Security and Access: 20% Flashcards

Question 1

Q

What are the Elements that you might find in a Formula?

Answer

A

Literal value: A text string or number you enter that is not calculated or changed. For example, if you have a value that’s always multiplied by 2% of an amount, your formula would contain the literal value of 2% of that amount: ROUND((Amount*0.02), 2)
Field Reference: Reference the value of another custom or standard field using a merge field.
Function: A system-defined formula that can require input from you and returns a value or values. For example, TODAY() does not require input but returns the current date. The TEXT(value) function requires your percent, number, or currency input and returns text.
Operator: A symbol that specifies the type of calculation to perform or the order in which to do it. For example, the + symbol specifies two values should be added. The open and close parentheses specify which expressions you want evaluated first.
Comments: useful for explaining specific parts of a formula to anyone viewing the formula definition.

Question 2

Q

What is a Literal Value?

Answer

A

A text string or number you enter that is not calculated or changed. For example, if you have a value that’s always multiplied by 2% of an amount, your formula would contain the literal value of 2% of that amount:

ROUND((Amount*0.02), 2)

This example contains every possible part of a formula:

A function called ROUND used to return a number rounded to a specified number of decimal places.

A field reference called Amount.

An operator, *, that tells the formula builder to multiply the contents of the Amount field by the literal value, 0.02.

A literal number, 0.02. Use the decimal value for all percents. To include actual text in your formula, enclose it in quotes.

The last number 2 in this formula is the input required for the ROUND function that determines the number of decimal places to return.

Question 3

Q

What are the formula operators and functions, A-H?

Answer

A

+ (Add): Calculates the sum of two values.

(Subtract): Calculates the difference of two values.

* (Multiply): Multiplies its values.

/ (Divide): Divides its values

^ (Exponentiation): Raises a number to a power of a specified number.

() (Open Parenthesis and Close Parenthesis): specifies that the expressions within the open parenthesis and close parenthesis are evaluated first. All other expressions are evaluated using standard operator precedence.

= and == (Equal): Evaluates if two values are equivalent. The = and == operators are interchangeable.

Question 4

Q

What is a Function?

Answer

A

A system-defined formula that can require input from you and returns a value or values.

For example, TODAY() does not require input but returns the current date. The TEXT(value) function requires your percent, number, or currency input and returns text.

Question 5

Q

List an example of a Text Operator you can use in Salesforce Formulas

Answer

A

& (Concatenate)

Connects two or more strings.

Question 6

Q

For Date and Time Functions, what does ADDMONTHS do?

Answer

A

Returns the date that is the indicated number of months before or after a specified date. If the resulting month has fewer days than the start month, then the function returns the last day of the resulting month. Otherwise, the result has the same day component as the specified date.

Question 7

Q

DATETIMEVALUE Returns a year, month, day, and ___ time value.

Answer

A

Returns a year, month, day, and GMT time value.

Question 8

Q

In Date and Time Functions, what does DAY do?

Answer

A

Returns a day of the month in the form of a number between 1 and 31.

Question 9

Q

What function should you use instead of the NOW function if you only want to track time, without a date?

Answer

A

TIMENOW

Returns a time value in GMT representing the current moment.

Example:

IF(ISPICKVAL( Rating , “Hot”), TIMENOW(), TIMEVALUE(CreatedDate))

This formula checks to see if a lead is rated “Hot” and if so, returns the current time. Otherwise it returns the time since someone created the lead.

Tips:

Do not remove the parentheses.

Keep the parentheses empty. They do not need to contain a value.

Use TODAY if you prefer to use a date field.

The displayed value is based on the organization’s Locale settings.

Question 10

Q

What is the different between BLANKVALUE and ISBLANK?

Answer

A

BLANKVALUE: Determines if an expression has a value and returns a substitute expression if it doesn’t . If the expression has a value, returns the value of the expression.

ISBLANK: Determines if an expression has a value and returns TRUE if it does not. If it contains a value, this function returns FALSE.

Question 11

Q

What does ISCLONE do?

Answer

A

Checks if the record is a clone of another record and returns TRUE if one item is a clone. Otherwise, returns FALSE.

Question 12

Q

Which should you use in new formulas?

ISBLANK or ISNULL? How are they different?

Answer

A

IMPORTANT Use ISBLANK instead of ISNULL in new formulas. ISBLANK has the same functionality as ISNULL, but also supports text fields. Salesforce will continue to support ISNULL, so you do not need to change any existing formulas.

Question 13

Q

What are all the MATH FUNCTIONS that can be used in a formula?

Answer

A

FUNCTION

ABS: Calculates the absolute value of a number. The absolute value of a number is the number without its positive or negative sign.

CEILING: Rounds a number up to the nearest integer, away from zero if negative.

DISTANCE: Calculates the distance between two locations in miles or kilometers.

EXP: Returns a value for e raised to the power of a number you specify.

FLOOR: Returns a number rounded down to the nearest integer, towards zero if negative.

GEOLOCATION: Returns a geolocation based on the provided latitude and longitude. Must be used with the DISTANCE function.

LN: Returns the natural logarithm of a specified number. Natural logarithms are based on the constant e value of 2.71828182845904.

LOG: Returns the base 10 logarithm of a number.

MAX: Returns the highest number from a list of numbers.

MCEILING: Rounds a number up to the nearest integer, towards zero if negative.

MFLOOR: Rounds a number down to the nearest integer, away from zero if negative.

MIN: Returns the lowest number from a list of numbers.

MOD: Returns a remainder after a number is divided by a specified divisor.

ROUND: Returns the nearest number to a number you specify, constraining the new number by a specified number of digits.

SQRT: Returns the positive square root of a given number.

Question 14

Q

What does BEGINS do?

Answer

A

BEGINS Determines if text begins with specific characters and returns TRUE if it does. Returns FALSE if it doesn’t.

Question 15

Q

What does CASESAFEID do?

Answer

A

Converts a 15-character ID to a case-insensitive 18-character ID.

Question 16

Q

How would you use a default value formula to insert a different discount rate on an opportunity based on the department of the person creating the opportunity - (what might the formula look like)?

Answer

A

Use the following default value formula to insert a different discount rate on an opportunity based on the department of the person creating the opportunity:

CASE(User.Department, “IT”, 0.25, “Field”, 0.15, 0)

Question 17

Q

What returns the conversion rate to the corporate currency for the given currency ISO code?

Answer

A

CURRENCY RATE

If the currency is invalid, returns 1.0.

Question 18

Q

What is the description and use of the DISTANCE formula?

Answer

A

Description: Calculates the distance between two locations in miles or kilometers.

Use: DISTANCE(mylocation1, mylocation2, ‘unit’) and replace mylocation1 and mylocation2 with two location fields, or a location field and a value returned by the GEOLOCATION function.

Replace unit with mi (miles) or km (kilometers).

Question 19

Q

What is the only formula function that can use GEOLOCATION parameters?

Answer

A

DISTANCE is the only formula function that can use GEOLOCATION parameters.

Question 20

Q

What formula returns the position of a string within a string of text represented as a number? How can it be used?

Answer

A

FIND returns the position of a string within a string of text represented as a number.

FIND(search_text, text[, start_num]) and replace search_text with the string you want to find, replace text with the field or expression you want to search, and replace start_num with the number of the character from which to start searching from left to right.

Example: SUBSTITUTE(Email, LEFT(Email, FIND(“@”, Email)), “www.”) finds the location of the @ sign in a person’s email address to determine the length of text to replace with a “www.” as a means of deriving their website address.

Question 21

Q

The ________ function returns a location data type that can be used only by, and must be used with, the DISTANCE function.

The ________ function doesn’t work on its own.

Answer

A

The GEOLOCATION function returns a location data type that can be used only by, and must be used with, the DISTANCE function.

The GEOLOCATION function doesn’t work on its own.

Question 22

Q

What does the formula ABS do?

Answer

A

ABS

Description: Calculates the absolute value of a number. The absolute value of a number is the number without its positive or negative sign.

Use: ABS(number) and replace number with a merge field, expression, or other numeric value that has the sign you want removed.

Example: ABS(ExpectedRevenue) calculates the positive value of the Expected Revenue amount regardless of whether it’s positive or negative.

Question 23

Q

What returns an array of strings in the form of record IDs for the selected records in a list, such as a list view or related list?

Answer

A

GETRECORDIDS returns an array of strings in the form of record IDs for the selected records in a list, such as a list view or related list.

Use:{!GETRECORDIDS(object_type)} and replace object_type with a reference to the custom or standard object for the records you want to retrieve.

Question 24

Q

What two things can HTMLENCODE be used for in Salesforce?

Answer

A

HTMLENCODE

Tips: This function is only available in custom buttons and links, and in Visualforce.

Description: Encodes text and merge field values for use in HTML by replacing characters that are reserved in HTML, such as the greater-than sign (>), with HTML entity equivalents, such as >.

Use :{!HTMLENCODE(text)} and replace text with the merge field or text string that contains the reserved characters.

Example:If the merge field foo__c contains Enter the user’s name , {!HTMLENCODE(foo__c)} results in: Enter the user’s name

Question 25

Q

What is IMAGEPROXYURL used for?

Answer

A

Description: Securely retrieves external images and prevents unauthorized requests for user credentials.

Use: and replace http://exampledomain.com/pic.png with your image.

Example:

This IMAGEPROXYURL function retrieves and displays an image from Twitter’s image host, an external source. This function loads the Salesforce Twitter profile image over HTTPS. This function also prevents the image from making unauthorized requests for user credentials.

Question 26

Q

What is JSENCODE used for?

Answer

A

Description: Encodes text and merge field values for use in JavaScript by inserting escape characters, such as a backslash (), before unsafe JavaScript characters, such as the apostrophe (‘).

Use: {!JSENCODE(text)} and replace text with the merge field or text string that contains the unsafe JavaScript characters.

Example: If the merge field foo__c contains Enter the user’s name, {!JSENCODE(foo__c)} results in: \u003CB\u003EEnter the user's name\u003C\/b\u003E

Question 27

Q

What is LEFT used for?

Answer

A

LEFT

Description: Returns the specified number of characters from the beginning of a text string.

Use: LEFT(text, num_chars) and replace text with the field or expression you want returned; replace num_chars with the number of characters from the left you want returned.

Example:

TRIM(LEFT(LastName, 5)) & “-“ & TRIM(RIGHT(SSN__c, 4))

This formula displays the first five characters of a name and the last four characters of a social security number separated by a dash. Note that this example uses a text custom field called SSN.

Tips:

Reference auto-number fields as text fields in formulas.

If the num_chars value is less than zero, Salesforce replaces the value with zero.

Question 28

Q

What is LEN used for?

Answer

A

LEN

Description: Returns the number of characters in a specified text string.

Use: LEN(text) and replace text with the field or expression whose length you want returned.

Example:

LEN(PartNumber__c)

This formula returns the number of characters in a Product Code field.

Question 29

Q

What is LN used for?

Answer

A

LN

Description: Returns the natural logarithm of a specified number. Natural logarithms are based on the constant e value of 2.71828182845904.

Use: LN(number) and replace number with the field or expression for which you want the natural logarithm. Note: the LN function is the inverse of the EXP function.

Example:

LN(10) returns the natural logarithm of 10, which is 2.30.

LN(Value__c) returns the natural logarithm of a custom number field called Value.

Question 30

Q

What is LOWER used for?

Answer

A

LOWER

Description: Converts all letters in the specified text string to lowercase. Any characters that are not letters are unaffected by this function. Locale rules are applied if a locale is provided.

Use: LOWER(text, [locale]) and replace text with the field or text you wish to convert to lowercase, and locale with the optional two-character ISO language code or five-character locale code, if available.

Example:

MYCOMPANY.COM

LOWER(“MYCOMPANY.COM”) returns “mycompany.com.”

Question 31

Q

What are some examples for LPAD?

Answer

A

Example:
Field Name: Padding
- LPAD(Name, 20) truncates the Name field after 20 characters. For example, if the name is mycompany.com, the value returned is “mycompany.com.
My_Company: No Change
- LPAD(‘my_company.com’, 14, ‘z’) returns “my_company.com” without change because it has 14 characters
Field Name Padded with Z
- LPAD(Name, 15, ‘z’) returns the name “zmycompany.com.
Field Name: Truncating
- LPAD(Name, 2) truncates the name after the second character. For example, if the name is mycompany.com, the value returned is “my.”

Question 32

Q

What is MCEILING used for?

Answer

A

MCEILING

Description: Rounds a number up to the nearest integer, towards zero if negative.

Use: MCEILING(number)

Example:

MCEILING(2.5) returns 3, which is 2.5 rounded up to the nearest integer.

MCEILING(-2.5) returns -2, which is -2.5 rounded up towards zero for a negative number.

Question 33

Q

What is MFLOOR used for?

Answer

A

Description: Rounds a number down to the nearest integer, away from zero if negative.

Use: MFLOOR(number)

Example:

MFLOOR(2.5) returns 2, which is 2.5 rounded down to the nearest integer.

MFLOOR(-2.5) returns -3, which is -2.5 rounded away from zero for a negative number.

Question 34

Q

What is MID used for?

Answer

A

Description: Returns the specified number of characters from the middle of a text string given the starting position.

Use: MID(text, start_num, num_chars) and replace text with the field or expression to use when returning characters; replace start_num with the number of characters from the left to use as a starting position; replace num_chars with the total number of characters to return.

Example: MID (Division, 3, 4) returns four characters of the Division name beginning with the third character from the left. On a user record, this represents the department code.

Question 35

Q

What is MOD used for?

Answer

A

Description: Returns a remainder after a number is divided by a specified divisor.

Use: MOD(number, divisor) and replace number with the field or expression you want divided; replace divisor with the number to use as the divisor.

Example:

MOD(3, 3) returns 0

MOD(4, 3) returns 1

MOD(123, 100) returns 23

You might want to prevent users from scheduling meetings on a Saturday or Sunday. Use the following example to apply a validation rule to a custom date field called My Date.

CASE(MOD(My_Date__c - DATE(1900, 1, 7), 7), 0, 0, 6, 0, 1) = 0

This example displays the following error message when the value of My Date is not Monday through Friday: “My Date is not a weekday.”

Question 36

Q

What is PARENTGROUPVAL?

Answer

A

PARENTGROUPVAL

Description: This function returns the value of a specified parent grouping. A “parent” grouping is any level above the one containing the formula. You can use this function only in custom summary formulas and at grouping levels for reports, but not at summary levels.

Use:

Summary and Joined: PARENTGROUPVAL(summary_field, grouping_level)

Matrix: PARENTGROUPVAL(summary_field, parent_row_grouping, parent_column_grouping)

Where summary_field is the summarized field value, grouping_level is GRAND_SUMMARY or the API name of the parent level group for summary reports, and parent_row_level and parent_column_level are the parent levels for matrix reports.

In reports with multiple grouping levels, you can set the grouping_level to be any group level higher than the formula display level.

Example:

TOTAL_PRICE:SUM/PARENTGROUPVAL(TOTAL_PRICE:SUM, GRAND_SUMMARY)

This formula calculates, for each product, its relative size compared to the grand total. In this example, the report is a summary of opportunities and their products, grouped by Product Name.

Question 37

Q

What is PREVGROUPVAL?

Answer

A

Description: This function returns the value of a specified previous grouping. A “previous” grouping is one that comes before the current grouping in the report. Choose the grouping level and increment. The increment is the number of columns or rows before the current summary. The default is 1; the maximum is 12. You can use this function only in custom summary formulas and at grouping levels for reports, but not at summary levels.

Use: PREVGROUPVAL(summary_field, grouping_level [, increment])

Where summary_field is the name of the grouped row or column, grouping_level is the API name of the peer level group whose summary value for the previous grouping is used, and increment is the number of groupings previous.

In reports with multiple grouping levels, you can specify the grouping_level to be the same group level as the formula display level or a group level higher than the formula display level.

Example:

AMOUNT:SUM - PREVGROUPVAL(AMOUNT:SUM, CLOSE_DATE)

This formula calculates, for each month, the difference in amount from the previous month shown in the report. In this example, the report is an opportunity matrix with columns grouped by Close Date and rows by Stage.

Question 38

Q

What is REGEX?

Answer

A

REGEX

Description: Compares a text field to a regular expression and returns TRUE if there is a match. Otherwise, it returns FALSE. A regular expression is a string used to describe a format of a string according to certain syntax rules.

Use: REGEX(text, regex_text) and replace text with the text field, and regex_text with the regular expression you want to match.

Validation Rule Example:

This example ensures that a custom field called SSN matches a regular expression representing a valid social security number format of the form 999-99-9999.

NOT( OR( LEN (SSN__c) = 0, REGEX(SSN__c, “[0-9]{3}-[0-9]{2}-[0-9]{4}”) ) )

Question 39

Q

What is URLENCODE?

Answer

A

Description: Encodes text and merge field values for use in URLs by replacing characters that are illegal in URLs, such as blank spaces, with the code that represent those characters as defined in RFC 3986, Uniform Resource Identifier (URI): Generic Syntax. For example, blank spaces are replaced with %20, and exclamation points are replaced with %21.

Use: {!URLENCODE(text)} and replace text with the merge field or text string that you want to encode.

Example: If the merge field foo__c contains Mark’s page, {!URLENCODE(foo_c)} results in: %3CB%3EMark%27s%20page%3C%2Fb%3E

Tips:

This function is only available in custom buttons and links, and in Visualforce.

Question 40

Q

True or False?

Dates and times are always calculated using the user’s time zone.

Answer

A

TRUE

Dates and times are always calculated using the user’s time zone.

Question 41

Q

What functions can picklist fields only be used in?

Answer

A

Picklist fields can only be used in these functions:

ISPICKVAL—Compares the value of a picklist to a single value.

CASE—Compares the value of a picklist to multiple values.

TEXT—Returns a picklist value’s API Name so that you can work with a reference to the value (even if the displayed value changes) in functions that support text values, such as CONTAINS. (Available in only flow formula resources, formula fields, validation rules, and workflow field updates.)

Question 42

Q

What functions can multi-select picklists only be used in?

Answer

A

Multi-select picklist fields can only be used in these functions:

INCLUDES

ISBLANK

ISNULL

ISCHANGED (Only in assignment rules, validation rules, workflow field updates, and workflow rules in which the evaluation criteria is set to Evaluate the rule when a record is: created, and every time it’s edited)

PRIORVALUE (Only in assignment rules, validation rules, workflow field updates, and workflow rules in which the evaluation criteria is set to Evaluate the rule when a record is: created, and every time it’s edited)

Question 43

Q

You want to reference record types in formulas for different workflow rules, validation rules, and lookup filters to apply to different record types. When possible, which one should you use:

RecordTypeId

OR

RecordType.Name?

Answer

A

When possible, use RecordTypeId instead of RecordType. Name to reference a specific record type. While RecordType.Name makes a formula more readable, you must update the formula if the name of the record type changes, whereas the ID of a record type never changes. Also, RecordType.Name requires a cross-object reference to the record type, while RecordTypeId doesn’t. However, if you are deploying formulas across organizations (for example, between sandbox and production), use RecordType.Name because IDs are not the same across organizations.

Avoid using $RecordType in formulas, except in default value formulas. Instead, use the RecordType merge field (for example, Account.RecordType.Name) or the RecordTypeId field on the object.

Question 44

Q

True or False?

You can’t include an object as the lookup field in a formula.

Answer

A

TRUE

You CANNOT include an object as the lookup field in a formula. To reference an object, reference the object’s ID field or another field on the object.

For example, Account.Owner is invalid because it references the object directly. Account.Owner.FirstName or Account.OwnerId are valid references for your formula.

Question 45

Q

What is a Cross-object formula?

Answer

A

A Cross-object formula is a formula that spans two related objects and references merge fields on those objects.

A cross-object formula can reference merge fields from a master (“parent”) object if an object is on the detail side of a master-detail relationship. A cross-object formula also works with lookup relationships.

You can reference fields from objects that are up to 10 relationships away. A cross-object formula is available anywhere formulas are used except when creating default values.

Question 46

Q

True or False?

If you create a formula that references a field on another object and display that formula in your page layout, users can see the field on the object even if they don’t have access to that object record.

Answer

A

TRUE

If you create a formula that references a field on another object and display that formula in your page layout, users can see the field on the object even if they don’t have access to that object record.

For example, if you create a formula field on the Case object that references an account field, and display that formula field in the case page layout, users can see this field even if they don’t have access to the account record.

Question 47

Q

True or False?

You can use the Power of One on any object.

Answer

A

TRUE

You can use the Power of One on any object.

For example, if you had a report with 10 accounts, each with three opportunities, your Opportunities report returns 30 records. Adding the Power of One formula field to Account allows you to see the number of distinct accounts represented in the records. Some pros say they add a Power of One field to every object in their org!

Question 48

Q

Why might a missing parenthesis occur in an error?

Answer

A

This error most often occurs when the number of opening parentheses doesn’t match the number of closing parentheses. It can be particularly difficult to avoid this error if you’re using several functions at once. Try breaking your function into multiple lines so it’s easier to tell which sets of parentheses belong together.

You’ll also see this error if you forget a comma between two function parameters. This error is confusing because the actual problem doesn’t match up with the syntax checker. If you’re certain your parentheses are correct, double check that the commas in your function are correct as well.

Question 49

Q

What does Incorrect Parameter mean for an error in a formula?

Answer

A

Incorrect parameter type: If you give a function a number parameter when it expects text (or any other combination of data types), this is the error you see.

Always check the help text or the documentation so you know what kind of parameters a function accepts.

Question 50

Q

What does the ‘Incorrect number of parameters for function’ error mean?

Answer

A

If you input too many or too few parameters into a function, the syntax checker alerts you. Again, check the help text or documentation for guidelines on inputting parameters to specific functions.

Question 51

Q

Why might you see the ‘Field does not exist’ when writing a formula?

Answer

A

Field does not exist: This error indicates that you’ve included a field in your formula that your object doesn’t support. In this case, check your spelling and capitalization. If you can’t find any mistakes, try inserting the field from the Insert Field menu again to make sure you’re referencing it correctly.

Another reason you see this error is if you forget to put quotation marks around a text literal or a hyperlink.

Question 52

Q

How would you write a checkbox formula that determines whether a particular opportunity is a “big” opportunity. It should check whether the number of employees at the opportunity account’s associated company is greater than 1,000 AND whether the opportunity amount is greater than $10,000. If both statements are true, the field appears as a checked box on the Opportunity page layout. Otherwise, it appears as a blank box.

Question 53

Q

True or False?

Salesforce recalculates the value of campaign roll-up summary fields when leads or contacts are deleted.

Answer

A

FALSE

Salesforce does not recalculate the value of campaign roll-up summary fields when leads or contacts are deleted. Select the Force a mass recalculation of this field option on the edit page of the roll-up summary field to manually recalculate the value.

Question 54

Q

What can’t you use in roll-up summary filters?

Answer

A

You can’t use:

long text area
multi-select picklist
Description fields
system fields like Last Activity
cross-object formula fields
and lookup fields. . .

in the field column of roll-up summary filters.

Question 55

Q

True or False?

After you have created a roll-up summary field on an object, you cannot convert the object’s master-detail relationship into a lookup relationship.

Answer

A

TRUE

After you have created a roll-up summary field on an object, you CANNOT convert the object’s master-detail relationship into a lookup relationship.

Question 56

Q

True or False?

Roll-up summary fields are not available for mapping lead fields of converted leads.

Answer

A

TRUE

Roll-up summary fields are not available for mapping lead fields of converted leads.

Question 57

Q

True or False?

If a roll-up summary field doesn’t contain cross-object field references or functions that derive values on the fly, such as NOW or TODAY, it can calculate the values of formula fields.

Answer

A

TRUE

If a roll-up summary field doesn’t contain cross-object field references or functions that derive values on the fly, such as NOW or TODAY, it CAN calculate the values of formula fields.

Question 58

Q

A roll-up summary field can trigger workflow rules and field validations. However, workflow rules and field validations do not fire when any of what 6 changes cause a mass recalculation of roll-up summary values?

Answer

A

Changing the roll-up summary definition (such as the object, function, or field being aggregated)
Changing the expression of a formula field referenced in a roll-up summary field
Replacing picklist values for picklist fields referenced in the roll-up summary filter
Changing picklist record type definitions
Changing currency conversion rates
Changing price book entries

Question 59

Q

Calculating roll-up summary field values can take up to how long, depending on the number of records affected and other factors?

Answer

A

Calculating roll-up summary field values can take up to 30 minutes, depending on the number of records affected and other factors.

Question 60

Q

True or False?

If your organization uses multiple currencies, the currency of the master record determines the currency of the roll-up summary field.

Answer

A

TRUE

If your organization uses multiple currencies, the currency of the master record determines the currency of the roll-up summary field. For example, if the master and detail records are in different currencies, the detail record value is converted into the currency of the master record.

Question 61

Q

True or False?

If your organization has advanced currency management enabled, currency roll-up summary fields are invalid if they are on accounts and summarizing opportunity values, or on opportunities and summarizing custom object values.

Answer

A

TRUE

If your organization has advanced currency management enabled, currency roll-up summary fields are invalid if they are on accounts and summarizing opportunity values, or on opportunities and summarizing custom object values.

Question 62

Q

True or False?

Salesforce prevents users from saving a record if it invalidates a related record.

Answer

A

TRUE

Salesforce prevents users from saving a record if it invalidates a related record.

For example, a master record has a validation rule that requires the roll-up summary field value to be greater than 100. If the user’s change to a related child record would put the value over 100, the user can’t save the record.

Question 63

Q

True or False?

Once created, you can change the detail object selected or delete any field referenced in your roll-up summary definition.

Answer

A

FALSE
Once created, you cannot change the detail object selected or delete any field referenced in your roll-up summary definition.

Question 64

Q

When you refer to a roll-up summary field in a list view or report, you can’t use certain qualifiers, including what?

Answer

A

Starts with
Contains
Does not contain
Includes
Excludes
Within

Answer 64

A

Each custom object can have up to two master-detail relationships and many lookup relationships. Each relationship is included in the maximum number of custom fields allowed.

Answer 65

A

TRUE

Master-Detail to Lookup = no roll-up fields

You can convert a master-detail relationship to a lookup relationship as long as no roll-up summary fields exist on the master object.

Answer 66

A

Converting a master-detail relationship to a lookup for a custom object on the “detail” side, changes the organization-wide default for the object to public read/write.

Answer 67

A

FALSE

Lookup to Master-Detail = lookup field contains a value

You CAN convert a lookup relationship to a master-detail relationship if the lookup field in all the records contains a value.

Answer 68

A

Converting a lookup to a master-detail-relationship changes the organization-wide default to Controlled by Parent and the sharing model is updated to public read/write.

Answer 69

A

You can create a relationship from an object to itself, but it must be a lookup relationship.

Answer 70

A

TRUE

You can create a relationship from an object to itself, but it must be a lookup relationship, and a single record can’t be linked to itself. However, a record can indirectly relate to itself. For example, the Holiday Promotion campaign can have the Direct Mail campaign selected in the lookup relationship, and the Direct Mail campaign can have the Holiday Promotion campaign selected in the lookup relationship.

Answer 71

A

TRUE

You can’t create a many-to-many self-relationship, that is, the two master-detail relationships on the junction object CANNOT have the same master object.

Answer 72

A

As a best practice, don’t exceed 10,000 child records for a master-detail relationship.

Answer 73

A

“Primary master with junction object and secondary master” in the primary master object’s report category.

“Secondary master with junction object and primary master” in the secondary master object’s report category.

Answer 74

A

To create multilevel master-detail relationships, you need the “Customize Application” user permission.

Answer 75

A

TRUE

By default, records CANNOT be reparented in master-detail relationships.

Administrators can, however, allow child records in master-detail relationships on custom objects to be reparented to different parent records by selecting the Allow reparenting option in the master-detail relationship definition.

Answer 76

A

You can have up to three custom detail levels.

Answer 77

A

FALSE

Standard objects CANNOT be on the detail side of a custom object in a master-detail relationship.

Answer 78

A

You can use multilevel master-detail relationships in custom report types. The Allow Reports checkbox must be checked when you create the custom object.

Custom report types created for multilevel master-detail relationships count towards the organizations custom report type limit and no reports are generated if this limit is exceeded.

Answer 79

A

TRUE

Custom junction objects can’t have detail objects. That is, a custom junction object can’t become the master object in a multilevel master-detail relationship.

Answer 80

A

TRUE

You can’t delete a custom object if it is on the master side of a master-detail relationship. If you delete a custom object that is on the detail side of a master-detail relationship, the relationship is converted to a lookup relationship.

Answer 81

A

TRUE

If you delete a detail record and later, separately, delete its master record, you cannot undelete the detail record, as it no longer has a master record to relate to.

Answer 82

A

A profile or a permission set can have an entity, such as Account, with a master-detail relationship. A broken permission dependency exists if the child entity has permissions that the parent should have. Salesforce updates the parent entity for a broken permission dependency on the first save action for the profile or permission set.

Answer 83

A

Junction object records are deleted when either associated master record is deleted and placed in the Recycle Bin. If both associated master records are deleted, the junction object record is deleted permanently and can’t be restored.

Answer 84

A

TRUE

Sharing access to a junction object record is determined by a user’s sharing access to both associated master records and the Sharing Setting option on the relationship field.

For example, if the sharing setting on both parents is Read/Write, then the user must have Read/Write access to both parents in order to have Read/Write access to the junction object. If the sharing setting on both masters is Read-Only, a user with Read-Only rights on the master records would have Read access to the junction object.

Answer 85

A

In a many-to-many relationship, a user can’t delete a parent record if there are more than 200 junction object records associated with it and if the junction object has a roll-up summary field that rolls up to the other parent.

To delete this object, manually delete junction object records until the count is fewer than 200.

Answer 86

A

The first master-detail relationship you create on your junction object becomes the primary relationship.

Answer 87

A

The junction object’s detail and edit pages use the color and any associated icon of the primary master object.

Answer 88

A

Record ownership: The junction object records inherit the value of the Owner field from their associated primary master record.

Because objects on the detail side of a relationship do not have a visible Owner field, this is only relevant if you later delete both master-detail relationships on your junction object.

Answer 89

A

Division: If your organization uses divisions to segment data, the junction object records inherit their division from their associated primary master record. Similar to the record ownership, this is only relevant if you later delete both master-detail relationships.

Answer 90

A

If you delete the primary master-detail relationship or convert it to a lookup relationship, the secondary master object becomes primary.

Answer 91

A

FALSE

You can define Apex triggers on both master objects and the junction object.

Answer 92

A

TRUE

A junction object can’t be on the master side of another master-detail relationship.

Answer 93

A

If the lookup field is optional, you can specify one of three behaviors to occur if the lookup record is deleted:

Clear the value of this field
- This is the default. Clearing the field is a good choice when the field doesn’t have to contain a value from the associated lookup record.
Don’t allow deletion of the lookup record that’s part of a lookup relationship
- If you have dependencies built on the lookup relationship, such as a workflow rule, this option doesn’t allow the lookup record to be deleted.
Delete this record also
- Available only if a custom object contains the lookup relationship, not if it’s contained by a standard object.
- However, the lookup object can be either standard or custom. Choose when the lookup field and its associated record are tightly coupled and you want to completely delete related data.

Answer 94

A

TRUE

Choosing Delete this record also can result in a cascade-delete.

A cascade-delete bypasses security and sharing settings, which means users can delete records when the target lookup record is deleted even if they don’t have access to the records. To prevent records from being accidentally deleted, cascade-delete is disabled by default. Contact Salesforce to get the cascade-delete option enabled for your organization.

Answer 95

A

Cascade-delete and its related options aren’t available for lookup relationships to:

business hours
network
lead
price book
product,
user objects.

Answer 96

A

Only lookup, external lookup, and indirect lookup relationships are available for external objects. No other relationship types are supported.

Answer 97

A

TRUE

Depending on the availability of the external system, related lists of child external objects can load slowly when users view the parent record detail pages.

Answer 98

A

FALSE

Relationships that involve external objects allow users to create child records from the record detail pages of parent records. However, the relationship field on each new child record IS NOT automatically populated to identify the parent record.

Answer 99

A

FALSE

Syncing doesn’t create relationship fields on the external objects in your Salesforce org. However, you can change the field type of a sync-created custom field to Lookup Relationship, External Lookup Relationship, or Indirect Lookup Relationship. Changing the field type of an existing custom field is simpler and more efficient than manually creating a relationship field on the external object.

Answer 100

A

To reflect the foreign key relationship within your org, change the field type of that text field to External Lookup Relationship.

Answer 101

A

TRUE

Cascade-delete isn’t available for external object relationships.

Answer 102

A

TRUE

Lookup search isn’t available for external lookup relationship fields. To edit an external lookup relationship field, manually enter the value of the External ID standard field for the parent record. This limitation doesn’t apply when the parent external object is associated with the cross-org adapter for Salesforce Connect.

Answer 103

A

With external lookup and indirect lookup relationships, the parent record appears as a clickable link in the relationship field on the child record. If the child record is viewed by a user who doesn’t have access to the parent record, the parent record appears in the relationship field as plain text instead of a link.

Answer 104

A

TRUE

Lookup filters aren’t available for external lookup relationship fields.

Answer 105

A

TRUE

Indirect lookup relationship fields can be created on external objects only.

Answer 106

A

Only objects that have a custom field with the External ID and Unique attributes are available as parent objects in indirect lookup relationships.

If you don’t see the desired object when you create an indirect lookup relationship field, add a custom unique, external ID field to that object.

Answer 107

A

TRUE

Converting a relationship from lookup to master-detail or vice versa can cause existing custom reports to become unusable due to the different standard report types available for each type of relationship. We recommend that you test your custom reports immediately after converting the relationship type. If you revert your relationship back to the original type, the reports are restored and become usable again.

Answer 108

A

When specifying filter criteria on roll-up summary fields, does not contain uses “or” logic on comma-separated values.

Answer 109

A

On list views, reports, and dashboards, does not contain uses “and” logic.

Answer 110

A

Available for dashboard filters only. Use to filter on ranges of values. For each range, the filter returns results that are greater than or equal to the minimum value and less than the maximum value.

For example, if you enter “Number of Employees from 100 through 500,” your results include accounts with 100 employees up to those with 499 employees. Accounts with 500 employees aren’t included in the results.

Answer 111

A

Available when you create list views based on a Geolocation custom field. Shows results that are within the specified radius from a fixed latitude and longitude. For example, if you enter “Warehouse location within 50 miles 37.775° –122.418°,”, your list view includes all warehouses within a 50–mile radius of San Francisco, California.

Answer 112

A

TRUE

By default, records can’t be reparented in master-detail relationships.

Administrators can, however, allow child records in master-detail relationships on custom objects to be reparented to different parent records by selecting the Allow reparenting option in the master-detail relationship definition.

Answer 113

A

TRUE

Custom objects on the detail side of a master-detail relationship can’t have sharing rules, manual sharing, or queues, as these require the Owner field.

Answer 114

A

FALSE

Detail and subdetail records inherit security settings and permissions from the master record. You can’t set permissions on the detail record independently.

Answer 115

A

FALSE

The master-detail relationship field (which is the field linking the objects) is required on the page layout of the detail and subdetail records.

Answer 116

A

Each custom object can have up to two master-detail relationships and up to 25 total relationships.

Answer 117

A

FALSE

The Related To entry can’t be changed after you save the relationship.

Answer 118

A

TRUE

Lookup relationships are similar to master-detail relationships, except they don’t support sharing or roll-up summary fields.

Answer 119

A

TRUE

Link an object with itself (except for the user object; see Hierarchical). For example, you might want to link a custom object called Bug with itself to show how two different bugs are related to the same problem.

Answer 120

A

TRUE

Lookup relationships from objects related to the campaign member object aren’t supported; however, you can create lookup relationships from the campaign member object related to other objects.

Answer 121

A

A special lookup relationship available for only the user object. It lets users use a lookup field to associate one user with another that does not directly or indirectly refer to itself. For example, you can create a custom hierarchical relationship field to store each user’s direct manager.

Answer 122

A

Formula: YEAR( My_Date__c ) <> YEAR ( TODAY() )

Error Message: Date must be in the current year.

Error Location: My Date

Answer 123

A

Description: Validates that the range between two custom fields, Salary Min and Salary Max, is no greater than $20,000.

Formula:

(Salary_Max__c - Salary_Min__c) > 20000

Error Message: Salary range must be within $20,000. Adjust the Salary Max or Salary Min values.

Error Location: Salary Max

Answer 124

A

Description: Validates a custom field called Web Site to ensure that its last four characters are in an explicit set of valid website extensions.

AND(

RIGHT( Web_Site__c, 4) <> “.COM”,

RIGHT( Web_Site__c, 4) <> “.com”,

RIGHT( Web_Site__c, 4) <> “.ORG”,

RIGHT( Web_Site__c, 4) <> “.org”,

RIGHT( Web_Site__c, 4) <> “.NET”,

RIGHT( Web_Site__c, 4) <> “.net” )

Error Message: Web Site must have an extension of .com, .org, or .net .

Error Location: Web Site

Answer 125

A

OR(
LEN(BillingCountry) = 1,
NOT(
CONTAINS(
“AF:AX:AL:DZ:AS:AD:AO:AI:AQ:AG:AR:AM:” &
“AW:AU:AZ:BS:BH:BD:BB:BY:BE:BZ:BJ:BM:BT:BO:” &
“BA:BW:BV:BR:IO:BN:BG:BF:BI:KH:CM:CA:CV:KY:” &
“CF:TD:CL:CN:CX:CC:CO:KM:CG:CD:CK:CR:CI:HR:” &
“CU:CY:CZ:DK:DJ:DM:DO:EC:EG:SV:GQ:ER:EE:ET:FK:” &
“FO:FJ:FI:FR:GF:PF:TF:GA:GM:GE:DE:GH:GI:GR:GL:” &
“GD:GP:GU:GT:GG:GN:GW:GY:HT:HM:VA:HN:HK:HU:” &
“IS:IN:ID:IR:IQ:IE:IM:IL:IT:JM:JP:JE:JO:KZ:KE:KI:” &
“KP:KR:KW:KG:LA:LV:LB:LS:LR:LY:LI:LT:LU:MO:MK:” &
“MG:MW:MY:MV:ML:MT:MH:MQ:MR:MU:YT:MX:FM:MD:MC:” &
“MC:MN:ME:MS:MA:MZ:MM:MA:NR:NP:NL:AN:NC:NZ:NI:” &
“NE:NG:NU:NF:MP:NO:OM:PK:PW:PS:PA:PG:PY:PE:PH:” &
“PN:PL:PT:PR:QA:RE:RO:RU:RW:SH:KN:LC:PM:VC:WS:” &
“SM:ST:SA:SN:RS:SC:SL:SG:SK:SI:SB:SO:ZA:GS:ES:” &
“LK:SD:SR:SJ:SZ:SE:CH:SY:TW:TJ:TZ:TH:TL:TG:TK:” &
“TO:TT:TN:TR:TM:TC:TV:UG:UA:AE:GB:US:UM:UY:UZ:” &
“VU:VE:VN:VG:VI:WF:EH:YE:ZM:ZW”,
BillingCountry)))

Answer 126

A

TRUE

Validation rules don’t apply if you create records for an object with Quick Create.

Answer 127

A

TRUE

The detail page of a custom activity field does not list associated validation rules. To edit the validation rule for a custom activity field, select the validation rule from Setup by entering Activities in the Quick Find box, then selecting Activities and choose Task Validation Rules or Event Validation Rules.

Answer 128

A

Use the RecordType.Id merge field in your formula to apply different validations for different record types.

Answer 129

A

FALSE

You don’t have to begin a validation rule formula with the IF function. Any Boolean error condition expression works. For example:

Correct: CloseDate < TODAY()

Incorrect: IF(CloseDate < TODAY(), TRUE, FALSE)

Answer 130

A

TRUE

When a validation rule contains the BEGINS or CONTAINS function, it processes blank fields as valid. For example, if you have a validation rule that tests whether the serial number of an asset begins with “3”, all assets with a blank serial number are considered valid.

Answer 131

A

When using a validation rule to ensure that a number field contains a specific value, use the ISBLANK function to include fields that don’t contain any value.

For example, to validate that a custom field contains a value of ‘1’, use the following validation rule to display an error if the field is blank or any other number:

OR (ISBLANK (field__c), field__c<>1)

Answer 132

A

FALSE

Avoid using the IsClosed or IsWon opportunity merge fields in validation formulas. Instead, use the ISPICKVAL function to determine if the Stage contains the appropriate value. For example, the following validation formula makes a custom Project Start Date field required whenever the Stage is “Closed Won”:

Answer 133

A

Simplify your validation formulas by using checkbox fields, which don’t require any operator because they return true or false. For example, the following validation formula checks to be sure an opportunity has opportunity products using the HasOpportunityLineItem merge field before users can save a change to it:

NOT(OR(ISNEW(),HasOpportunityLineItem))

Answer 134

A

FALSE
If you have a multilingual organization, translate your error messages. You can translate error messages using the Translation Workbench.

Answer 135

A

Val assigns auto work easily

Salesforce processes rules in the following order:

Validation rules
Assignment rules
Auto-response rules
Workflow rules (with immediate actions)
Escalation rules

Answer 136

A

TRUE

When one validation rule fails, Salesforce continues to check other validation rules on that field or other fields n the page and displays all error messages at once.

Answer 137

A

If validation rules exist for activities and you create an activity during lead conversion, the lead converts but a task isn’t created.

Answer 138

A

Validation rules are only enforced during lead conversion if validation and triggers for lead conversion are enabled in your organization.

Answer 139

A

TRUE

Campaign hierarchies ignore validation rules.

Answer 140

A

TRUE

Salesforce runs validation rules before it creates records submitted via Web-to-Lead and Web-to-Case and then creates records that have valid values.

Answer 141

A

FALSE

Validation rules continue to run on individual records if the owner is changed.

Answer 142

A

FALSE

If the Mass Transfer tool is used to change the ownership of multiple records, validation rules don’t run on those records.

Answer 143

A

Validation rule formulas don’t or can’t refer to:

Compound fields, including addresses, first and last names, and dependent picklists and lookups
- NOTE However, you can use compound fields in ISNULL, ISBLANK, and ISCHANGED functions.
Campaign statistic fields, including statistics for individual campaigns and campaign hierarchies
Merge fields for auto-number or compound address fields, such as Mailing Address
- NOTE You can use merge fields for individual address fields, such as Billing City, in validation rule formulas.

Answer 144

A

TRUE

You can use roll-up summary fields in validation rules because the fields don’t display on edit pages.

Answer 145

A

TRUE

Do not use roll-up summary fields as the error location.

Answer 146

A

Validation rules and lookup filters achieve similar ends, but offer different advantages.

Use a lookup filter:

To improve user efficiency by limiting the number of available options in a lookup search dialog.
To improve user efficiency by automating filters on lookup search dialogs that your users manually set.

Use a validation rule:

If you’re close to the maximum number of lookup filters allowed.
To implement a complex business rule that requires you to use a formula. Formulas can reference fields that basic filter criteria can’t reference, such as fields on the parent of the source object. Formulas can also use functions. For example, use ISNEW to apply the rule only on record creation, or ISCHANGED to apply the rule only when a field changes.

Answer 147

A

When defining validation rules, you can set the error location to Top of Page or Field. If the error location is set to a field that is later deleted, to a field that is read only, or to a field that isn’t visible on the page layout, Salesforce automatically changes the location to Top of Page.

Answer 148

A

Field and Value Set

Answer 149

A

We have three types of picklists:

Standard
Custom
Custom Multi-Select

And picklist fields can have the following properties:

Restricted
Dependent or Controlling

Answer 150

A

Values can be defined three ways:

Set individual values when you create the picklist. These are specific to a single picklist field.
Use the built-in set of values for the standard picklist fields that come with your Salesforce org.
Create a global value set. A global value set is a custom set of values you create to share with more than one picklist field.

Answer 151

A

Delete it from your org
Use a Formula for a Default Value
Select Multiple Values
Make it Restricted
Make it a Dependent Picklist

Answer 152

A

Local picklist—Lets users select a single value from a list that you define. This picklist is unique and had its own set of values.
Shared picklist—Lets users select a single value from a global picklist value set that you define in Setup. All custom picklist fields that use a global value set inherit its values and can’t have additional values.
Multi-select picklist—Allows users to select more than one picklist value from a list that you define. These fields display each value separated by a semicolon.

Answer 153

A

uniqueness errors can result

Answer 154

A

TRUE

A global picklist is a restricted picklist by nature. Only a Salesforce admin can add to or modify its values. Users can’t add unapproved values, even through the API.

Answer 155

A

You can assign a value based on the current user. The following formula sets an Opportunity priority to High for all users in the Fast Response Sales profile. Other users see the default listed in the Values set.

IF($Profile.Name = “Fast Response Sales”, “High”, “”)

Answer 156

A

You can have up to 500 picklist global value sets in an org. Each global value set, or restricted picklist, can contain a mix of 1,000 active and inactive values. Unrestricted picklists can have up to 1,000 active values.

Answer 157

A

TRUE

There’s no limit on the number of custom picklists that use global picklist value sets.

Answer 158

A

If you apply a global picklist value set to more than 13 different objects, you can deactivate values from the picklist value set, but you can’t replace any picklist values or delete values from the set.

Answer 159

A

To see all the fields where this value set is used, look under Fields Where Used on the global picklist’s detail page.

Answer 160

A

TRUE

You can’t undo a custom picklist field’s association with a global value set.

If you need a picklist field to use a different global value set, or different individual values, delete the custom picklist field and create a new one in its place.

Answer 161

A

As you add new values to an existing global picklist, you can add the new values to all record types that use the picklist. Select Add the new picklist values to all Record Types that use this Global Value Set; otherwise, you have to add the new values to existing records types manually.

Answer 162

A

You can promote fields that have up to 1,000 values (both active and inactive).

Answer 163

A

NO - You can promote only restricted picklists. To promote an unrestricted picklist, convert it to a restricted picklist.

Answer 164

A

FALSE

You cannot promote a field to an existing global value set.

Answer 165

A

Picklist values translated using Translation workbench have a limit of 40 characters.

Answer 166

A

For an app to help manage picklist values, see Picklist Field Merge Salesforce Lab App

Automate migrating a picklist field into a global value set

Picklist Field Merge app allows administrators to automate several part of migrating existing picklist fields into a global value set. It takes care of such aspects of the migration as merging values, updating existing records and more.

Answer 167

A

FALSE

You can’t undo a custom picklist field’s association with a global value set. If you need a picklist field to use a different global value set, or different individual values, delete the custom picklist field and create a new one in its place.

Answer 168

A

IF A FIELD IS INDEXED, YOU CAN USE SIDEBAR SEARCH OR ADVANCED SEARCH TO FIND VALUES IN THE FIELD. HAVING A FIELD INDEXED CAN ALSO SPEED UP OTHER OPERATIONS ON THE FIELD, SUCH AS REPORTING. CHECK OUT THIS BLOG POST TO FIND OUT MORE: KNOW THY SALESFORCE FIELD INDEXES FOR FAST REPORTS, LIST VIEWS, AND SOQL.

Answer 169

A

When selecting picklist values for a list view filter, the combined size of the selected picklist values must be less than 240 characters

Answer 170

A

Custom single-select picklists can have:

Up to 1,000 values

Up to 255 characters per value

Custom multi-select picklists can have:

Up to 500 values

Up to 255 characters per value

Answer 171

A

Users can select up to 100 values at a time on a record.

Answer 172

A

You can have up to 500 picklist global value sets in an org. Each global value set, or restricted picklist, can contain a mix of 1,000 active and inactive values. Unrestricted picklists can have up to 1,000 active values.

Answer 173

A

There’s no limit on the number of custom picklists that use global picklist value sets

Answer 174

A

Transaction Security is a feature that monitors Salesforce events in real time to spot potential trouble based on rules you create. With Transaction Security, you can create policies that consist of events, notifications, and actions.

Answer 175

A

These are some of the available event types for Transaction Security policies.

API Event for monitoring and protecting all API queries. This prevents unauthorized data exports.
List View Event for access to list views. This tracks user’s access to list views from both the UI and API queries.
Login Event for monitoring login details. This blocks logins from untrusted locations, unsupported browsers, and specific device types.
Report Event for report views and exports. This blocks or requires multi-factor authentication for access to sensitive information or notifies when reports are run or exported.

Answer 176

A

Block the operation.
Require a higher level of assurance using multi-factor authentication.
Do nothing (this can be useful for testing).
Opt-in for Policy notifications, sent via:
Email
In-app notification to the Salesforce app
Both email and in-app notifications

Answer 177

A

New Policy Options are:

Condition Builder
Apex

Notification options are:

Email
In-App notification

Answer 178

A

As a best practice, before creating transaction security policies, you can view or query events to determine appropriate thresholds for normal business usage.

Answer 179

A

Event

An event is anything that happens in Salesforce, including user clicks, record state changes, and measuring values. Events are immutable and timestamped.

Answer 180

A

Event Channel

A stream of events on which an event producer sends event messages and event consumers read those messages.

Answer 181

A

Event Subscriber

A subscriber to a channel that receives messages from the channel. For example, a security app is notified of new report downloads.

Answer 182

A

Event Message

A message used to transmit data about the event.

Answer 183

A

Event Publisher

The publisher of an event message over a channel, such as a security and auditing app.

Answer 184

A

FALSE

Enhanced Transaction Security policies support both standard and custom objects.

Answer 185

A

Depending on whether you’re using permission sets or profiles, do one of the following.

In permission sets or the enhanced profile user interface, select a permission. In the Find Settings dialog box, enter View Real-Time Event Monitoring Data. Click Edit, select the option, and click Save. Repeat these steps for the Customize Application permission.

In the original profile user interface, select a profile name, and then click Edit. Select View Real-Time Event Monitoring Data, and Customize Application if you plan to create transaction security policies. Click Save.

Answer 186

A

Block a user or enforce multi-factor authentication (MFA). You can also optionally receive in-app or email notifications of the event.

Answer 187

A

Event: Report Event

Condition Logic: All Conditions Are Met

Conditions:

Rows Processed Greater Than 2,000

Queried Entities Contains Lead

Notes: Use the Contains operator, rather than Equals, to also include reports that are based on multiple objects, one of which is Lead.

Answer 188

A

Event: Report Event

Condition Logic: All Conditions Are Met

Conditions: Name of Columns Contains Email

Notes: Use the Contains operator to include any of these column names: Email, Customer Email, or Email of Customer.

Answer 189

A

Event: Login Event

Condition Logic: All Conditions Are Met

Conditions: Source IP Equals 12.34.56.78

Notes: Only the specific IP address 12.34.56.78 triggers the policy. If you want track logins from any IP addresses that start with 12.34.56, use the condition Source IP Starts With 12.34.56

Answer 190

A

Event: Login Event

Condition Logic: All Conditions Are Met

Conditions: Browser Contains Chrome

Notes: You can also track logins from the Safari and Firefox browsers.

Answer 191

A

Event: API Event

Condition Logic: All Conditions Are Met

Conditions:

Queried Entities Contains Lead

Elapsed Time Greater Than 1000

Notes: Use the Contains operator, rather than Equals, to also include queries on multiple objects, of which one is Lead.

Answer 192

A

Event: List View Event

Condition Logic: All Conditions Are Met

Conditions: Event Source Equals API

Notes: To track when a user uses the UI to query a list view specify Classic or Lightning instead of API.

Answer 193

A

Event: List View Event

Condition Logic: Any Condition Is Met

Conditions:

Session Level Equals LOW

Session Level Equals STANDARD

Notes: Use the same condition in separate transaction security policies to track when a user without high assurance executes a report (Report Event) or an API query (API Event).

Answer 194

A

Event: List View Event

Condition Logic: Custom Condition Logic is Met

Custom Condition Logic: (1 OR 2) AND 3

Conditions:

Scope Equals Everything

Name Equals SuperSecureListView

Username Ends With @spy.mycompany.com

Answer 195

A

Condition Builder is powerful, but it doesn’t support all complex use cases, such as branching logic, querying for data, or looping over the queried data. In those types of cases, you use Apex classes to define the conditions a Transaction Security policy triggers.

Answer 196

A

Use Setup to create an enhanced transaction security policy that uses Apex. You can specify an existing Apex class or create an empty class that you then code. The Apex class must implement the TxnSecurity.EventCondition interface.

Answer 197

A

With session-based permission sets, you can limit functional access for select permissions in a permission set to an activated session. When a session ends for any reason, a session-based permission set must be activated again before the user can access restricted resources.

Answer 198

A

Selecting Session Activation Required indicates to Salesforce that a permission set becomes enabled only with an activated session.

Answer 199

A

To make it usable, you need to have a way to activate a session for the permission set.

With code: the PermissionSet object in the Soap API contains a field called HasActivationRequired, a boolean that indicates whether the permission set requires an associated active session (true) or not (false). Insert a record into the SessionPermSetActivation object with the combination of session ID and permission set to achieve the activation.

With a flow:

Use a Get Records element to look up the permission set.
In the Get Records element, store the permission set’s name in a variable, so that you can use the name in the action.
Drag a Core Action element onto the canvas, and choose either Activate Session-Based Permission Set or Deactivate Session-Based Permission Set.
Activate it then distribute your flow to users who need to run it.

Answer 200

A

Make sure that you understand how permissions affect territory model and record access in Enterprise Territory Management.
Assign user permissions as needed.
Add the Assigned Territories related list to your account page layouts. This list lets Salesforce admins manually assign territories to accounts, and it lets users identify which territories are assigned to their accounts. Make sure that the related list includes the standard and custom fields (if any) that admins and users need.
Add the Users in Assigned Territories related list to your account page layouts. This list lets administrators and users see all users assigned to the territories that are assigned to an account, according to their permissions. Make sure that the related list includes the standard and custom fields (if any) that administrators and users need.
Add the Territory field to your Opportunity page layouts. This field lets administrators and sales managers manually assign a territory to an opportunity from a list of the territories assigned to the opportunity’s account. Add the Territory Name and Territory Description fields to Opportunity list views and reports so that users can identify assigned territories there.
Add any custom buttons, links, or actions you’ve created to territory page layouts.

Answer 201

A

Record-level access = S’MORE

Sharing Manual Organization (WD) RolE

Organization-wide defaults specify the default level of access users have to each others’ records. You use org-wide sharing settings to lock down your data to the most restrictive level, and then use the other record-level security and sharing tools to selectively give access to other users.
Role hierarchies give access for users higher in the hierarchy to all records owned by users below them in the hierarchy. Role hierarchies don’t have to match your organization chart exactly. Instead, each role in the hierarchy should represent a level of data access that a user or group of users needs.
Sharing rules are automatic exceptions to organization-wide defaults for particular groups of users, so they can get to records they don’t own or can’t normally see. Sharing rules, like role hierarchies, are only used to give additional users access to records. They can’t be stricter than your organization-wide default settings.
Manual sharing allows owners of particular records to share them with other users. Although manual sharing isn’t automated like org-wide sharing settings, role hierarchies, or sharing rules, it can be useful in some situations, such as when a recruiter going on vacation needs to temporarily assign ownership of a job application to someone else.

Answer 202

A

System Use Audit = RaLFH SAT down to audit system use

Record (a) Login Field History Setup Audit Trail

Record Modification Fields: All objects include fields to store the name of the user who created the record and who last modified the record. This provides some basic auditing information.

Login History: You can review a list of successful and failed login attempts for the past six months. For more information, see Monitor Login History.

Field History Tracking: You can turn on auditing to automatically track changes in the values of individual fields. Although field-level auditing is available for all custom objects, only some standard objects allow it. For more information, see Field History Tracking.

Setup Audit Trail: The Setup Audit Trail logs when modifications are made to your organization’s configuration. For more information, see Monitor Setup Changes.

Answer 203

A

If users are logged in when their login hours end, they can continue to view their current page, but they can’t take any further action.

Answer 204

A

Usage-Based Entitlements

examples: limited monthly logins/record limit for data.com
A usage-based entitlement is a limited resource that your organization can use on a periodic basis. For example, the allowed number of monthly logins to a Partner Community or the record limit for Data.com list users are usage-based entitlements.

Answer 205

A

6 sassy communities chat

Standard, Authenticated, Service, Sites (Y) Communities, Chatter

Standard User Licenses
Chatter User Licenses
Communities User Licenses
Service Cloud Portal User Licenses
Sites and Site.com User Licenses
Authenticated Website User Licenses

Answer 206

A

Customer Portal User Licenses
Customer Portal—Enterprise Administration User Licenses
User Licenses

Answer 207

A

What Is an Internal User and Internal License?

An internal user logs in to Salesforce via login.salesforce.com or a company myDomain, like salesforce.acme.com, using an internal license. Internal users primarily access the Salesforce platform using Lightning Experience or Salesforce Classic. Internal users can also access Experience Cloud sites.

Answer 208

A

What Is an External User and External License?

Salesforce customers who want to create an experience connected to their CRM data for their end customers, prospects, partners, brokers, dealers, and other external stakeholders use external licenses to provide access. Some typical use cases are partner portals, self-service forums and help centers, customer portals, and broker and dealer portals. A user with an external license can access only the Experience Cloud sites that the user is a member of. An external user can’t access the internal Lightning Experience or Salesforce Classic.

For example, Acme Insurance is a Salesforce customer. Acme employees have internal licenses and log in to Salesforce. Acme created a broker portal for its partners with the URL partners.acme.com. When Acme brokers log in to partners.acme.com with an external license, they’re not aware that they’re using Salesforce. Instead, the Acme portal is a secure space just for Acme brokers, not for Acme employees.

Answer 209

A

Anyone who is an employee of a company or needs employee privileges requires an internal license. For example, Acme Insurance uses Salesforce as its CRM. The Acme sales and service teams, who are full-time employees, need an internal license to log in to Salesforce to do their day-to-day work.

Acme uses consultants to take care of the company’s Salesforce setup and administration. The consultants also need internal licenses, even though they aren’t Acme employees. Other users who need an internal license to the Acme org are the company’s accountants and lawyers, who also work for other companies, to access the company’s information. The key point is that you’re treating all these users as employees. Acme is granting the same privileges to employees and consultants and is fine with the broader data and permission access.

Answer 210

A

Use external licenses. This will:

Limit access to your data
Restrict privacy or security and sharing considerations
Provide a more limited set of permissions (for example, can’t manage other users in the org or have access to modify all data)
Limit access to a subset of information that is contained in your org

Answer 211

A

Internal licenses provide broader access to your company data and information. The incorrect use of an internal license for an external use case can provide external users unwanted or inappropriate access to your data and records.

Internal license types are built with one use case in mind: a company employee or consultant that needs access to company data in the Salesforce org.

External license types are created for a multitude of use cases and include an added security level not available with internal licenses.

The best practice for any org is to use external licenses for external use cases, and internal licenses for internal use cases.

Answer 212

A

With Customer 360 Identity, customers and partners can self-register, log in, update their profile, and securely access web and mobile apps with a single identity. Plus, Customer 360 Identity is customized to your specific business process and brand using the power of the Salesforce Platform. And you can use the product to store and manage customer and partner user records and to authenticate these users in several ways.

Answer 213

A

Customer 360 Identity is available when you purchase the External Identity license. You can purchase the External Identity license in blocks of active users. These users are typically consumers of your business, such as customers, purchasers, patients, partners, and dealers.

Answer 214

A

TRUE

The External Identity license works with Community licenses. It’s also included for free with all paid Community user licenses in Enterprise, Performance, and Unlimited Editions.

Answer 215

A

TRUE

You can upgrade the External Identity license to a Community license to benefit from Experience Cloud features, including Cases, Contracts, Notes, Orders, and Tasks. The External Identity license requires unique usernames within the Salesforce org that an Experience Cloud site belongs to.

Answer 216

A

From Setup, enter Delegated Administration in the Quick Find box, then select Delegated Administration and click New
Select or create a delegated group.
To allow group users to log in as users in the role hierarchy that they administer, select Enable Group for Login Access. Depending on your org settings, individual users first grant login access to allow their administrators to log in as them.
Click Save.
For each related list, click Add to define your delegated group details.

Answer 217

A

To prevent users from granting access to a publisher—for example, to comply with regulatory or privacy concerns—click Available to Administrators Only for that publisher.

Answer 218

A

TRUE

Users can’t grant login access to managed packages that are licensed to your entire Salesforce org. Only admins with the Manage Users permission can grant access to these publishers. Also, some managed packages don’t have login access. If a package isn’t listed on the Login Access Policies page, login access isn’t available for that package.

Answer 219

A

Delegated administrators can:

Create and edit users in specified roles and all subordinate roles. User editing tasks include resetting passwords, setting quotas, creating default opportunity teams, and creating personal groups for those users.
Unlock users.
Assign users to specified profiles.
Assign or remove permission sets for users in their delegated groups.
Create public groups and manage membership in specified public groups.
Log in as a user who has granted login access to the administrator.
Manage custom objects and customize nearly every aspect of a custom object. However, a delegated admin can’t create or modify relationships on the object or set org-wide sharing defaults.
Administer users across all delegated groups to which the delegated admin is assigned. For example, Sam Smith is specified as a delegated administrator in two delegated groups, Group A and Group B. Sam can assign a permission set or public group from Group A to users in Group B.

Answer 220

A

FALSE

Delegated administrators CANNOT assign profiles or permission sets with the “Modify All Data” permission

Answer 221

A

TRUE

Delegated Administrators don’t see the None Specified option when selecting a role for new users

Answer 222

A

FALSE

They CANNOT modify permission sets.

Answer 223

A

YES - Assign the “Manage Roles” permission for the delegated administrator to change the role of portal account owners

Answer 224

A

TRUE

When you define IP address restrictions for a profile, a login from any other IP address is denied.

Answer 225

A

TRUE

How you restrict the range of valid IP addresses on a profile depends on your Salesforce edition.

Answer 226

A

PROFILES, then click New in the Login IP Ranges related list.

Answer 227

A

The location of IP ranges depends on whether you have the “Edit Profiles & Page Layouts” org preference enabled as an add-on feature.

With the “Edit Profiles & Page Layouts” org preference enabled, IP ranges are on individual profiles.

Without the “Edit Profiles & Page Layouts” org preference enabled, IP ranges are on the Session Settings page.

Answer 228

A

Session Settings

Then, click New in the Login IP Ranges related list.

Answer 229

A

To enable this option, in Setup, enter Session Settings in the Quick Find box, then select Session Settings and select Enforce login IP ranges on every request. This option affects all user profiles that have login IP restrictions.

Answer 230

A

You can set object permissions with profiles or permission set

Answer 231

A

two special permissions:

View All Data

Modify All Data

Answer 232

A

TRUE

You can’t edit the object permissions on a standard profile. However, you can clone any existing profile, and use that as the basis for a new profile, adjusting the apps and system settings as needed.

Answer 233

A

Permission sets = oaf

objects apps fields

1) to grant access to objects or apps
2) and to grant permissions—temporarily or long term—to specific fields.

Answer 234

A

On the Object Settings pages in the enhanced profile user interface, you can:

View or edit:
- Tab settings
- Record types and page layout assignments
- Object permissions
- Field permissions for an object
Search for an object, permission, or setting
Clone the profile
Delete custom profile
Change the profile name or description
Go to the profile overview page
Switch to a different settings page

Answer 235

A

Apex class methods, such as Web service methods
Any method used in a custom Visualforce controller or controller extension applied to a Visualforce page

Answer 236

A

TRUE

Triggers always fire on trigger events (such as insert or update), regardless of permission settings.

Answer 237

A

FALSE

Assigned app settings specify the apps that users can select in the Lightning Platform app menu. Unlike profiles, you CANNOT assign a default app in permission sets. You can only specify whether apps are visible.

Answer 238

A

TRUE

Permission sets can be assigned to a community’s membership, granting users who are assigned to the permission set access to the community.

If you add a permission to a permission set that is being used to grant membership to a community, the community members also get access to the permissions unrelated to community membership. Salesforce recommends checking if a permission set is used in any community’s membership list before adding new permissions to it.

Answer 239

A

FALSE

A new permission set starts with no user license selected and no permissions enabled. A cloned permission set has the same user license and enabled permissions as the permission set that it’s cloned from. You can’t change the user license in a cloned permission set. Clone a permission set only if the new one requires the same user license as the original.

Answer 240

A

Object permissions

A profile or a permission set can have an entity, such as Account, with a master-detail relationship. A broken permission dependency exists if the child entity has permissions that the parent should have. Salesforce updates the parent entity for a broken permission dependency on the first save action for the profile or permission set.

IF THE CHILD ENTITY HAS THESE PERMISSIONS

THESE PERMISSIONS ARE ENABLED ON THE PARENT ENTITY

Child: Modify All OR View All then, Parent has: View All

Child: View All OR Read then, Parent has: Read

Answer 241

A

Permission set GROUPS

If your org has many permission sets, using permission set groups can help improve performance.

Answer 242

A

When you create a permission set using a specific permission set license, users assigned to the permission set receive all functionality associated with the permission set license.

Answer 243

A

TRUE

In API version 25.0 and later, every profile is automatically associated with a permission set, whether you explicitly assign it to one or not. This permission set stores the profile’s user, object, and field permissions, plus setup entity access settings. You can query on these profile-owned permission sets but not modify them. They’re not visible in the user interface.

Answer 244

A

TRUE

Some user licenses restrict the number of custom apps or tabs that a user can access. In this case, you can assign only the allotted number through the user’s assigned profile and permission sets. For example, a user with the App Subscription user license with access to one Light App can access only that app’s custom tabs.

Answer 245

A

From Setup, in the Quick Find box, enter User, and then select User Management Settings. Enable Enhanced Profile User Interface.

Answer 246

A

Shield Platform Encryption gives your data a whole new layer of security while preserving critical platform functionality. It enables you to encrypt sensitive data at rest, and not just when transmitted over a network, so your company can confidently comply with privacy policies, regulatory requirements, and contractual obligations for handling private data.

Your data encryption key material is never saved or shared across orgs. You can choose to have Salesforce generate key material for you or upload your own key material. By default, the Shield Key Management Service derives data encryption keys on demand from a master secret and your org-specific key material, and stores that derived data encryption key in an encrypted key cache. You can also opt out of key derivation on a key-by-key basis, or store your final data encryption key outside of Salesforce and have the Cache-Only Key Service fetch it on demand from a key service that you control. No matter how you choose to manage your keys, Shield Platform Encryption secures your key material at every stage of the encryption process.

Answer 247

A

I have to wear a shield to the FAT Plate Event

A trio of security tools that admins and developers can use to build a new level of trust, transparency, compliance, and governance right into business-critical apps. It includes Platform Encryption, Event Monitoring, and Field Audit Trail. Ask your Salesforce administrator if Salesforce Shield is available in your organization.

Answer 248

A

As an admin, you can use Health Check to identify and fix potential vulnerabilities in your security settings, all from a single page. A summary score shows how your org measures against a security baseline, like the Salesforce Baseline Standard. You can upload up to five custom baselines to use instead of the Salesforce Baseline Standard.

Answer 249

A

Salesforce strongly recommends that customers implement the following changes to enhance security.

Implement two-factor authentication techniques to restrict access to your network. For more information, see Two-Factor Authentication.
Modify your Salesforce implementation to activate IP range restrictions. These restrictions allow users to access Salesforce only from your corporate network or VPN. For more information, see Restrict Where and When Users Can Log In to Salesforce.
Set session security restrictions to make spoofing more difficult. For more information, see Modify Session Security Settings.
Educate your employees not to open suspect emails and to be vigilant in guarding against phishing attempts.
Use security solutions from leading vendors to deploy spam filtering and malware protection.
Designate a security contact within your organization so that Salesforce can more effectively communicate with you. Contact your Salesforce representative with this information.
Use Transaction Security to monitor events and take appropriate actions. For more information, see Legacy Transaction Security Policies.

Answer 250

A

1. Record Modification Fields

All objects include fields to store the name of the user who created the record and who last modified the record. This provides some basic auditing information

2. Login History

You can review a list of successful and failed login attempts to your organization for the past six months. See Monitor Login History.

3. Field History Tracking

You can also enable auditing for individual fields, which will automatically track any changes in the values of selected fields. Although auditing is available for all custom objects, only some standard objects allow field-level auditing. See Field History Tracking.
Setup Audit Trail

Administrators can also view a Setup Audit Trail, which logs when modifications are made to your organization’s configuration. See Monitor Setup Changes with Setup Audit Trail.

Answer 251

A

Password policies—Set various password and login policies, such as specifying an amount of time before all users’ passwords expire and the level of complexity required for passwords. See Set Password Policies.
User password expiration—Expire the passwords for all users in your organization, except for users with “Password Never Expires” permission. See Expire Passwords for All Users.
User password resets—Reset the password for specified users. See Reset Passwords for Your Users.
Login attempts and lockout periods—If a user is locked out of Salesforce because of too many failed login attempts, you can unlock them. See Edit Users.

Answer 252

A

SAMueL is single but he Delegates Authentically

You have two options to implement single sign-on—federated authentication using Security Assertion Markup Language (SAML) or delegated authentication.

Answer 253

A

Federated authentication using Security Assertion Markup Language (SAML) lets you send authentication and authorization data between affiliated but unrelated web services. You can log in to Salesforce from a client app. Salesforce enables federated authentication for your org automatically.

Answer 254

A

Delegated authentication SSO integrates Salesforce with an authentication method that you choose. You can integrate authentication with your LDAP (Lightweight Directory Access Protocol) server or use a token instead of a password for authentication. You manage delegated authentication at the permission level, not at the org level, giving you more flexibility. With permissions, you can require some to use delegated authentication while others use their Salesforce-managed password.Delegated authentication offers the following benefits.

Uses a stronger form of user authentication, such as integration with a secure identity provider
Makes your login page private and accessible only behind a corporate firewall
Differentiates your org from all other companies that use Salesforce to reduce phishing attacks

Answer 255

A

Using My Domain, you can define a Salesforce subdomain name to manage login and authentication for your org in several key ways.

Highlight your business identity with your unique domain URL
Brand your login page and customize content on the right side of the page
Block or redirect page requests that don’t use the new domain name
Work in multiple Salesforce orgs at the same time
Set custom login policy to determine how users are authenticated
Let users log in using a social account, like Google and Facebook, from the login page
Allow users to log in once to access external services

Answer 256

A

Two-factor authentication is the most effective way to protect your org’s user accounts. As a Salesforce admin, amplify your org’s security by requiring a second level of authentication for every user login. You can also require two-factor authentication when a user meets certain criteria, such as attempting to view reports or access a connected app.

Two-factor authentication is an essential user authentication method—so essential that Salesforce provides two types of two-factor authentication.

Service-based—Also known as device activation, service-based two-factor authentication is automatically enabled for all orgs.

Policy-based—Admins enable policy-based two-factor authentication. It is an admin’s best tool to protect org user accounts.

Answer 257

A

WHERE AND WHEN they can log in

Network-based security limits where users can log in from, and when they can log in. This is different from user authentication, which only determines who can log in. Use network-based security to limit the window of opportunity for an attacker and to make it more difficult for an attacker to use stolen credentials.

Answer 258

A

Device activation tracks information about the devices from which users have verified their identity. Salesforce prompts users to verify their identity when they access Salesforce from an unrecognized browser or application. Device activation is an extra layer of security on top of username and password authentication.

When a user logs in from outside a trusted IP range from an unrecognized browser or app, Salesforce challenges the user to verify identity. Salesforce uses the highest-priority verification method available for each user. In order of priority, the methods are:

Push notification or location-based automated verification with the Salesforce Authenticator mobile app (version 2 or later) connected to the user’s account

U2F security key registered with the user’s account

Verification code generated by a mobile authenticator app connected to the user’s account

Verification code sent via SMS to the user’s verified mobile device

Verification code sent via email to the user’s registered email address

Answer 259

A

After logging in, a user establishes a session with the platform. Use session security to limit exposure to your network when a user leaves the computer unattended while still logged in. Session security also limits the risk of internal attacks, such as when one employee tries to use another employee’s session. Choose from several session settings to control session behavior.

You can control when an inactive user session expires. The default session timeout is two hours of inactivity. When the session timeout is reached, users are prompted with a dialog that allows them to log out or continue working. If they don’t respond to this prompt, they are logged out.

Answer 260

A

By default, Salesforce uses TLS (Transport Layer Security) and requires secure connections (HTTPS) for all communication. The Require secure connections (HTTPS) setting determines whether TLS (HTTPS) is required for access to Salesforce. If you ask Salesforce to disable this setting and change the URL from https:// to http://, you can still access the application. However, for added security, require all sessions to use TLS. For more information, see Modify Session Security Settings.

Answer 261

A

Login flows allow admins to build post-authentication processes to match their business practices, associate the flow with a user profile, and send the user through that flow when logging in. Salesforce directs users to the login flow after they authenticate but before they access your org or community. After users complete the login flow, they’re logged in to your Salesforce org or community. The login process can also log out users immediately if necessary.

Answer 262

A

Enhance or customize the login experience. For example, add a logo or login message.
Collect and update user data. For example, request an email address, phone number, or mailing address.
Interact with users, and ask them to perform an action. For example, complete a survey or accept terms of service.
Connect to an external identity service or geo-fencing service, and collect or verify user information.
Enforce strong authentication. For example, implement a two-factor authentication method using hardware, SMS, biometric, or another authentication technique.
Run a confirmation process. For example, have a user define a secret question, and validate the answer during login.
Create more granular policies. For example, set up a policy that sends a notification every time a user logs in during non-standard working hours.

Answer 263

A

FDA

Salesforce offers the following ways to use SSO.

Federated authentication using Security Assertion Markup Language (SAML) lets you send authentication and authorization data between affiliated but unrelated web services. You can log in to Salesforce from a client app. Salesforce enables federated authentication for your org automatically.

Delegated authentication SSO integrates Salesforce with an authentication method that you choose. You can integrate authentication with your LDAP (Lightweight Directory Access Protocol) server or use a token instead of a password for authentication. You manage delegated authentication at the permission level, not at the org level, giving you more flexibility. With permissions, you can require some to use delegated authentication while others use their Salesforce-managed password.Delegated authentication offers the following benefits.

Uses a stronger form of user authentication, such as integration with a secure identity provider
Makes your login page private and accessible only behind a corporate firewall
Differentiates your org from all other companies that use Salesforce to reduce phishing attacks
You must contact Salesforce to enable delegated authentication before you can configure it on your org.

Authentication providers let your users log in to your Salesforce org using their login credentials from an external service provider. Salesforce supports the OpenID Connect protocol, which lets users log in from any OpenID Connect provider, such as Google, PayPal, and LinkedIn. When an authentication provider is enabled, Salesforce doesn’t validate a user’s password. Instead, Salesforce uses the user’s login credentials from the external service provider to establish authentication credentials.

Answer 264

A

Connect for Office is a desktop client that integrates Salesforce with your PC. As an administrator, you can control which desktop clients your users can access as well as whether users are automatically notified when updates are available.

Answer 265

A

Two-Factor Authentication for API Logins

For each profile, you can require a verification code, also called a time-based one-time password, or TOTP. Users with the Two-Factor Authentication for API Logins permission use a verification code instead of the standard security token whenever it’s requested, such as when resetting the account’s password. Verification codes are generated by an authenticator app that users connect to their account.

Answer 266

A

Event

An event is anything that happens in Salesforce, including user clicks, record state changes, and measuring values. Events are immutable and timestamped.

Event Channel

A stream of events on which an event producer sends event messages and event consumers read those messages.

Event Subscriber

A subscriber to a channel that receives messages from the channel. For example, a security app is notified of new report downloads.

Event Message

A message used to transmit data about the event.

Event Publisher

The publisher of an event message over a channel, such as a security and auditing app.

Answer 267

A

RECORD = 4 = S(h)MOR

They’re listed in order of increasing access. You use org-wide defaults to lock down your data to the most restrictive level, and then use the other record-level security tools to grant access to selected users, as required.

Org-wide defaults specify the default level of access users have to each other’s records.

Role hierarchies ensure managers have access to the same records as their subordinates. Each role in the hierarchy represents a level of data access that a user or group of users needs.

Sharing rules are automatic exceptions to org-wide defaults for particular groups of users, to give them access to records they don’t own or can’t normally see.

Manual sharing lets record owners give read and edit permissions to users who might not have access to the record any other way.

Answer 268

A

With record-level security, if the org-wide defaults are anything less than Public Read/Write, you can open access back up for certain roles using the role hierarchy.

Answer 269

A

Only the record owner, and users above that role in the hierarchy, can view, edit, and report on those records.

Answer 270

A

Public Read Only:

ALL = view/report

OWNER/USERS ABOVE ROLE = edit

All users can view and report on records, but only the owner, and users above that role in the hierarchy, can edit them.

Answer 271

A

Public Read/Write

ALL = View/Edit/Report
All users can view, edit, and report on all records.

Answer 272

A

Controlled by Parent
A user can view, edit, or delete a record if she can perform that same action on the record it belongs to.

Answer 273

A

OWD Sharing is Private Read Only OR Public Read Only =

Open up with ROLES or SHARING RULES

When the org-wide sharing setting for an object is Private or Public Read Only, an admin can grant users additional access to records by setting up a role hierarchy or defining sharing rules. Sharing rules can only be used to grant additional access. They cannot be used to restrict access to records beyond what was originally specified with the org-wide sharing defaults.

Answer 274

A

Use the Grant Access Using Hierarchies checkbox to disable access to records to users above the record owner in the hierarchy for custom objects. If you deselect this checkbox for a custom object, only the record owner and users granted access by the org-wide defaults receive access to the records.

Answer 275

A

Even if Grant Access Using Hierarchies is deselected, some users—such as those with the “View All” and “Modify All” object permissions and the “View All Data” and “Modify All Data” system permissions—can still access records they don’t own.

Answer 276

A

Apex managed sharing allows developers to programmatically share records associated with custom objects.

When you use Apex managed sharing for any custom object, only users with the “Modify All Data” permission can add or change the sharing on that custom object’s records, and the sharing access stays the same even if the record owner changes. For more information, see Apex Sharing.

Answer 277

A

Disabling the Grant Access Using Hierarchies setting in your organization-wide default settings allows you to ignore the hierarchies when determining access to data.

Answer 278

A

You can only modify the Grant Access Using Hierarchies setting for custom objects.

Answer 279

A

Contacts that aren’t linked to an account are always private. Only the owner of the contact and administrators can view it.

Answer 280

A

TRUE

Contact sharing rules don’t apply to private contacts.

Answer 281

A

TRUE

Notes and attachments marked as private via the Private checkbox are accessible only to the person who attached them and to administrators.

Answer 282

A

TRUE

Events marked as private via the Private checkbox are accessible only by the event owner. Other users can’t see the event details when viewing the event owner’s calendar. However, users with the “View All Data” or “Modify All Data” permission can see private event details in reports and searches, or when viewing other users’ calendars.

Answer 283

A

Users above a record owner in the role hierarchy can only view or edit the record owner’s records if they have the “Read” or “Edit” object permission for the type of record.

Answer 284

A

FALSE

Visibility to users as a result of the Site User Visibility preference IS NOT inherited through the role hierarchy.

If a manager in the role hierarchy isn’t a member of a site, but their subordinate is, the manager doesn’t gain access to other members of the site. This only applies if Salesforce Experiences are enabled in your organization.

Answer 285

A

The ability to delete individual records is controlled by:

administrators
the record owner
users in a role hierarchy above the record owner
and any user who has been granted “Full Access.”

Answer 286

A

You must have “Read/Write” access to a record to be able to add notes or attachments to the record.

Answer 287

A

You must have at least “Read” access to a record to be able to add activities or other associated records to it.

Answer 288

A

the record owner
users in a role hierarchy above the record owner
and any user that has been granted “Full Access.”

Answer 289

A

If a user transfers ownership of a record, Salesforce deletes any manual shares created by the original record owner, which can cause users to lose access. When account ownership is transferred, manual shares created by the original account owner on child records, such as opportunities and cases, are also deleted.

Answer 290

A

Sharing model = VISIBILITY TO RECORDS

User/Object Permissions = CONTROL WHAT USERS CAN DO WITH RECORDS

While your sharing model controls visibility to records, user permissions and object-level permissions control what users can do to those records.

Answer 291

A

To restrict users’ access to records they don’t own that are associated with accounts they do own, set the appropriate access level on the role. For example, you can restrict a user’s access to opportunities they don’t own yet are associated with accounts they do own using the Opportunity Access option.

Answer 292

A

Regardless of the organization-wide defaults, users can, at a minimum, view the accounts in their territories. Also, users can be granted access to view and edit the contacts, opportunities, and cases associated with their territories’ accounts.

Answer 293

A

TRUE

The organization-wide default settings can’t be changed from private to public for a custom object if Apex code uses the sharing entries associated with that object. For example, if Apex code retrieves the users and groups who have sharing access on a custom object Invoice__c (represented as Invoice__share in the code), you can’t change the object’s organization-wide sharing setting from private to public.

Answer 294

A

OWD = Private (for campaigns)

Sharing Rule = Public Full access for Marketing Users

Sharing Rule = Read Only for Campaign Owners (in Biz Unit)

To segment visibility between business units while maintaining existing behavior within a business unit:

Set the campaign organization-wide default to Private.
Create a sharing rule to grant marketing users Public Full Access to all campaigns owned by users within their business unit.
Create a sharing rule to grant all non-marketing users in a business unit Read Only access to all campaigns owned by users in their business unit.

Answer 295

A

When a single user, such as a regional marketing manager, owns multiple campaigns and needs to segment visibility between business units, share campaigns individually instead of using sharing rules. Sharing rules apply to all campaigns owned by a user and don’t allow segmenting visibility.

Answer 296

A

Create all campaign sharing rules prior to changing your organization-wide default to reduce the effect the change has on your users.

Answer 297

A

To share all campaigns in your organization with a group of users or a specific role, create a sharing rule that applies to campaigns owned by members of the “Entire Organization” public group.

Answer 298

A

Minimize the number of sharing rules you need to create by using the “Roles and Subordinates” option instead of choosing a specific role.

Answer 299

A

TRUE

If campaign hierarchy statistics are added to the page layout, a user can see aggregate data for a parent campaign and all the campaigns below it in the hierarchy regardless of whether that user has sharing rights to a particular campaign within the hierarchy.

Therefore, consider your organization’s campaign sharing settings when enabling campaign hierarchy statistics. If you don’t want users to see aggregate hierarchy data, remove any or all of the campaign hierarchy statistics fields from the Campaign Hierarchy related list. These fields will still be available for reporting purposes.

Answer 300

A

TRUE

If the sharing model is set to Public Full Access for campaigns, any user can delete those types of records.

Answer 301

A

Campaign member sharing is controlled by campaign sharing rules. Users that can see a campaign can also see associated campaign members.

Answer 302

A

Orgs that use person accounts can modify the Organization-Wide Sharing Default for Contacts. This allows for flexibility in how you share business contacts, including the ability to define contact sharing rules and manually share business contacts.

Manually sharing contacts applies only to the business accounts because person accounts don’t have contacts. To share information about a person account, you must share the entire account.

Answer 303

A

In Salesforce orgs created before Spring ’20, when you first enable external organization-wide defaults, the default internal access and default external access are set to the original default access level. The only exceptions are User and newly created custom objects, which are set to Private by default.

In orgs created after Spring ’20, the default external access level is set to Private for all objects, unless the default internal access level is Controlled by Parent.

Answer 304

A

TRUE

A manager always has access to the same data as his or her employees, regardless of the org-wide default settings.

Answer 305

A

In the Organization Wide Defaults section, click Edit. Deselect Grant Access Using Hierarchies if you want to prevent users from gaining automatic access to data owned by or shared with their subordinates in the hierarchies.

Answer 306

A

TRUE

Regardless of your organization’s sharing settings, users can gain access to records they don’t own through other means such as user permissions like “View All Data,” sharing rules, or manual sharing of individual records.

Answer 307

A

TRUE

The Grant Access Using Hierarchies option is always selected on standard objects and isn’t editable.

Answer 308

A

If you disable the Grant Access Using Hierarchies option, sharing with a role or territory and subordinates only shares with the users directly associated with the role or territory selected. Users in roles or territories above them in the hierarchies won’t gain access.

Answer 309

A

If your organization disables the Grant Access Using Hierarchies option, activities associated with a custom object are still visible to users above the activity’s assignee in the role hierarchy.

Answer 310

A

Public Read/Write and Grant Access Using Hierarchies = TRUE

If a master-detail relationship is broken by deleting the relationship, the former detail custom object’s default setting is automatically reverted to Public Read/Write and Grant Access Using Hierarchies is selected by default.

Answer 311

A

TRUE

Record access granted to users via sharing sets isn’t extended to their superiors in the role hierarchy.

Answer 312

A

TRUE

Users at any role level can view, edit, and report on all data that’s owned by or shared with users below them in their role hierarchy, unless your org’s sharing model for an object specifies otherwise.

Answer 313

A

n Salesforce orgs created in Spring ’21 or later, you can create up to 5,000 roles. In orgs created before Spring ’21, you can create up to 500 roles and can contact Salesforce Customer Support to increase this limit.

Answer 314

A

TRUE

Every user must be assigned to a role, or their data won’t display in opportunity reports, forecast roll-ups, and other displays based on roles.

Answer 315

A

FALSE

Put all users that require visibility to the entire org at the highest level in the hierarchy.

Answer 316

A

FALSE

Create roles only for your current requirements. Don’t create temporary placeholder roles in anticipation of future needs.

Answer 317

A

FALSE

Don’t use reporting requirements to determine what hierarchy levels you need.

Answer 318

A

TRUE

When you change a user’s role, the sharing rules for the new role are applied.

Answer 319

A

FALSE

Salesforce Knowledge users CAN modify category visibility settings on the role detail page.

Answer 320

A

When an account owner isn’t assigned a role, the sharing access for related contacts is Read/Write, provided the organization-wide default for contacts isn’t Controlled by Parent. Sharing access on related opportunities and cases is No Access.

Answer 321

A

TRUE

To prevent disruptions, avoid changing the role hierarchy during business hours.

Answer 322

A

To avoid performance issues, Salesforce recommends that no single user owns more than 10,000 records of an object. For users who must own more than that number of objects, don’t assign them a role or place them in a separate role at the top of the hierarchy. It’s also important to keep that user out of public groups potentially used as the source for sharing rules.

Answer 323

A

To improve performance, minimize the number of levels in your role hierarchy. Eliminate roles that aren’t needed, and delete sharing rules that grant access to records already shared via the role hierarchy.

Answer 324

A

TRUE

The Managers in the Role Hierarchy related list shows all of the users above you in the hierarchy. These users have the same access to your data as you do—they have access to all data you own or that has been shared with you.

Answer 325

A

For each role in your hierarchy, Salesforce automatically creates sharing groups, which you can use in sharing rules and manual sharing:

Role—users in the role plus users in roles above it in the hierarchy

Role and Subordinates—users in the role plus users in roles above and below it in the hierarchy

Role and Internal Subordinates—users in the role, plus users in roles above and below it in the hierarchy, excluding portal or site users. This group is only available when Salesforce Experiences or portals are enabled for your organization.

Roles, Internal and Portal Subordinates—users in the role, plus users in roles above and below it in the hierarchy, including portal or site users. This group is only available when Salesforce Experiences or portals are enabled for your organization.

Answer 326

A

If territory management is enabled for your organization, each territory has sharing groups:

Territory—users in the territory plus users in territories above it in the hierarchy

Territory and Subordinates—users in the territory plus users in territories above and below it in the hierarchy

Answer 327

A

RECORD OWNER/FIELD VALUES

Sharing rules can be based on

who owns the record
on the values of fields in the record.

Answer 328

A

Each sharing rule has three components.

records, users, access

Answer 329

A

Salesforce recommends applying inherited rules to child territories.

When you add a parent territory to your territory hierarchy, it’s best to apply inherited account assignment rules to its child territories. Defining each territory hierarchy branch as its own “tree” makes the “siblings” at the same level mutually exclusive. That way, you prevent the rules engine from evaluating more branches of your hierarchy than what’s necessary, which improves performance.

Answer 330

A

Start at the lowest level of the territory hierarchy first, making changes there, and then moving up the hierarchy level by level. Using this method avoids having to recalculate access levels to accounts, opportunities, contacts, and cases for the same territories.

Answer 331

A

Salesforce recommends defining criteria on numeric fields, not string fields. And avoid defining numeric criteria as text.

Operators on string fields aren’t case-sensitive, which can affect performance. So instead of defining criteria on string fields, consider defining criteria on numeric fields.

Also, numeric fields defined as text slow down performance. So, for example, in a filter criterion for number of employees, enter 1000, not one thousand.

When you define assignment rules, make them as restrictive as possible. For example, avoid including lots of OR conditions. That way, Salesforce doesn’t assign too many accounts to a territory.

Create filter criteria that reflects these ratios to get better performance: <10K records and 3 territories per 1 user.

More than 10,000 records associated with a record can create performance inefficiencies. For example, 12,000 accounts assigned to a territory are probably too many.

For the ratio of number of territories to number of users assigned, the rule of thumb is 3 to 1.

And if you’re required to add more than 1,500 users to a territory, don’t use Setup. Manage user-to-territory assignment through the API.

Answer 332

A

You can set up Salesforce to run account assignment rules when an account is updated.

Because Salesforce runs the assignment rules for all your accounts even when just one was updated, performance can take a hit. To avoid performance slowdowns, use these methods with caution.

Answer 333

A

A rule identifies one or more characteristics you use to define that territory, and tells Enterprise Territory Management to assign accounts with those characteristics to that territory automatically. Accounts are assigned to territories according to your rules automatically on account creation or update only if your territory model is in Active state.

Answer 334

A

TRUE

Do not assign a rule to a territory if that rule is a child of another rule already assigned to the territory. Also, if a rule has Apply to Child Territories selected, do not assign the rule separately to child territories.

Answer 335

A

TRUE

Rules can work together within territories and child territories. For example, you create a territory called Western States, with child territories Washington, Oregon, and California. From the Western States territory record, you create a rule that assigns accounts in Washington, Oregon, and California to that territory. You apply that rule to child territories and then, from the California territory record, you create a rule that assigns accounts in California to the California territory.

For any child territories for the California territory, you don’t have to specify the state in the criteria if you mark the California territory rule as inheritable to child territories. Instead, you can use more specific criteria, such as ZIP code or industry.

Answer 336

A

Manual assignment is useful for accounts that have unique characteristics and therefore can’t be assigned by rules.

Answer 337

A

Before you activate a territory model, preview and validate its territory account assignments. Preview assignments by running assignment rules when the model is in Planning state. Also verify your manual assignments.

Answer 338

A

If you make changes to the rules for a territory, you must run rules again to view those changes. In this case, you may want to run rules on that territory only. To do so, navigate to the territory’s detail page, scroll to the Assignment Rules Defined in this Territory related list, and click Run Rules.

Answer 339

A

The Manage Territories permission:

Provides users access to territories in planning and archived state and to the list of accounts assigned to territories in planning and archived state.

Does not provide access to the accounts assigned to territories in planning and archived state. Only the account name and ID fields appear in the list. To run territory planning reports, users must get access to accounts via a method other than the permission.

Answer 340

A

TRUE

When an account is assigned to a territory, that territory’s users have access to the account. It’s easy to find out who those users are by looking at the account record.

Answer 341

A

Territories can have up to 15 assignment rules each.

Answer 342

A

On an opportunity record, you can assign and track the territory whose assigned sales reps work that opportunity. Manual territory assignments are controlled by your access to the opportunity’s assigned (parent) account. When you assign a territory to an opportunity, that opportunity is shared with all Salesforce users assigned to that territory’s parent in the territory model’s hierarchy.

Answer 343

A

TRUE

Users who have full access to an opportunity’s account can assign any territory from the active model to the opportunity.

Users who do not can assign only a territory that is also assigned to the opportunity’s account. (The same restriction applies to territory assignments made via Apex in system mode.) For manual territory assignments, Salesforce suggests opportunities assigned to the territory’s account, but users with full access can search for and assign any territory in the active territory model.

Answer 344

A

The opportunity territory assignment filter assigns territories to opportunities based on the filter logic in the Apex class.

Answer 345

A

Only Salesforce admins, opportunity owners, and users above the opportunity owners in the role hierarchy can manage filter logic exclusion by selecting or deselecting Exclude from the territory assignment filter logic on opportunities.

Answer 346

A

Cloning lets you make a copy of a territory model that you can use to test territory characteristics.

Answer 347

A

Only models in Planning, Active, or Archived state can be cloned. When cloning is complete, the new model is in Planning state.

Answer 348

A

If you’re cloning a territory model with assignment rules, make sure that any picklist values referenced in the assignment rules are valid. If you’ve deleted or replaced a picklist value that’s referenced in an assignment rule, the picklist value isn’t valid, and the cloning process fails.

Answer 349

A

When the process is complete, Salesforce sends you an email to let you know.

Answer 350

A

You can assign users to territories that belong to models in Active or Planning state, though assignments made within Planning state models are for planning purposes only. They don’t affect user access to records.

Answer 351

A

TRUE

The number of territories assigned to a user can impact performance. We recommend that you test thoroughly for performance issues, and if you observe any, reduce the number of territories per user.

Answer 352

A

Track user functions within territories by creating territory roles and assigning them to territory users as needed. For example, create roles such as Territory Owner, Sales Manager, Product Specialist, or Sales Representative. Users can even have different roles in different territories.

Answer 353

A

Add territory roles to the UserTerritoryAssociation object’s Role in Territory picklist so you can select roles for territory users.

The Role in Territory picklist you define can be used for all territories in Active or Planning state.

Answer 354

A

When you’re satisfied with the structure of your territory model and its territory account assignments, you’re ready to activate it. Remember that you can also maintain models in Planning and Archived states for further modeling and reference.

Answer 355

A

Only one model can be in the Active state at one time in your organization.

Answer 356

A

You can only activate a model that is in the Planning state.

Answer 357

A

After activating a model, you cannot reset it to Planning state: you can only set it to Archived state.

Answer 358

A

Other public groups
Permission Sets
Profiles
User assigned to specific territories
Roles

And users, of course.

Answer 359

A

Modify the org wide sharing setting for the Campaign Object
Modify the org-wide sharing setting for the Campaign Member object
Use a criteria-based sharing on the Campaign object to grant access to campaign members
Use a criteria based sharing rule defined on the Campaign Member object to grant access to campaign members

Keep lead and contact details private even when they’re added to campaigns. Let your marketing department see only the campaign member details that you want them to. Sharing rules for campaign members can inherit from lead and contact rules or from the campaign.

Where: This change applies to Lightning Experience, Salesforce Classic, and all versions of the mobile app in Professional, Enterprise, Performance, Unlimited, and Developer editions.

How: To let users see only the campaign members whose lead or contact records they have access to, in Sharing Settings choose Controlled by Lead or Contact. To let users who have access to a campaign see campaign member details, choose Controlled by Campaign.

Access provided by a user’s role or profile supersedes the organization-wide defaults.

Answer 360

A

Assignment Rules can be run directly from the territory hierachy.
The territory hierarchy determines the role hierarchy.
The territory hierarchy grants access to records based on ownership.
The territory hierarchy determines the forecast hierarchy for territory forecasts.
Territories can be created from the territory hierarchy.

Answer 361

A

What can Delegated Administrators NOT do?

1. Create profiles

Create users
Manage custom objects
Login as a specific user

Answer 362

A

How do you create an Exception Report?

Create a custom report type with a “without” filter

2. Create a cross filter on the report builder

Use an Exception report type
Create a cross filter on the custom report type

Answer 363

A

A custom object called Deliveries is created with a Master-detail relationship to Opportunities. Which report type is created?

None. A custom report type will need to be created manually.
Opportunities and Deliveries
Deliveries with Opportunities

4. Opportunities with Deliveries

Answer 364

A

Which feature is required to use Territory Management?

Advanced Currency Management
Collaborative Forecasting
Multiple Currencies

4. Customizable Forecasting

Answer 365

A

What are the three types of visibility with Data Categories?

None

2. Internal

All Categories

4. Custom

5. External

Answer 366

A

What Publisher Action cannot be Global?

Log a Call
Create

3. Update

Custom

Answer 367

A

How should a Workflow issue be properly monitored and Debugged?

Check the standard Debug Logs

2. Add a new monitored user and check the Debug Logs

Check the standard Workflow logs
Check the Time Based Workflow Log

Answer 368

A

What is an Article Type?

Each Article created will have a corresponding Article Type that controls its content.

2. An Article Type defines the structure and format of an article.

An Article Type defines the access and security of an article.
An Article Type defines which channel can access the article. Internal, Partner, Customer etc.

Answer 369

A

Andrew needs to import revenue quota data for Collaborative Forecasts and is using the Data Loader. What information must he include in the import file? (Choose 3)

User record ID
Start date of the forecast period
User full name
Quota amount
Quota opportunity

Answer 370

A

Tony is swamped and needs help. His manager suggested creating some delegated admins. If created what privileges can be given to the delegated admins? (Choose 3)

Modify the Role Hierarchy
Create and Edit Users
Assign Users to Specified Profiles
Modify Profile Permissions
Manage Custom Objects

Answer 371

A

For proper handling customers need to be sent to different departments based on which type of product they use, which Visual Workflow element should you use to route customers?

Step
Screen
Decision
Assignment

Answer 372

A

What objects are NOT supported when creating a custom report type for Collaborative Forecasts? (Choose 2)

Accounts
Forecasting Items
Forecasting Quotas
Forecasting Categories
Opportunities

Answer 373

A

The Chatter Free license is for users who don’t have Salesforce licenses but must have access to Chatter. These users can access standard Chatter items such as people, profiles, groups, and files, but they can’t access any Salesforce objects or data. Chatter Free users can also be Chatter moderators.

Chatter Free users don’t see tabs like other Salesforce users. Chatter Free users access feeds, people, groups, and files using the App Launcher in Lightning Experience. In Salesforce Classic, users access these features from links in the page sidebar.

Salesforce administrators can upgrade a Chatter Free license to a standard Salesforce or Lightning Platform Starter license at any time. You can’t convert a standard Salesforce, Lightning Platform Starter, or Chatter Only license to a Chatter Free license.

Answer 374

A

Platform:

Designed for users who need access to one custom app but not to standard CRM functionality. Lightning Platform - One App users are entitled to most of the same rights as Salesforce Platform users, plus they have access to an unlimited number of custom tabs. But they’re limited to one custom app, which is defined as up to 10 custom objects. They’re also limited to read-only access of the Accounts and Contacts objects. Push Topic object read permission isn’t available.

NOTE Users with this license can only view dashboards if the running user also has the same license.

Each license provides an extra 20 MB of data storage and 100 MB of file storage, regardless of the Salesforce edition.

NOTE To view articles, a user must have the AllowView Knowledge permission on their profile. But this permission is off for default profiles. To give a user the AllowView Knowledge permission on their profile, activate the permission on a cloned profile and assign the cloned profile to the user.

Answer 375

A

Chatter External

This license is for users who are outside of your company’s email domain. These external users, also called customers, can be invited to Chatter groups that allow customers. Customers can access information and interact with users only in the groups they’re invited to. They have no access to Chatter objects or data. Chatter External users can view user profiles, but they can’t edit them.

Answer 376

A

The Chatter Only license is also known as the Chatter Plus license. It’s available only to existing Chatter Plus customers. The Chatter Plus license is for users who don’t have Salesforce licenses but must have access to Chatter and some additional Salesforce objects. Chatter Plus users can be Chatter moderators and have access to standard Chatter people, profiles, groups, and files pages. They can also

View Salesforce accounts and contacts
Use Salesforce CRM Content, Ideas, and Answers
Access dashboards and reports
Use and approve workflows
Use the calendar to create and track activities.
View and modify up to 10 custom objects
Add records to groups

If you’re an existing Chatter Plus customer, you can buy more Chatter Plus licenses, or you can upgrade to Lightning Platform Starter.

By default, the tabs for standard Salesforce objects are hidden from Chatter Plus users. Expose these tabs if you want to make them available to Chatter Plus users. For more information on Chatter Plus users, see Chatter Plus Frequently Asked Questions.

Answer 377

A

Lightning Platform Starter (for Partner and Customer Sites)

The Lightning Platform Starter license is for users in Experience Cloud sites who must have access to Chatter and a wide variety of Salesforce objects. Lightning Platform Starter users can be Chatter moderators and have access to standard Chatter people, profiles, groups, and files pages. They can also interact with

Accounts
Assets
Cases
Contacts
Dashboards (read only)
Documents
External Objects (Salesforce Connect)
Events and Calendars
Ideas
List Views
Notes and Attachments
Reports
Tasks
Work Orders
Work Order Line Items

Answer 378

A

Sharing Settings

Answer 379

A

TRUE

Org-wide defaults control the access to other users’ data.

Answer 380

A

Based on Record Owner
Based on Criteria

Answer 381

A

Roles
Roles and Subordinates
Public Groups

Answer 382

A

No - a sharing rule must get created for that to work

Answer 383

A

Public Groups, Roles, Roles and Subordinates

Answer 384

A

Anyone in the chosen Roles for the group and anyone above them will have access to the records.

Brainscape's Knowledge GenomeTM

Security and Access: 20% Flashcards

Brainscape's Knowledge Genome^TM