Trailhead Week 2 - Tuesday Flashcards

1
Q

By combining ________ ________ at different levels, you can provide just the right level of data access to thousands of users

A

security controls

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Access to _________ ________ is the simplest thing to control

A

object-level data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

You can restrict access to certain________, even if a user has access to the object. For example, you can make the salary field in a position object invisible to interviewers but visible to hiring managers and recruiters.

A

fields

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

You can allow particular users to view an object, but then restrict the individual ______ _______ they’re allowed to see.

A

object records

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

You can restrict access to certain ______, even if a user has access to the object

A

fields

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

You can allow particular users to view an ______, but then restrict the individual object records they’re allowed to see.
(ex) an interviewer can see and edit her own reviews, but not the reviews of other interviewers.

A

object

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

You use _________ ________ ________ to lock down your data to the most restrictive level, and then use the other record-level security and sharing tools to selectively give access to other users.

A

org-wide sharing settings

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

______ ________ give access for users higher in the hierarchy to all records owned by users below them in the hierarchy

A

Role hierarchies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

________ ________ are automatic exceptions to organization-wide defaults for particular groups of users, so they can get to records they don’t own or can’t normally see.

A

Sharing rules

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

________ _______ allows owners of particular records to share them with other users.
(ex) when a recruiter going on vacation needs to temporarily assign ownership of a job application to someone else

A

Manual sharing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

________ your system provides important information for diagnosing potential security issues or dealing with real ones.

A

Auditing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

You can configure access to data at all of the following levels, except:

A

page layouts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which of these is not a method for controlling record-level access?

A

profiles

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

A profile is a collection of __________ and ___________.

A

settings & permissions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

The profiles functionality in an org depends on the user __________ type.

A

license

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Users can have only one profile, but they can have multiple ________ ________.

A

Permission sets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

You’ll be using permission sets for two general purposes:

A
  1. to grant access to objects or apps
  2. to grant permissions—temporarily or long term—to specific fields.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

When object-level permissions conflict with record-level permissions, the most _________ settings win.

A

restrictive

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Org-wide defaults specify the _______ level of access users have to each other’s records.

A

default

20
Q

Role hierarchies ensure managers have access to the _____ records as their subordinates.
- Each role in the hierarchy represents a level of data access that a user or group of users needs.

A

same

21
Q

Sharing rules are automatic exceptions to org-wide defaults for particular groups of users, to give them access to records they don’t own or can’t normally see.

A
22
Q

Profile controls what?

A

Controls what users can see & what they can do.

23
Q

Permission sets are

A

An extra level of access to settings for a user

24
Q

Permission sets

A

Combine multiple permission sets into a single group

25
Q

Permission sets group example

A

Multiple VPs… who do the same job throughout the world.
Ex - Able to create a survey but unable to delete.

26
Q

Permission sets groups only ___ access

A

Grant.
- they don’t take away excess.

27
Q

In any scenerio, __________ permissions will always win.

A

Profile.
ex) even if the user owns the contact record, if their profile permissions don’t allow… profile trumps.

28
Q

When you’re the owner for a record or child record… you can

A

Edit
Share
Delete
* as long as profile permissions allow

29
Q

For the records I don’t own… the _____________

A

Org wide setting control
Ex) public, private, and hybrid.
Ex) public read only

30
Q

The permissions on a record are always evaluated according to a combination of object-level, field-level, and __________ permissions.

A

Record-level permissions

31
Q

Record-level permissions offer layers of increasing access, so it’s important to know which ___________________ are observed to understand the level of access a user has.

A

record-level permissions

32
Q

Org-wide defaults

A

specify the default level of access users have to each other’s records.

33
Q

Role hierarchies ensure managers have access to the

A

same records as their subordinates.
- Each role in the hierarchy represents a level of data access that a user or group of users needs.

34
Q

Sharing rules are automatic exceptions to _______________ for particular groups of users, to give them access to records they don’t own or can’t normally see.

A

org-wide defaults

35
Q

Manual sharing lets record owners give ____________ permissions to users who might not have access to the record any other way.

A

read and edit

36
Q

A user’s baseline permissions on any object are determined by their _________.

A

profile

37
Q

If the user has any permission sets assigned, these also set the ___________ ____________ in conjunction with the profile.

A

baseline permissions

38
Q

Access to records a user does not own are set first by the ______________.

A

org-wide defaults

39
Q

If the org-wide defaults are anything less than ______________, you can open access back up for certain roles using the role hierarchy.

A

Public Read/Write

40
Q

You can use sharing rules to _______ _______to additional groups of users.

A

expand access

41
Q

Each record owner can manually share individual records with other users by using the _______ _________ on the record.

A

share button

42
Q

Org-wide defaults specify the baseline level of access that the most _________ user should have.

A

restricted

43
Q

Use org-wide defaults to ____ ______ your data

A

lock down

44
Q

Use the other record-level security and sharing tools (role hierarchies, sharing rules, and manual sharing) to ____ _______ the data to users who need it.

A

open up

45
Q

Org-wide defaults modify those permissions for records a user ________ own

A

doesn’t

46
Q

Sharing rules work best when they’re defined for a particular group of users that you can _________ or ________ in advance, rather than a set of users that frequently changes

A

determine or predict