Read /Write/Transfer’ default apply to?

A

Leads and Cases

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is the purpose of OWD?

A
  • The only mechanism that restricts access

- establishes default access to records NOT owned by the user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What does ‘Controlled by Parent’ mean?

A

Users can perform an action on a contact or order based on access on the parent object.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What does ‘Price Book: Use’ mean?

A

All users can view price books, add price books to opps, and add products in the price books to opps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What does ‘Price Book: View Only’ mean?

A

users can view price books – but only users with ‘Edit’ permission on opps or users that have been manually granted access can add price books to opps.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What does ‘Price Book: No Access’ mean?

A

Users do not have visibility to price books and cannot add them to opps unless it has been manually shared with them

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What does ‘Activity: Private’ mean?

A

Only the owner of the activity and users above them in role hierarchy can edit and delete activity. Users that have read access to the record that is related to the activity can view it.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What does ‘Activity: Controlled by Parent’ mean?

A

Activity permissions are determined by the access the user has on the record related to the activity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What does ‘Campaign: Public Full Access’ mean?

A

Users can view, edit, transfer, delete, and report on all Campaign records

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What does ‘Campaign Member: Controlled by Campaign’

A

Only users who access to the campaign are able to see the details of the campaign members related to the campaign

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What does ‘Campaign Member: Controlled by Lead or Contact’ mean?

A

Only users have access to the lead or contact records of campaign members are able to see the campaign members.

26
Q

What does ‘User: Private’ mean?

A

All users have read access to their own user record and those below them in the hierarchy

27
Q

What does ‘User: Public Read Only’ mean?

A

All users can see one another’s user detail pages. They can also see all users in the lookups, list views, ownership changes, user operations, and search.

28
Q

What access setting is applied to custom objects on the detail side of a master-detail relationship with a standard object (and cannot be changed)?

A

‘Controlled by Parent’

29
Q

Can the role hierarchy provide additional access than what is granted by OWD (when setting is more restrictive than Public Read/Write)

A

Yes, it would allow a manager above a user to edit a record when OWD is set to Private or Public Read Only

30
Q

Does role hierarchy override object access?

A

No, even if should be able to edit via the role hierarchy, this could be prohibited by profile

31
Q

What objects can have exact access specified during Role setup/edit? What are the levels? Under what condition are they displayed?

A
  • Contact, Opportunity, and Case
  • No Access, View Access, or Edit Access
  • These options will NOT appear if OWD is Public Read/Write (because it wouldn’t matter anymore)
32
Q

What do Manager Groups do?

A
  • allows users to share access up or down the management chain
  • uses the ‘Manager’ field on the user’s detail page
  • user can choose to share records with Manager Groups or Manager Subordinate Groups
  • users can also share records with a manager group manually, sharing rule, or apex managed sharing.
  • can be enabled in Setup > Sharing Settings
33
Q

What objects can use a queue?

A
  1. Cases
  2. Contact Requests
  3. Leads
  4. Orders
  5. Service Contracts
  6. Knowledge Article Versions
  7. Custom objects
34
Q

What can groups and queues consist of?

A
  1. (other) Public Groups
  2. Users
  3. Roles
  4. Roles and Subs
  5. Territories
  6. Territories and Subs
35
Q

Who can be specified in sharing rules?

A
  1. Role
  2. Public Group
  3. Territory membership
  4. Manager Group
36
Q

What are the two ways to evaluate in how a sharing rule is evaluated?

A
  1. Record Ownership

2. Record Criteria

37
Q

How are records shared using manual sharing?

A

using the ‘Sharing’ button

38
Q

Can records be manually shared in LE?

A

No, only Classic

39
Q

What objects can be manually shared?

A

Accounts, Contacts, Leads, Users, Cases, and custom objects

40
Q

What are the different groups you can manually share with?

A
  1. Users
  2. Roles
  3. Roles and Subs
  4. Territories
  5. Territories and Subs
  6. Public Groups
  7. Manager Groups
41
Q

Can someone who is not the record owner manually share a record?

A

yes, can also be above the owner in role hierarchy, have full access, or be an admin

42
Q

How do you ensure that a User record is not manually shared?

A

Uncheck ‘Manual User Record Sharing’ on the Sharing Settings page

43
Q

Where is Field-Level Security set?

A

Profiles or Permission sets

44
Q

Does Field-Level Security override the ‘Modify All Data’ or ‘View All Data’ permissions?

A

Yes

45
Q

Where will the user not see a field they are making not visible?

A
  • record detail/edit pages
  • related lists
  • list views
  • reports
  • email and merge templates
46
Q

Due to field visibility consisting of page layout and FLS, how are contradictions handled?

A

The most restrictive setting always wins

47
Q

Does FLS prevent searching on values?

A

No, but the record will be returned in the search results WITHOUT the protected field(s)

48
Q

What are the two fields for FLS

A

Visible checkbox

Read only checkbox

49
Q

Where do you specify which Apex classes and Visualforce pages a user can access?

A

Profile

50
Q

An organization uses private sharing model. Marcus is a sales representative of the organization who needs to share an account record owned by him with his co-worker Sam.

A

Marcus can simply share the account record with Sam by manually using the ‘Sharing’ button on the record.

51
Q

Rachel is a Salesforce admin who needs to ensure that all users with the sales rep role are able to edit opportunities in the org that uses a ‘Public Read Only’ model.

A

A sharing rule can be created for this requirement. A sharing rule can be used to share an object’s records with users belonging to a certain role. Records can be shared based on ownership or criteria.

52
Q

Users of an organization should not be able to view account records owned by others. A public group of managers should be able to view all account records.

A

The OWD for Account can be set to Private. A sharing rule can be used to grant access to a public group.

53
Q

Records of a custom object named ‘Vehicle’ should only be accessed by support users and their supervisors. Supports users should be able to view and edit all ‘Vehicle’ records

A

Access to the ‘Vehicle’ custom object can be enabled only for the profiles of support users and their supervisors. The OWD can be set to ‘Public Read/Write’ to ensure that users are able to view/edit each other’s records.

54
Q

The OWD setting for a custom object has been as private. An admin needs to ensure that users above others in the role hierarchy are able to access records owned by them.

A

Ensure ‘Grant Access Using Hierarchies’ option has been enabled for the object

55
Q

A single user requires the permission to view and edit records of a certain custom object.

A

A permission set can be used to grant additional access to a user. A new custom profile would be unnecessary for this use case.

56
Q

An org would like to allow its marketing department to be able to see only the details of the campaign members whose contact or lead records they have access to.

A

The OWD setting of ‘Controlled by Lead or Contact’ on the Campaign Member object would allow all users to see only the campaign members whose contact or lead records they have access to in SF.

57
Q

Users of an org are currently only able to see campaign members whose lead or contact records they have access to. However, the Marketing Director would like them to access campaign member records only if they have access to the related campaign. Also, users who belong to a certain public group require access to all campaign members regardless of the default access.

A

The OWD setting of ‘Controlled by Campaign’ can be used for the Campaign Member object to allow users to only be able to see cm’s if they have access to the campaign associated with them. Since the CM object would inherit sharing rules from the Campaign object, a campaign sharing rule can be created to give the public group access to all the campaigns, which would give access to all the related cm records.

58
Q

What are permission sets?

A

A group of permissions and settings that can be assigned to one or more users. They are used to grant additional access.

59
Q

What does field-level security control?

A

Controls if a field is visible or read only at the profile level

60
Q

What takes longer opening up access or restricting it via OWD?

A

Opening happens immediately

Restricting takes time to calculate

61
Q

What should be used to grant a single user additional access to an object in salesforce?

A

permission set

62
Q

What OWD would be used to ensure that users cannot access account records not owned by them

A

Private

AB (9 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions