Sharing and Visibility Wi22 Fullset Ordered

Question 1

A custom invoice object has been created with a Master-detail relationship to Account. The Account receivable (AR) team needs access to Invoices. AR users do not own nor have access to Account records. Account OWD is set to Private. The AR team is unable to find Invoices in List views, Reports, nor in Global Search. The Architect has been asked to help troubleshoot.

What could be the issue preventing AR team members from seeing invoices?

A. A sharing rule is missing to share Invoices to the AR team.

B. The AR team profile needs to be assigned an Invoice Page layout.

C. A sharing rule is missing to share Accounts to the AR team.

D. The Accounts receivable profile does not have read Permission to the Invoice Object.

Answer 1

C. A sharing rule is missing to share Accounts to the AR team.

Question 2

A custom ServiceFeedback object is used to collect partner feedback. ServiceFeedback records should be available to all internal employees. The OWD is set to Private for external users so partners cannot see feedback from other partner users.

How can the Architect give access to all internal employees?

A. Create a trigger on ServiceFeedback to change ownership to an internal employee.

B. Ensure all the internal users are above the partners in the role hierarchy.

C. Create an Owner based sharing rule for all ServiceFeedback records owned by Partners.

D. Set OWD, for Internal Users to Public Read Only.

Answer 2

D. Set OWD, for Internal Users to Public Read Only.

Question 3

A junior Account manager owns an account and creates a new opportunity to manage a complex deal. She needs the help of the product specialist and solution engineer. Given the size of this deal, she knows the account is likely to be reassigned to a senior account manager in the near future.

What is the optimal way for the junior account manager to share the opportunity, given the private sharing model?

A. Manual Share on the Opportunity.

B. Opportunity Team.

C. Manual share on the Account.

D. Create an Owner-based sharing rule.

Answer 3

B. Opportunity Team.

Question 4

A sales rep (John) at Universal Containers (UC) requested to update information in an account record where he has READ only access. John requested the EDIT access permission from the owner of the record (Paul). Paul manually shared the record with John. Assuming the OWD of the Account object is Public Read-Only, what is the impact in the system?

A. New AccountShare record is created. Row Cause is “Manual” and Access Level is “Read/Write”.

B. Existing AccountShare record is updated. Row Cause is “Owner” and User/Group is “John”.

C. New AccountShare record is created. Row Cause is “Owner” and Access Level is “Full”.

D. Existing AccountShare record is updated. Row Cause is “Manual” and Access Level is “Read/Write”.

Answer 4

A. New AccountShare record is created. Row Cause is “Manual” and Access Level is “Read/Write”.

https://developer.salesforce.com/docs/atlas.en-us.api.meta/api/sforce_api_objects_accountshare.htm

Question 5

A sales rep at Universal Containers (UC) has manually shared an Opportunity record with internal pre-sales users. After some time, the sales rep moved to another position and all opportunities records that were owned were transferred to a new sales rep. What happened to the internal pre-sales users access to the opportunity?

A. They still have access to the record due to inherited sharing.

B. They still have access to the record due to implicit sharing.

C. They will no longer have access to the record.

D. They still have access to the record due to team access.

Answer 5

C. They will no longer have access to the record.

Question 6

A sales rep at Universal Containers (UC) is a member of the Default Opportunity team for an account manager. The account manager created an opportunity and the sales rep is added to that Opportunity team.

The sales rep is complaining about no longer having access to an opportunity record that the sales rep was helping with.

What is the cause of this problem?

A. The Account team was changed and consequently the Opportunity team members were replaced by the Account team members.

B. The Sales rep was manually removed from the Opportunity team.

C. The Sales rep was removed from the Opportunity team in another opportunity record of the same account.

D. The opportunity owner can enable/disable if the “Default Opportunity team” is able to access the record.

Answer 6

B. The Sales rep was manually removed from the Opportunity team.

Question 7

After setting up Customer Community and enabling collaboration, the architect realizes that customers are only seeing Chatter posts from other customers in their account.

What should the architect do to allow viewing Chatter posts from all customers?

A. Enable Community User Visibility.

B. Enable Chatter Super User.

C. Enable Internal Users Visibility.

D. Set View All for Chatter posts.

Answer 7

A. Enable Community User Visibility.

La A o la D?

For Community User Visibility, deselect the checkbox to allow users to be seen only by themselves and their superiors. Select the checkbox to allow community users to be seen by all other users in their communities.

Question 8

After testing and deploying a new trigger that creates a related order when an opportunity is closed, the Architect begins receiving complaints of permission error messages appearing when closing an opportunity.

How did this error occur?

A. Trigger is using IsCreateable() Apex method and the user doesn’t have Create permission on the Order object.

B. The trigger handlers class does not use any sharing keywords and the user does not have access to the orders related to the opportunity.

C. The trigger should be using RunAs() when creating the order.

D. The trigger handler class is using “with sharing” and the user does not have access to the orders related to the opportunity.

Answer 8

D. The trigger handler class is using “with sharing” and the user does not have access to the orders related to the opportunity.

Question 9

An External Object is created to show Invoices from an external accounting system. When viewing the External Object, a user should only access invoice records the user is authorized to see.

What two actions are required to achieve the above requirements?

Choose 2 answers

A. Create an owner based sharing rule to grant visibility to the Invoice object.

B. Setup External Object to use OAuth to connect to the Accounting system.

C. Grant access to the External Object to only the Account Manager profile.

D. Restrict access to data in the accounting system.

Answer 9

B. Setup External Object to use OAuth to connect to the Accounting system.

D. Restrict access to data in the accounting system.

Question 10

Assuming Person Account is enabled in a Salesforce organization, which three objects can be configured as “Controlled by Parent” in Sharing Settings?

Choose 3 answers

A. Opportunity

B. Order

C. Asset

D. Contact

E. Case

Answer 10

B. Order

C. Asset

D. Contact

Question 11

At Universal Containers there is a team of auditors distributed through the organization that all need access to high-value Opportunities.

With a Private sharing model, which two options should an architect recommend when designing a solution for this requirement?

Choose 2 answers

A. Put the auditors as the highest level of the role hierarchy.

B. Add the auditors to the default Opportunity Team.

C. Create a public group and assign the Auditors to the group.

D. Create a criteria-based sharing rule to give access to the public group for high-value Opportunities.

Answer 11

C. Create a public group and assign the Auditors to the group.

D. Create a criteria-based sharing rule to give access to the public group for high-value Opportunities.

Question 12

At Universal Containers, Accounts and Contacts are normally visible to all employees, and Proposals (custom object) are visible to the Account owner and managers. However, some Proposals are considered confidential and are managed by a Strategic Proposals team. These Proposals should not be visible to anyone in the Sales group other than the owner and the strategic team.

How should the architect design for this requirement?

A. Proposal Owner set to the Strategic Deals Team Queue and create an owner-based sharing rule to grant visibility to the Account owner.

B. Proposal Owner set to the Strategic Deals Team Queue and set the Account relationship to Master-Detail.

C. Disable Grant Access Using Hierarchies and set an Owner-Based Sharing rule for Strategic Deals team.

D. Disable Grant Access Using Hierarchies and set a Criteria-Based Sharing rule for Strategic Deals team.

Answer 12

D. Disable Grant Access Using Hierarchies and set a Criteria-Based Sharing rule for Strategic Deals team.

Question 13

Besides their own team accounts, sales managers at Universal Containers need to have READ access to all accounts of the same segment in other countries. Role hierarchy was implemented accordingly (based on countries), but a sales manager in the US is complaining that he cannot view account records of the same segment in Canada. What should be done to grant access in a proper way?

A. Create owner-based sharing rule to grant access to account records that have the same segment to all sales manager roles.

B. Change the role hierarchy and put all of the sales managers in the US and Canada in the same role.

C. Create criteria-based sharing rules to grant access to account records that have the same segment to all sales manager roles.

D. Create a public group and include all accounts of the same segment and grant access through a permission set.

Answer 13

A. Create owner-based sharing rule to grant access to account records that have the same segment to all sales manager roles.

C?

Question 14

Bob uploads a PDF to his Files Home private library.

Who can view this file?

A. Bob and users above Bob in the role hierarchy

B. Bob and users with View All Data permission

C. Bob and users with Modify All Data permission

D. Only Bob

Answer 14

D. Only Bob

Question 15

By default, how many roles are created when the first external user is created on a partner account?

A. 0

B. 3

C. 2

D. 1

Answer 15

D. 1

Question 16

In order to allow community users to collaborate on Opportunities, which license type must the users be given?

A. Customer Community

B. Customer Community Plus

C. Partner Community

D. Sales Community

Answer 16

C. Partner Community

Question 17

Jane, a support representative at Universal Containers, created a report to view all her open cases that have been created in the past 7 days and saved the report in the “Private Reports” folder.

Who can view and run the report?

A. The report owner and any users who have been given access to the “My Private Reports” folder

B. The report owner and anybody in the role hierarchy above the report owner

C. The report owner

D. The report owner and users with the “View All Data” permission

Answer 17

C. The report owner

Question 18

Mary is Joe’s manager in the role hierarchy. The OWD for a custom Invoice object is Public Read Only and Mary’s profile is not granted the Read permission for the Invoice object.

What action can Mary take on Joe’s Invoice records?

A. View Only

B. None

C. Read/Write

D. Edit Only

Answer 18

B. None

Question 19

Sales executives at Universal Containers (SC) want to create list views to filter opportunities for large at-risk Opportunities. These list views should only be available to certain executives that specialize in closing problematic deals.

How can UC solve this requirement?

A. Share the List Views with the appropriate Role in the Role Hierarchy.

B. Share the List Views with the appropriate Public Group.

C. Share the List Views with the appropriate individual users.

D. Share the List Views with the appropriate Queue.

Answer 19

B. Share the List Views with the appropriate Public Group.

Question 20

Sales managers at Universal Containers (UC) have requested viewing customer invoices in Salesforce. Invoice data is mastered in the ERP system. The architect at UC decided to surface the customer invoices in salesforce using external objects and did the following:

• Configured an external object called Invoice.
• Created a lookup relationship between the account and the invoice.

How can the architect grant the sales managers access to the customer invoices data?

A. By creating sharing rules to share the invoices records with users in sales managers roles.

B. By creating manual sharing to share invoices with relevant sales managers.

C. By controlling the invoices object permissions on the sales manager’s profile.

D. By creating a sharing set to share invoices with users in sales manager role.

Answer 20

C. By controlling the invoices object permissions on the sales manager’s profile.

Question 21

Sales managers want their team members to help each other close Opportunities. The Opportunity and Account organization-wide defaults are private. To grant Opportunity access to sales reps on the same team, ownership-based sharing rules were created for each team.

What is the side effect of this approach?

A. All sales reps will have Read access to Accounts for all Opportunities

B. Sales Reps on the same team will have Edit access to the Accounts for Opportunities owned by their team members.

C. All sales reps will have Read access to all Accounts.

D. Sales reps on the same team will have Read access to the Accounts for Opportunities owned by their team members.

Answer 21

D. Sales reps on the same team will have Read access to the Accounts for Opportunities owned by their team members.

Question 22

Sales Operations at Universal Containers (UC) has created Public Report and Dashboard folders for sales managers that report to the VP of Sales. Sales Operations currently spends a few hours each month updating users that should have access to edit items in these folders.

In which two ways can UC grant access to sales managers to automate access to these Reports and Dashboards folders?

Choose 2 answers

A. Share the folders lowest roles in the Role Hierarchy, superiors will get access automatically.

B. Share the folders with the “VP of Sales” Role and Subordinates.

C. Share the folders with the “Sales Managers” Queue.

D. Share the folders with a “Sales Managers” Public Group.

Answer 22

B. Share the folders with the “VP of Sales” Role and Subordinates.

D. Share the folders with a “Sales Managers” Public Group.

Question 23

Sales Operations at Universal Containers (UC) wants to create list views to filter opportunities for certain geographies. In which two ways can UC hide list views that are not relevant to an individual user since there will be over 50 list views?

Choose 2 answers

A. Share the list views with the appropriate queue.

B. Share the list views with the appropriate role in the role hierarchy.

C. Share the list views with the appropriate individual users.

D. Share the list views with the appropriate public group.

Answer 23

B. Share the list views with the appropriate role in the role hierarchy.

D. Share the list views with the appropriate public group.

Question 24

Sales reps at Universal Containers (UC) complain about the manual activities they need to perform in order to grant access to supporting internal users (legal, engineering, finance, and a forth) for customer records when they need help. In general, the sales reps involved in the deals will not change.

How Can a Salesforce architect help UC to Improve sales reps productivity?

A. Create a criteria-based sharing rule to grant access to other users.

B. Create a permission set with “View all data” and assign to supporting users.

C. Create a public group and replace the account ownership with it.

D. Leverage default Account team.

Answer 24

D. Leverage default Account team.

Question 25

Susan posts a file to the Chatter feed for a record of an object which OWD is private.

Which two statements accurately describe who can view the file by default?

Choose 2 answers.

A. Susan and users with the View All Data permission.

B. Susan and users with access to the record.

C. Susan and users with a shared chatter post link to the file.

D. Susan only.

Answer 25

A. Susan and users with the View All Data permission.

B. Susan and users with access to the record.

Question 26

The architect at Universal Containers is trying to ensure that security vulnerabilities are not present within the Salesforce organization. What two tests should the architect verify?

Choose 2 answers

A. Test for SOQL Injection.

B. Test Cross-Site Scripting on Apex queries.

C. Test Cross-Site Scripting on custom pages.

D. Test for invalid user access attempts.

Answer 26

A. Test for SOQL Injection.

C. Test Cross-Site Scripting on custom pages.

Question 27

The architect has a requirement to create a criteria-based sharing rule based on the customer Social Security number. However when setting up the rule in Contact Sharing, the field is not shown on the list of available fields.

What might cause this?

A. Text fields with validation rules are not available for sharing rules.

B. The architect does not have permission to Compliance fields.

C. The field has been configured for encryption.

D. The architect’s profile does not have Field level Security (FLS) for this field.

Answer 27

C. The field has been configured for encryption.

Question 28

The Corporate Identity and Access Team needs to audit User setup in the Salesforce org. What two permissions should be granted to this team so they can perform their audit?

Choose 2 answers

A. View All Data

B. View permission on the User object

C. View Setup and Configuration

D. View All Users

Answer 28

C. View Setup and Configuration

D. View All Users

Question 29

The finance team at Universal Containers usually does not need access to Account and Contact records. A finance analyst was temporarily given opportunity access for a big deal to help with tax calculation. She can now also access Account and Contact records as well.

Which two reasons could be causing this issue?

Choose 2 answers

A. Account records can be accessed due to role hierarchy.

B. Contact records can be accessed due to implicit sharing from Account.

C. Account records can be accessed due to implicit sharing from Opportunity.

D. Contact records can be accessed due to implicit sharing from Opportunity.

Answer 29

B. Contact records can be accessed due to implicit sharing from Account.

C. Account records can be accessed due to implicit sharing from Opportunity.

Question 30

The sales managers at the Universal Containers (UC) requested their teams to define each user’s role on their accounts in order to provide an easy way to establish accountability and collaboration. Sales managers also requested that sales associates should only get the following permissions:

● Read access to the accounts.

● Read access to cases related to the accounts

● No access to deals related to the accounts

The sales associates may be granted access to opportunities when needed.

Assuming the overall sharing model of the organization is private and no sharing rules are configured on the account object. How can an Architect achieve these requirements?

A. Use Account teams and use Sharing rules to share cases with sales associates. No change required to the opportunity object

B. Use Account teams, Case teams. No configuration required for the opportunity object.

C. Use Account teams, Opportunity teams, and Case teams.

D. Use Account Teams to define access to accounts as well as opportunities and cases related to accounts.

Answer 30

D. Use Account Teams to define access to accounts as well as opportunities and cases related to accounts.

Account Owners (or Admins) must grant record-level access to account team members for the Account object, and Related Opportunities, Contacts, and/or Cases.

Question 31

The sales managers in Japan have asked the sales manager in Australia to assist them closing their deals. How are these requirements achieved?

A. Use a sharing set to give the sales manager access to the deals.

B. Assign the sales manager View All on the opportunity object.

C. Create ownership-based sharing rule.

D. Use opportunity teams to automatically add the sales manager as a team member.

Answer 31

D. Use opportunity teams to automatically add the sales manager as a team member.

Question 32

To grant Universal Containers sales managers access to shipment records properly, it was necessary to leverage Apex managed sharing. The IT team is worried about improper access to records.

Which two features and best practices should a Salesforce architect recommend to mitigate this risk?

Choose 2 answers

A. Use runAs system method in test classes to test different users and profiles.

B. Use With Sharing keyword in Apex classes to assure record visibility will be followed.

C. Use isShareable keyword in Apex classes to assure record visibility will be followed.

D. Use isAccessible keyword in Apex classes to assure record visibility will be followed.

Answer 32

A. Use runAs system method in test classes to test different users and profiles.

B. Use With Sharing keyword in Apex classes to assure record visibility will be followed.

Question 33

To reduce the case time resolution and improve customer satisfaction, Universal Containers (UC) wants to allow specialized marketing consultants to have edit access to Case records of VIP customers. These cases should be visible only to the support rep who owns the case and the marketing consultants.

Which recommendation should a Salesforce architect give to allow this scenario?

A. Case organization-wide default Public Read Only and Case Team with Read permission.

B. Case organization-wide default Private and Case Team with Read/Edit permission.

C. Case organization-wide default Private and Account Team with Read/Edit permission.

D. Case organization-wide default Private, role hierarchy, and Read Only ownership-based sharing rule.

Answer 33

B. Case organization-wide default Private and Case Team with Read/Edit permission.

Question 34

Universal Computers (UC) is looking to expand its delivery capabilities through a network of distributors that use a Partner Community license. UC employees currently can view all delivery records through the organization-wide default (OWD) setting of Public Read Only.

Which approach would an architect recommend to limit the records a distributor can see?

A. Create an ownership-based sharing rule to grant access to the distributor.

B. Remove Read permission from the distributor profile.

C. Set the External OWD to Private for the Delivery object.

D. Create a criteria-based sharing rule to grant access to the distributor.

Answer 34

C. Set the External OWD to Private for the Delivery object.

Question 35

Universal Containers (SC) has created a public group with certain Sales Engineers to help on complex deals and a sharing rule to grant access to these opportunities. Opportunity OWD is private.

What is the impact of these sharing settings?

A. Sales Engineers direct reports will also have access to these records.

B. Sales Engineers that have a similar role of the Sales Engineers of the public group will also have access to the records.

C. Sales Engineers Managers and their managers in the role hierarchy will also have access to these records.

D. Subordinates of Managers who have Sales Engineers in the public group will also have access to these records.

Answer 35

C. Sales Engineers Managers and their managers in the role hierarchy will also have access to these records.

Question 36

Universal Containers (UC) delivers training and courses to students and companies. UC is implementing a Salesforce Customer Community for its students granting them a Customer Community license. As part of the community requirements, UC asked to give students access to cases that are related to their account in the UC community.

What is the optimum sharing technique that can achieve the requirements?

A. Create a sharing rule to share cases with the students.

B. Create a share group to share cases with the students.

C. Create a sharing set to share cases with the students.

D. Use Apex sharing to share cases with the students.

Answer 36

C. Create a sharing set to share cases with the students.

Question 37

Universal Containers (UC) delivers training in 500 different regions. The UC Operations Users team manage course setup, scheduling, and trainer setup. The Operations Users team members work at a regional level and report to an Operations manager. The Operations manager requested access to edit ALL scheduled courses owned by the Operation Users team.

How can this be achieved?

A. The Operations manager will get access to the scheduled courses by granting the Operations manager modify ALL on scheduled courses.

B. The Operations manager will get access to the scheduled courses owned by the Operations Users team defined in the role hierarchy.

C. The Operations manager will get access to the scheduled courses by creating an ownership-based sharing rule and share the scheduled courses with the Operations manager.

D. The Operations manager will get access to the scheduled courses by creating a public group and add the Operations manager and the Operations Users team to the public group.

Answer 37

C. The Operations manager will get access to the scheduled courses by creating an ownership-based sharing rule and share the scheduled courses with the Operations manager.

or B, probably C

Question 38

Universal Containers (UC) enables customers to manage issues using a Customer Community license. The Case external organization-wide default is set to Private. Currently community users can only see cases they created.

What can be done to allow community users to see all cases for their account?

A. Write an Apex class to create manual shares for these users.

B. Ensure the criteria-based sharing rule applies to all users.

C. Create a sharing set for these customers.

D. Upgrade the licenses to Customer Community Plus.

Answer 38

C. Create a sharing set for these customers.

Question 39

Universal Containers (UC) has 200 distributors that use Partner Community licenses. Partners cannot see each other’s data, but UC is also trying to give more visibility to data for certain individuals at a distributor.

How can an Architect give users in the partner user role access to all Case and Container records owned by any user, regardless of role, at the same distributor?

A. Create an ownership-based sharing rule.

B. Create sharing sets.

C. Create a Permission Set granting “View All” permission to Case and Container records.

D. Give Super User permission to the individual partner users.

Answer 39

B. Create sharing sets.

• Super users can get insights into the records of other partner users who are at their role level or below them in the role hierarchy*
• Within the same partner - Sharing sets*
• Between partners - Sharing rules*

Question 40

Universal Containers (UC) has 600 sales reps. UC has a rollout plan to deploy Salesforce in 3 weeks. At the end of the second week, they received a “User Role Limit Exceeded” error. After investigation, they discovered that during the user provisioning process, a new role was generated for every new user.

Which two recommendations could solve this problem?

Choose 2 answers.

A. Review the user provisioning process to not automatically create a user role for any new user.

B. Remove role hierarchy from salesforce org and control the record access using apex managed sharing.

C. Contact Salesforce support and request to increase the number of user roles allowed.

D. Create an Apex class to replace the User Roles by generic one as soon as they are created.

Answer 40

A. Review the user provisioning process to not automatically create a user role for any new user.

C. Contact Salesforce support and request to increase the number of user roles allowed.

Question 41

Universal Containers (UC) has a business unit that uses a custom object to track requests which demands a high level of internal team collaboration. Although all requests must have an owner, all employees are required to collaborate on requests.

Which recommendation should a Salesforce architect provide to optimize the solution and meet these requirements?

A. Set the Request object’s OWD to Public Read/Write.

B. Set the Request object’s OWD to Private and grant Modify All Data permission on all Profiles for the Request object.

C. Set the Request object’s OWD to Private and criteria-based sharing rule to share all Request records with all internal users.

D. Set the Request object’s OWD to Public Read Only and configure role hierarchy.

Answer 41

A. Set the Request object’s OWD to Public Read/Write.

A y C hacen lo mismo pero la A es más optima, la C requiere de sharing rules?

Question 42

Universal Containers (UC) has a custom Apex class that enforces a business process and updates opportunities. UC has noticed that fields with field-level security permission of read only on certain users’ profiles are being updated by this class.

How should the architect fix this problem?

A. Add With Sharing keyword to the class.

B. Use the IsUpdateable() Apex method to test each field prior to allowing update.

C. Put the code in an inner class that uses the With Sharing keyword.

D. Use the WITH SECURITY_ENFORCED keyword in the SOQL statement.

Answer 42

B. Use the IsUpdateable() Apex method to test each field prior to allowing update.

WITH SECURITY_ENFORCE es solo para lectura, no valdría porque tiene permiso de lectura en los campos afectados.

Question 43

Universal Containers (UC) has a custom object to track the internal net promoter score (NPS) for all its employees.

How can UC ensure that NPS records cannot be accessed by an individual employee’s manager?

A. Use Apex sharing to remove NPS object share records for Manager Profiles

B. Remove Create, Read, Edit and Delete from Manager Profiles and Permission sets.

C. Set organization-wide default to Private and uncheck the Access Using Hierarchies option for the NPS object

D. Create a criteria-based sharing rule to remove access to Manager role and above in the Role Hierarchy

Answer 43

C. Set organization-wide default to Private and uncheck the Access Using Hierarchies option for the NPS object

Question 44

Universal Containers (UC) has a mostly private organization-wide default (OWD), as it is a core principle of UC to respect client data privacy. UC has implemented complex processes for granting access to Opportunity data. A few key members of the Sales Reporting team need to always be able to see, but not change, Opportunity data for all Opportunities.

What should an architect recommend as an approach to meet these requirements?

A. Create a Permission Set that grants “View All Data” Permission.

B. Make Opportunity OWD read-only.

C. Give “View All Data” Permission to the Sales Reporting Profile.

D. Create a Permission Set that grants “View All” permission for Opportunity.

Answer 44

D. Create a Permission Set that grants “View All” permission for Opportunity.

Question 45

Universal Containers (UC) has a partner community for its 200 distributors. UC customer accounts are assigned an individual distributor. The organization-wide default setting for the custom Delivery object is private.

How can an architect advise UC to grant all users at a distributor access to delivery records for all customers assigned to a particular distributor?

A. Create a criteria-based sharing rule that shares delivery records matching a distributor to the Distributor role in the role hierarchy.

B. Create a Sharing Set for the Distributor to grant access to the Delivery object.

C. Create a criteria- based sharing rule that shares delivery records matching the Distributor to users of a Public Group created for the distributor.

D. Give ownership of the delivery record to a distributor user.

Answer 45

B. Create a Sharing Set for the Distributor to grant access to the Delivery object.

Question 46

Universal Containers (UC) has a private Organization-Wide Defaults (OWD) model for the Account object and needs to control the access of records and fields according to these requirements:

• Sales reps can view/edit only their own records and cannot access the field “segment” in account page.
• Service reps need to view all accounts but cannot edit any information.
• Sales managers can modify any account of reps reporting to them.
• Service managers can modify any account.

How can a Salesforce architect provide an optimal solution for this scenario?

A. Use profiles, sharing rules, and change OWD to public read-only.

B. Use profiles, manual sharing, and field-level security.

C. Use profiles, permission sets, and field-level security.

D. Use profiles, permission sets, role hierarchy, and field-level security.

Answer 46

D. Use profiles, permission sets, role hierarchy, and field-level security.

Question 47

Universal Containers (UC) has a team that analyzes customer orders looking for fraud. This team needs access to Invoice records (Custom object, Private OWD). UC has complex rules to control user access. The Salesforce Architect recommended using Apex managed sharing to meet these requirements.

Which two recommendations should a Salesforce Developer consider when implementing the changes?

Choose 2 answers

A. Use “Without Sharing” keyword to make sure record visibility will be considered.

B. Use “With Sharing” keyword to make sure record visibility will always be considered.

C. Use “With Sharing” keyword to enforce field-level security.

D. Use runAs system method to test different users accessing these records.

Answer 47

B. Use “With Sharing” keyword to make sure record visibility will always be considered.

D. Use runAs system method to test different users accessing these records.

Question 48

Universal Containers (UC) has Affiliates who sell containers in countries where UC does not have a local office. UC has leveraged the Partner Community to manage the sales cycle. One of their affiliates has exponentially grown in the last years and restructured its internal sales team with the following structure:

Sales VP -> Director of Sales -> Sales Manager -> Sales Reps

UC would like to have the ability to open up access to the sales opportunities according to the above structure.

What is the main problem a Salesforce Architect will face to provide a solution?

A. Super User does not work in Partner Community.

B. The Channel Manager Role cannot be shared with Partner Community.

C. Partner Community does not support Role Hierarchy.

D. Partner User Roles are limited to three levels.

Answer 48

D. Partner User Roles are limited to three levels.

Question 49

Universal Containers (UC) has created a custom Invoice object. Standard sales users at UC can see the records in search layout, but when they click to view the detail, only record name, created date, and last modified date are shown. When the system admin accesses it, he or she sees the full record detail with many more data fields.

What is the likely cause of this issue?

A. Sales users profile does not have access to the remaining fields.

B. Page layout assigned to sales user profile has only read-only access to the fields.

C. Org-wide sharing settings have been set to Private and need to be adjusted to Public Read/Write.

D. A role-based sharing is missing and should be added for the sales user’s role to grant access to the fields.

Answer 49

A. Sales users profile does not have access to the remaining fields.

Question 50

Universal Containers (UC) has implemented Customer Community with customer community plus licenses for their distributors. Some distributors requested granting specific community users (agents) to view cases submitted by other agents of the same distributor.

Which feature only supports these requirements?

A. Partner community admin

B. Partner super user

C. Permission set to grant community admin permission.

D. Delegate external user

Answer 50

B. Partner super user

Super users can access data owned by other partner users who have the same role or a role below them. Super user access applies to cases, leads, custom objects, and opportunities only.

Question 51

Universal Containers (UC) has implemented Customer Community with customer community licenses for their customers. UC requested that any record owned by its customers should be accessible by UC users in the customer support role.

How can an Architect configure the system to support the requirements?

A. Share Group

B. Apex Sharing

C. Sharing Set

D. Sharing Rule

Answer 51

A. Share Group

Question 52

Universal Containers (UC) has implemented Customer Community with customer community plus license for its distributors. Retail distributors have part-time agents who work for multiple distributors. Those agents should have access to other distributor accounts as well.

What can be configured to grant agents access to different distributor accounts?

A. Use Apex sharing to share distributor accounts with agents using the Account Share table.

B. Use share group to share distributor accounts with agents who have account contact relationship.

C. Create sharing rules to share distributor accounts with agents.

D. Create sharing set to share distributor accounts with agents using account contact relationship.

Answer 52

B. Use share group to share distributor accounts with agents who have account contact relationship.

Question 53

Universal Containers (UC) has implemented Service Cloud. There is a flag field on the case object that marks a case as (Sensitive). UC requested that this flag can be viewed by all users who have access to the case but only be edited by the assigned case assessor. The case assessor is a lookup field on the case object. How can an architect achieve this requirement?

A. Permission Set.

B. Object Permissions.

C. Custom Lightning Component.

D. Field-level security.

Answer 53

C. Custom Lightning Component.

Question 54

Universal Containers (UC) has recently changed its internal policy to follow market regulations and create an internal team to manage the collection process. Only this team should have access to Invoice records. Currently, Invoice is a child in a Master-Detail relationship to Account. Although related lists have been removed from the page layouts, some profiles still have access to the Invoice object.

Which approach should an architect recommend to fix this problem?

A. Create a Permission Set with No Access to the Invoice object and assign to unauthorized users.

B. Create a new Profile with no access to the Invoice object and assign it to all unauthorized users.

C. Change the Invoice organization-wide default from Controlled by Parent to Private and remove Invoice Access from the unauthorized profiles.

D. Replace Account and Invoice Master-Detail Relationship by a Lookup and remove Invoice Access from the unauthorized profiles.

Answer 54

D. Replace Account and Invoice Master-Detail Relationship by a Lookup and remove Invoice Access from the unauthorized profiles.

Question 55

Universal containers (UC) implemented a private organization-wide default for the Container and Case objects.

How can UC give support representatives access to Container and Case records owned by Customer Community users?

A. Create an ownership-based sharing rule that gives access to the head of support role and internal subordinates.

B. Create a Share Group based on the sharing set created for the Customer Community User Profile.

C. Create a criteria-based sharing rule that gives access to the head of support role and internal subordinates.

D. Support representatives will automatically get access to these records via the role hierarchy.

Answer 55

B. Create a Share Group based on the sharing set created for the Customer Community User Profile.

Question 56

Universal Containers (UC) implemented Sales Cloud and requested that only certain branch staff trained to sell high risk products can create opportunities for high risk products.

In which two ways can an Architect allow only specific branch staff to sell high risk products?

Choose 2 answers

A. Set Price Book Organization Wide Default to View Only and share the price book (High Risk) with the trained staff.

B. Configure Price book Organization wide default to No Access.

C. Share (High Risk) price book with the trained staff via manual sharing.

D. Share (High Risk) price book with the trained staff via sharing rule.

Answer 56

B. Configure Price book Organization wide default to No Access.

C. Share (High Risk) price book with the trained staff via manual sharing.

No Access - Users can’t see price books or add them to opportunities. Use this access level in your organization-wide default if you want only selected users to access selected price books. Then, manually share the appropriate price books with the appropriate users.

Question 57

Universal Containers (UC) implemented Sales Cloud and requested that sales agents have access to products the company sells and be able to create opportunities for its customers.

What should the Organization-Wide Defaults (OWD) be for pricebook?

A. Public Read Write

B. Use

C. Public Read Only

D. View

Answer 57

B. Use

Question 58

Universal Containers (UC) is a fast-growing company that sells containers globally. It has thousands of dealerships throughout the world where local dealers service containers. UC implemented a new Partner Community for its dealers. Each dealership has a dealer manager who manages the service agents. The community-sharing model is private.

What is the optimal option to give dealer managers visibility to customer cases only raised by their service agents?

A. Change external organization-wide default of case object to public read only.

B. Create a sharing rule to share cases created by service agents with their dealer manager.

C. Using the role hierarchy, the cases raised by service agents will be visible to their relevant dealer managers.

D. Create a sharing set to share cases created by service agents with their dealer manager.

Answer 58

C. Using the role hierarchy, the cases raised by service agents will be visible to their relevant dealer managers.

Question 59

Universal Containers (UC) is a non-profit organization and has over 20,000,000 members (donors). The company decided to assign those accounts to Donations Reps based on their regions. Donations Reps ended up owning over 50,000 donors each. The donation reps started to see significant degradation of the system performance. What could be the reason for this problem?

A. The Donations Reps access to the assigned accounts.

B. Salesforce sharing recalculation kicked off.

C. There is an Account ownership data skew problem.

D. The Account (donor) object OWD is Private.

Answer 59

C. There is an Account ownership data skew problem.

Question 60

Universal Containers (UC) is implementing Sales Cloud. During the last quarter of the financial year, Sales agents help each other close deals. They requested a solution in Salesforce to allow them to specify an assistant agent on the opportunity record. When the sales agent changes the assistant field, the system should automatically remove access from the previous assistant and grant access to the new assistant.

What is the optimum solution to meet the requirements?

A. Use apex sharing to share and unshare opportunities with the assistant agent.

B. Use sharing rule to share opportunities with the assistant agent.

C. Use opportunity team and create an assistant field, use apex to share opportunities with the assistant agent.

D. Use share group to share opportunities with the assistant agent.

Answer 60

A. Use apex sharing to share and unshare opportunities with the assistant agent.

Question 61

Universal Containers (UC) is implementing Sales Cloud. During the final quarter of the financial year, sales managers help each other close deals. They requested a solution in Salesforce to allow them to share opportunities with other sales managers from different teams as needed. They also requested that sharing deals should expire automatically two weeks after the new fiscal year starts.

Which two options to propose a solution to meet the requirements?

Choose 2 answers

A. Apex Sharing to share opportunities with sales managers.

B. Scheduled Apex job to remove access.

C. Opportunity team to share opportunities with sales managers.

D. Sharing Rules to share opportunities with sales managers.

Answer 61

B. Scheduled Apex job to remove access.

C. Opportunity team to share opportunities with sales managers.

Question 62

Universal Containers (UC) is in legal dispute regarding several orders. UC has found out these records were removed from the system. The VP of Sales has asked to ensure this cannot happen in the future. What approach would meet this requirement?

A. Remove the delete button from the Order page layout.

B. Change the record type/page layout assignment for Orders to be read-only.

C. Remove Order Delete Permission from Profiles and Permission sets.

D. Implement a Sharing Rule that changes access for Orders to Read.

Answer 62

C. Remove Order Delete Permission from Profiles and Permission sets.

Question 63

Universal Containers (UC) operates worldwide with offices in more than 100 regions in 10 different countries and has established a complex role hierarchy to control data visibility. In the new fiscal year, UC is planning to reorganize the roles and reassign accounts owners.

Which two points should an architect consider in this situation?

Choose 2 answers

A. Replacing Account records ownership massively can cause data skew.

B. Using a temporary parking lot account to improve performance.

C. Changing complex role hierarchy can cause a high level of sharing recalculation.

D. Restricting the organization-sharing configurations to private.

Answer 63

A. Replacing Account records ownership massively can cause data skew.

C. Changing complex role hierarchy can cause a high level of sharing recalculation.

Question 64

Universal Containers (UC) operates worldwide with offices in more than 100 regions in 10 different countries and has established a very complex role hierarchy to control data visibility.

In the new fiscal year UC is planning to reorganize the roles and reassign accounts owners.

Which three features could an architect recommend to avoid problems on this operation?

Choose 3 answers

A. Deferred Sharing Recalculation

B. Partition data using Divisions

C. Skinny table

D. Parallel Sharing Rule recalculation

E. Granular Locking

Answer 64

A. Deferred Sharing Recalculation

D. Parallel Sharing Rule recalculation

E. Granular Locking

Question 65

Universal Containers (UC) provides shipment tracking for its customers on a custom Shipment object. The total number of shipments made yearly by the customers should be available on the Account record to the Marketing team, but the Marketing team should not have access to Shipment records.

What recommendation should an Architect provide to accomplish this?

A. Private organization-wide default on Shipment, rollup summary, and Master-Detail relationship to Account.

B. Controlled by Parent (Account) on Shipment, trigger, and Master-Detail relationship to Account.

C. Private organization-wide default on Shipment, trigger, and Lookup relationship to Account.

D. Public organization-wide default on Shipment, process builder, and Lookup relationship to Account.

Answer 65

C. Private organization-wide default on Shipment, trigger, and Lookup relationship to Account.

Question 66

Universal Containers (UC) sales managers are complaining that they cannot access their teams’ Shipment records (a custom object). Initially, the admin suggested that this is happening due to misconfigured role hierarchy (Shipment OWD is Private). After investigation, they determined the role hierarchy for these users is correct.

What can be the reason why Universal Containers sales managers are not able to see Shipment records?

A. Role hierarchy implicit sharing was incorrectly disabled by the Salesforce admin.

B. The Grant Access Using Hierarchies option on Shipment Sharing Settings was incorrectly disabled by the Salesforce admin.

C. Sales managers have only the Read permission on the Shipment object and should not be able to edit their team records.

D. Ownership-based sharing rule for Shipment was incorrectly disabled by the Salesforce admin.

Answer 66

B. The Grant Access Using Hierarchies option on Shipment Sharing Settings was incorrectly disabled by the Salesforce admin.

Question 67

Universal Containers (UC) service reps are assigned to a profile which has “View All” in Case object (Private OWD).

To make sure service reps have access to all relevant information to attend to customer requests, which two details should a salesforce Architect consider?

Choose 2 answers:

A. Service reps will be able to access all UC contact records if they are controlled by parent.

B. Service reps will NOT be able to access all UC contact records if they are controlled by parent.

C. Service reps will be able to access all the UC Account records due to Implicit Sharing.

D. Service reps will NOT be able to access all the UC Accounts records because Account OWD is private.

Answer 67

B. Service reps will NOT be able to access all UC contact records if they are controlled by parent.

C. Service reps will be able to access all the UC Account records due to Implicit Sharing.

B&D? Dificil de comprobar

• Implicit sharing not used when sharing on the child is controlled by its parent.*
• If you have access to an account’s child record, you have implicit read only access to the account.*

Question 68

Universal Containers (UC) stores basic employee information in a custom Employee object (OWD - Public Read Only). There are a few sensitive fields that need restricted access (salary, grade level, last performance rating).

Other than field level security, what other options are available to make these fields accessible to the Human Resource team?

A. Create a new custom object controlled by parent and a Master-Detail relationship to Employee to store new restricted information.

B. Change OWD of Employee custom object to private and a Lookup self-relationship to store only new restricted information.

C. Create a new custom object with private OWD and Lookup relationship to Employee to store new restricted information.

D. There are no other options besides using field level security.

Answer 68

C. Create a new custom object with private OWD and Lookup relationship to Employee to store new restricted information.

Question 69

Universal Containers (UC) turned off the customer visibility feature in its customer community. What community functionality is impacted by having the customer user visibility turned off?

A. Searching for other external users.

B. Updating their user profile.

C. Creating new customer community users.

D. Searching for internal users.

Answer 69

A. Searching for other external users.

Question 70

Universal Containers (UC) use External Objects to retrieve Invoice data from a Legacy ERP. A finance team requested to have access to the Invoice records in the account page.

In addition to the objects access in the finance users Profile, what other features should a Salesforce Architect recommend?

A. Create a criteria-based sharing rule to grant access to the records.

B. Include the Invoice Related List on the Account page layout.

C. Create an owner-based sharing rule to grant access to the records.

D. Use APEX managed sharing to grant access to the records.

Answer 70

B. Include the Invoice Related List on the Account page layout.

Question 71

Universal Containers (UC) uses a custom lightning component with an Apex class to display shipment information (custom object, private OWD). UC sales managers are complaining about two important points:

• Shipment records that belong to their teams can be seen by other users.
• Shipment amount should be visible only by managers, but sales reps are able to view it.

Which two features did the development team miss that is causing the problems?

Choose 2 answers.

A. Use runAs in test class to enforce user permissions and field-level permissions.

B. Use With Sharing keyword in Apex classes to enforce sharing rules evaluation.

C. Use isSharable keyword in Apex classes to assure record visibility.

D. Use isAccessible() method in Apex classes to check field accessibility.

Answer 71

B. Use With Sharing keyword in Apex classes to enforce sharing rules evaluation.

D. Use isAccessible() method in Apex classes to check field accessibility.

Question 72

Universal Containers (UC) uses a custom Visualforce page to display shipment tracking information (custom object, private OWD) to field manager and agents. The IT team wants to make sure that users have access to only the information that is allowed. Which Apex method must be used to make sure only allowed fields are shown to the users?

A. isReadable()

B. isShowable()

C. isAccessible()

D. isViewable()

Answer 72

C. isAccessible()

Question 73

Universal Containers (UC) wants all full-time internal employees to be able to view all leads. A subset of Contractors and temporary employees should also be able to see leads.

Which organization-wide default (OWD) approach should an architect recommend that will help UC implement these requirements?

A. Implement a Public Read Only OWD on Lead.

B. Implement a Public Read/Write/Transfer OWD on Lead.

C. Implement a Private OWD on Lead.

D. Implement a Public Read/Write OWD on Lead.

Answer 73

C. Implement a Private OWD on Lead.

Question 74

Universal Containers (UC) wants to reduce the amount of redundant leads entered into the system. UC also wants to ensure that leads are only edited /reassigned by the lead owner.

What organization-wide default (OWD) approach should be recommended to help UC implement these requirements?

A. Implement a Private OWD on Lead.

B. Implement a Public Read Only/Transfer OWD on Lead.

C. Implement a Public Read Only OWD on Lead.

D. Implement a Public Read/Write OWD on Lead.

Answer 74

C. Implement a Public Read Only OWD on Lead.

Question 75

Universal Containers has a customer that meets criteria for two Enterprise Territory Management territories (Portugal and Southern Europe).

What is necessary to assign opportunities to a territory for this account?

A. The territory with the highest TerritoryType Priority is automatically assigned to the Opportunity.

B. Create a Process Builder Process that updates the Territory field on the Opportunity.

C. Create an Apex class that implements Filter-Based Opportunity Territory Assignment.

D. Create a criteria-based sharing rule on the Opportunity to assign it to a territory.

Answer 75

C. Create an Apex class that implements Filter-Based Opportunity Territory Assignment.

Question 76

Universal Containers has a large network of partners, who each have seasonal workers that need short-term access to the community.

How might the Architect design the solution to federate user setup to the partners?

Choose 2 answers

A. Allow external users to self register.

B. Create a permission set giving Read/Write to the user object to Partner manager.

C. Grant the Modify users permission to the partner managers.

D. Assign delegated external administrators at each partner.

Answer 76

A. Allow external users to self register.

D. Assign delegated external administrators at each partner.

Question 77

Universal Containers has built a recruiting application on the salesforce Platform. HR requested that all internal users should have edit access to the referral custom object. One of the recruiters needed to share a referral record with another colleague for collaboration using manual sharing. The recruiter opened the referral record and could not find the share button.

What could be the technical reason for this?

A. The Referral object OWD is Private.

B. The Referral object OWD is Public Read/Write.

C. The Referral object OWD is Public Read only.

D. The Referral object OWD is Public Full Access.

Answer 77

B. The Referral object OWD is Public Read/Write.

Question 78

Universal Containers has developed a custom Visualforce page that will accept user input and must perform a dynamic SOQL query returning the results to the users.

Which two techniques should be used to ensure the users cannot perform a SOQL injection attack?

Choose 2 answers

A. Use the With Sharing keyword on the controller.

B. Use bind variables in the SOQL query.

C. Use the escapesinglequotes() method to sanitize user input.

D. Escape double quotes in the user input.

Answer 78

B. Use bind variables in the SOQL query.

C. Use the esacapesinglequotes() method to sanitize user input.

Question 79

Universal Containers has expanded to sell virtual containers for data storage. Virtual container work orders are provisioned immediately by the system and therefore cannot be changed by a sales representative. What is an optimal approach to implement these requirements?

A. Remove the Work Order Edit permission from the sales representative Profile.

B. Remove the edit button from the work order page layout.

C. Change the record type/page layout assignment for Work Order to be Read Only.

D. Implement a sharing rule that changes access for all Work Order to Read.

Answer 79

A. Remove the Work Order Edit permission from the sales representative Profile.

Question 80

Universal Containers has selected a small and diverse group of users to review inactive accounts. Given the Private sharing model, a public group was created and made available to this group of users. A sharing rule was created to make inactive Accounts visible to the public group. However some of these users are reporting they don’t see any of the Accounts that were shared with the public group.

What is the underlying issue for these users?

A. The users have a permission set that only allow Accounts in “Active” status.

B. The Accounts are owned by users higher in the role hierarchy.

C. The users are in profiles that have no access to the Account object.

D. The page layout assigned to these users is different than the Account owner.

Answer 80

C. The users are in profiles that have no access to the Account object.

Question 81

Universal Containers is planning to pilot a new application to a small set of Sales Reps.

What is the optimal way to grant only those Sales Reps access to the new functionality, while hiding the legacy functionality?

A. Create a permission set to grant access to the new functionality and hide the old functionality.

B. Clone the Sales Rep profile, adjust settings, and assign the pilot users the new profile.

C. Revoke access to legacy functions in the Sales Rep profile and create a permission set for the new functionality.

D. Create new user records for the pilot user that they will use for the pilot.

Answer 81

B. Clone the Sales Rep profile, adjust settings, and assign the pilot users the new profile.

Question 82

Universal Containers keeps product brochures in Salesforce as files. Sarah shares a public link to a product brochure with potential customers during a meeting. She wants to ensure they do not have access to the file after the meeting. How should Sarah accomplish this?

A. Rename the file.

B. Move the file to another folder.

C. Delete the file.

D. Delete the public link.

Answer 82

D. Delete the public link.

Question 83

Universal Containers provides 24x7 support for its customers worldwide using call centers in three different countries with each one covering an 8-hour shift in different time zones. Service reps in a call center have access to the same information but only during their local working hours.

Which feature in Salesforce controls access for specific login hours?

A. Set the login hours on user records

B. Permission sets

C. Custom permissions

D. Profiles

Answer 83

D. Profiles

Question 84

Universal containers uses 75,000 distributors that have close to 1 million total users. Distributors need to use the community to see closing opportunities assigned to their distributor for delivery.

Which license recommendation will meet distributor needs?

A. Sales Cloud

B. Customer Community

C. Partner Community

D. Customer Community Plus

Answer 84

C. Partner Community

Question 85

Universal Containers uses Person Accounts to represent retail customers and business accounts to represent commercial customers. The Retail Sales team should not have access to commercial customers but have access to ALL retail customers.

With organization-wide default on Account set to Private, how might the architect meet these

requirements?

A. Update Retail Sales profile to grant access to Person Account record type.

B. Create an owner-based sharing rule on AccountContactRelation to grant access to all account contact roles records owned by retail sales reps.

C. Create a criteria-based sharing rule giving Retail Sales role access to Accounts of type Person Account.

D. Give View All access for Accounts to the Retail Sales profile.

Answer 85

C. Create a criteria-based sharing rule giving Retail Sales role access to Accounts of type Person Account.

Question 86

Universal Containers would like to control access to records and objects according to the following business requirements:

• Sales users can view all Account records but only edit their own records.
• Sales managers view all Account records but only edit records of the team.
• Service users can view all Account records that are not marked with a RecordType of Prospect.

Which organization-wide default configuration should a Salesforce architect recommend to fulfill these requirements?

A. Public Read Write

B. Private

C. Public Read Only

D. Public Read/Transfer

Answer 86

B. Private

• No es C, tendria que ser la B, ya que por record type no puedes quitar acceso.*
• Record type assignment on a user’s profile or permission set (or permission set group) doesn’t determine whether a user can view a record with that record type. The record type assignment simply specifies that the user can use that record type when creating or editing a record.*

Question 87

Universal Containers’ organization wide-defaults model is private for the Account object. A sales representative user has Create/Edit access to opportunity records.

Which level of access will the sales rep have to the related account record?

A. Read/Create/Edit access.

B. Read-only access.

C. Read/Create access.

D. No access.

Answer 87

B. Read-only access.

Question 88

Ursa Major Solar is writing test methods.

Which functionality does the system method “runAs()” Verify?

A. Enforcement of a user’s public group assignments.

B. Enforcement of a user’s field-level security.

C. Enforcement of user’s permissions.

D. Enforcement of a user’s record sharing

Answer 88

D. Enforcement of a user’s record sharing

Question 89

Users at Universal Containers are complaining that a field has disappeared from the Account page after deploying its latest project. The page layout has not changed with this deployment.

How should the admin troubleshoot this issue?

A. Review change to Account record types.

B. Log in as user and check several Accounts to isolate the problem records.

C. Run a Who Sees What report, filtering on Account.

D. View Field Accessibility in the Object Manager.

Answer 89

D. View Field Accessibility in the Object Manager.

Question 90

What advanced tool can Salesforce enable for large-scale role hierarchy realignments?

A. Partitioning by Divisions

B. Skinny Table Indexing

C. Set external organization-wide default to public read only

D. Granular locking

Answer 90

D. Granular locking

Question 91

What should a Salesforce architect recommend to make sure that users that gained access to a custom object record through Apex managed sharing do not lose access to it when its owner is changed?

A. Use “runAs” system method in Apex classes to enforce record visibility.

B. Create a new record in _Share object with RowCause “Manual”.

C. Use “With Sharing” keyword to make sure record visibility will be considered.

D. Create a specific Apex Sharing Reason for the custom object.

Answer 91

D. Create a specific Apex Sharing Reason for the custom object.

For Apex managed sharing, if using custom objects, you should be using Apex Sharing Reasons, sharing records using these will not be deleted on owner changes. Too bad it can only be created for custom objects and not standard ones

Question 92

What vulnerability can exist when controllers use dynamic rather than static queries and bind variables?

A. Record Access Override

B. Buffer Overflow Attacks

C. Cross-site scripting

D. SOQL Injection

Answer 92

D. SOQL Injection

Question 93

Which two capabilities does the delegated administrator permission provide?

Choose 2 answers.

A. Set OWD.

B. Unlock users.

C. Assign users to Profiles.

D. Create profiles.

Answer 93

B. Unlock users.

C. Assign users to Profiles.

Question 94

Which two objects support creating queues?

Choose 2 answers.

A. Account.

B. Opportunity.

C. Lead.

D. Case.

Answer 94

C. Lead.

D. Case.

Question 95

Which two options can be selected to share data with when creating a sharing rule?

Choose 2 answers

A. Roles

B. Public Groups

C. Users

D. Profiles

Answer 95

A. Roles

B. Public Groups