Which two actions will contribute to an improvement of code security?Choose 2 answers

Implement a pull request and secure code review.

Integrate a static code security analysis tool in the CI/CD process.

Hire a company specialized in secure code review the current code.

Implement a pull request and secure code review.

Integrate a static code security analysis tool in the CI/CD process.

Use two developers to review and fix current code vulnerabilities.

Universal Containers (\)C) is on the Unlimited Edition of Salesforce orgs. Currently, there are four Developer Pro sandboxes used by dev teams for various purposes, one partial copy sandboxes used for training, one full sandbox used for user acceptance testing. There is another full sandbox used for performance testing during the initial launch, and it is no longer being actively used.A system administrator had reported yesterday that none of the sandboxes can be refreshed.What is the most probable action an architect can help the system administrator with?

Contact the Salesforce Account Team to do a sandbox License Count.

It appears the org is using more sandboxes than the license permits. The Partial Copy sandbox shouldn't be used.

Create a Salesforce support case, someone should know what is wrong.

Contact the Salesforce Account Team to do a sandbox License Count.

Delete the full sandbox used for performance testing.

Universal Containers is adopting Scrum as an agile methodology and wants to choose a software tool to support the adoption. What three key features of an agile development support tool should an architect look for? Choose 3 answers

Work (for example, user stories or tasks) assignment

Email notifications when work is created or changed

Work (for example, user stories or tasks) assignment

What are three advantages of the package development model?Choose 3 answers

Improving team development and collaboration.

Eliminating the need of using change set, which should no longer be used as it can get messy working with package development models.

Facilitating automated testing and continuous integration.

Improving team development and collaboration.

Eliminating the need of using change set, which should no longer be used as it can get messy working with package development models.

Facilitating automated testing and continuous integration.

Significantly reducing the need for manually tracking changes.

Providing its own source control, so the source can be deployed In any sandbox orgs.

Sales and Service products will be created by two teams that will use second-generation managed package(s). The Sales team will use a specific function of the Service product, but the architect wants to ensure that this team will only use the functions exposed by the Service team. No other team will use these same functions.What should an architect recommend?

Create two managed packages. Create an authentication function in the Service package that will return a token if a Sales user is authorized to call the exposed function. Validate the token in the Service functions.

Create two second generation managed packages with the same namespace and set the methods that should be shared with the @namespaceAccessible annotation.

Create two managed packages with Sales and service namespaces. Set the methods to be shared with the ©salesAccessible annotation

Create a managed package with both products and create a code review process with an approver from each team.

Create two managed packages. Create an authentication function in the Service package that will return a token if a Sales user is authorized to call the exposed function. Validate the token in the Service functions.

A team has completed a sprint and intends to deploy these changes after business approval, but they will immediately begin the next sprint.What strategy should an architect recommend?

Using Git, create a release branch from the develop branch. All fixes must be made in the release branch. After deployment, merge release with develop.

The first task of the new sprint must be the deployment approval. After that, the other tasks of the sprint can be performed in the environments and Git.

Using Git, create a release branch from the develop branch. All fixes must be made in the release branch. After deployment, merge release with develop.

Commit upcoming changes to the features branch without merging into the develop branch.Deploy from the develop branch and then merge new sprint features into the develop branch.

Migrate the current code to the UAT sandbox. Begin new sprint development in the Dev sandbox.Make fixes in the UAT environment and deploy UAT for production after business approval.

Universal Containers has an active production org; and they are planning to release some new features to it next month. The team is working to prepare .1 deployment plan and reached out to the technical architect for inputs on rollback strategy.What should a technical architect recommend?

Create a sandbox from production to take the backup of existing metadata. To roll back deployment, use destructivechanges.xml to delete new components and then deploy again to production using metadata from this sandbox.

Backup the existing metadata using the ANT Migration Tool. To roll back deployment, deploy again to production using backed up metadata.

Create a sandbox from production to take the backup of existing metadata. To roll back deployment, manually delete new components and then deploy again to production using metadata from this sandbox.

Create a sandbox from production to take the backup of existing metadata. To roll back deployment, use destructivechanges.xml to delete new components and then deploy again to production using metadata from this sandbox.

Backup the existing metadata using ANT Migration Tool. To roll back deployment, manually delete new components and deploy again to production using backed up metadata.

Universal Containers wants to introduce data volume testing to resolve ongoing performance defects earlier in the lifecycle. Regulations prohibit the use of production data in non-production environments.Which two options can the architect recommend?Choose 2 answers

Generate mock data that mimics production data shape and volume.

Perform data masking on full sandbox after a refresh.

Request a partial Sandbox copy after the next Salesforce release.

Generate mock data that mimics production data shape and volume.

Perform data masking on full sandbox after a refresh.

Use Query Analyzer in production.

Cloud Kicks is considering using an automated testing tool to help manage deployments between environments.When should the architect recommend the use of an automated testing tool?

Automated tests should be run only when merging into Full or Partial Copy sandboxes.

Automated tests should be run when branches are merged.

Automated tests should be run dally in all Developer Orgs.

Automated tests should be run only when merging into Full or Partial Copy sandboxes.

Automated tests should be run daily in all Developer Orgs, and when branches are merged.

Universal Containers (UC) is a large enterprise with a complex system landscape. UC is currently rolling out new infrastructure and strategies around Salesforce DevOps. Some of the key feature’s UC is looking to support is rollback of metadata after a deployment, and the backup and restore of data to help recover from deployment issues, system bugs, or outages in their downstream systems.Regulations in the industry mean that UC must be able to provide strategies to recover and rollback from issues. The regulator has discovered UC is not currently providing these, and must do so as soon as possible to remain compliant.What should an architect advise?

Evaluate third-party and AppExchange products.

Salesforce backs up all data and will restore it for customers on request.

Evaluate third-party and AppExchange products.

Advise stakeholders that rollback is not possible for Salesforce.

Custom build a feature rollback and data restore tool for Salesforce

Universal Containers has many development teams deploying into a single org. The business is very seasonal and approaching its busiest season. The business owner comes to you asking for your advice about its next major production release.What best practice should an architect recommend?

Developers should conduct user acceptance testing

Make declarative changes in production only.

Bypass regression testing for minor changes.

Avoid releasing near peak business periods.

Developers should conduct user acceptance testing

The opportunity Service and opportunity Service Test classes are in package A but are used only in package B. Both second-generation packages have the same namespace. Therefore, they should be moved to package B for better organization and control.What should the architect recommend for this process?

Move the classes of package A to package 8 and change the code for package B that called this class from package A.

Set the classes as deprecated in package A and recreate them in package B.

Move the classes of package A to package 8 and change the code for package B that called this class from package A.

Move the classes of package A to package B and create new package versions.

Set the classes as deprecated in package A and recreate them in package B with new names.

Since Universal Containers (UC) has adopted agile methodologies, the CEO is requesting the development teams to deliver more and more work in shorter time frames. The CTO responds by saying the developers are not able to deliver the jobs they are committing to.What evidence can be gathered in an agile tool to support the CTO’s claims?

A burndown chart showing the team misses their forecast sprint after sprint

A burndown chart showing team finishes early sprint after sprint

A Kanban board showing there’s always the maximum allowed amount of work in progress (WIP)

A burndown chart showing the team misses their forecast sprint after sprint

Universal Containers (UC) has gone through a global organization restructuring and process review during the last year, which triggered a review of its Salesforce org strategy. After thorough analysis of its org and global customers, UC decided to start a project to merge its Salesforce orgs, going from a multi-org to a single-org strategy.In this scenario, what are three benefits going to a single-org strategy?Choose 3 answers

Lower administration overhead costs.

Improved Chatter collaboration across different business units.

Easier to get a 360-view of the customer.

Lower administration overhead costs.

Improved Chatter collaboration across different business units.

Consolidating the business processes would be simplified.

Automatically unify data model among all lines of business.

Easier to get a 360-view of the customer.

An architect is working on a Universal Containers (UC) project, and due to security concerns, the UC security team cannot provide the Architect with production access. Instead, a central release management team will be responsible for performing production deployments for all development teams.How should an architect leverage the Metadata API to ensure any metadata components necessary to deploy the project’s functionality Are properly communicated to the release management team?

Communicate the unlocked package version to the release management team.

Provide a spreadsheet of all components and utilize the metadata API’s readMetadata() call.

Communicate the unlocked package version to the release management team.

Create a change set in each sandbox and download the package.xml file for the release management team.

Provide the release management team a copy of the audit trail from the sandbox you wish to deploy from.

Universal Containers has 80% code coverage. Despite the creation of a test plan for each sprint, the number of defects is large.What two items should the architect recommend to reduce defects?Choose 2 answers

The test script should be used to define the test classes.

The acceptance criteria should have more details.

The test script should be used to define the test classes.

The code coverage should be increased to 95%.

The test analyst who creates the test plan must also create the test classes.

The acceptance criteria should have more details.

A developer with Universal Containers recently created a flow in the developer sandbox. While working on the flow, the developer deactivated it and made updates multiple times before the flow worked as desired. Now the developer is planning to use a change set to migrate the flow to the QA sandbox.What two statements should be considered when migrating the flow with change sets?Choose 2 answers

When a change set with a multiple versioned flow is uploaded, it includes only the active version of the flow.

When a change set with a multiple versioned flow is uploaded, and no active version is available, it includes the most recent inactive version of the flow.

When a change set with a multiple versioned flow is uploaded, it includes only the active version of the flow.

When a change set with a multiple versioned flow is uploaded, it includes all the versions of the flow.

When a change set with a multiple versioned flow is uploaded, and no active version is available, it includes the most recent inactive version of the flow.

When a change set with a multiple versioned flow is uploaded, and no active version is available, it throws an exception.

Universal Containers (UC) started to use the GitHub workflow. For the current minor release, an Experience Cloud developer and a Service Cloud developer both need to work on the Case object and codes that reference the Case object. Both developers branched off the same UCDev branch (maps to the Dev sandbox for Release Build) and started working. The Experience Cloud development team had Finished early, and the change was successfully merged into the UCDev branch. The local Git branch used by the Service Cloud developer is called ServiceCase At what point will the Service Cloud developer see the conflict and need to resolve the conflict?

The conflict would show in GitHub when a pull request is created from ServiceCase to UCDev.

At command: git commit -m “Service Cloud Notes”

The conflict would show in GitHub when a pull request is created from ServiceCase to UCDev.

At command: git push origin ServiceCase

At Command: git add force-app/main/default

Universal Containers (UC) is midway through a large enterprise project. UC is working in an agile model, and currently has four-week iterations, with a branching strategy supporting this approach. UC operates in a strict regulatory environment, and has dedicated teams for security, QA, and release management. The system is live with users, and a serious production issue is identified at the start of a sprint, which is narrowed down to a bug in some Apex code.Which three approaches should an architect recommend to address this bug?Choose 3 answers

Investigate potential data impacts.

Fix the bug in a hotfix branch.

Seek stakeholder approval for the hotfix.

Investigate potential data impacts.

Fix the bug in a hotfix branch.

Wait until the next release to deploy the fix.

Attempt to fix the bug directly in production.

Seek stakeholder approval for the hotfix.

Universal Containers has five development teams. The performance of the teams has been good, but the number of bugs has been increasing. After each sprint, they need more time to understand the code and make changes.What are two ways to improve the performance?Choose 2 answers

Define and follow code standards.

Define a team that will analyze/approve all changes.

Define and follow code standards.

Version control system to identify who is generating the bugs.

Universal Containers’ org is complex but well-organized in unlocked packages with their dependencies. The development team was asked for a new feature, and the package that will be changed has already been identified.Which environment should be used for this development?

A scratch org with the package code that will be changed and its dependencies

A Developer Pro sandbox with all packages installed.

A scratch org with all installed packages.

A Developer Pro sandbox with the package code that will be changed and its dependencies installed.

A scratch org with the package code that will be changed and its dependencies

Universal Containers has defined a software tool to support Agile processes, but the development team is not regularly updating the status of their work in progress.What Scrum value is compromised by this bad practice, and why?

Courage, because the teams should be transparent about progress and speak up when they need help.

Openness, because the team is not open to a new methodology.

Focus, because the teams are not focusing in the agile process expected activities.

Commitment, because the team is not committed to follow the Agile methodology.

Universal Containers (UC) has a large backlog of work. They have noticed that despite their best efforts, valuable enhancements and updates are not being completed because they do not have the bandwidth to get them done. Many of these items are low effort and would not require experienced resources.What should the architect recommend that will minimize additional costs and allow UC to accomplish more from the

UC should start a citizen development program.

UC should hire a partner to complete the needed backlog items.

UC should eliminate low-value items from the backlog.

UC should hire additional resources to reduce the backlog.

UC should start a citizen development program.

Universal Containers (UC) has noticed that unit tests are failing in production during deployments and in no other environments. Investigations have revealed that administrators are making minor changes in production without regard to dependent components What two suggestions can the architect make to help UC discover these failing unit tests earlier?Choose 2 answers

Train the administrators to make their changes in a special “admin changes” sandbox, and then promote to production.

Ensure a metadata backup is committed to version control every day and a diff published to the release team.

Stop administrators from making all changes.

Ask administrators to run unit tests before every change.

Train the administrators to make their changes in a special “admin changes” sandbox, and then promote to production.

Ensure a metadata backup is committed to version control every day and a diff published to the release team.

A technical lead is performing all code reviews for a team and is finding many errors and improvement points. This is delaying the team’s Deliveries.Which two actions can effectively contribute to the quality and agility of the team?Choose 2 answers

Skip the code review and focus on functional tests and UAT.

Use static code analysis tool in the pipeline before manual code review.

Choose the most senior developer to help the technical lead in the code review.

Create development standards and train teams in those standards.

Skip the code review and focus on functional tests and UAT.

Use static code analysis tool in the pipeline before manual code review.

Universal Containers (UC) is looking at implementing a large number of features using an AppExchange product. This product uses Sobjects to store and configure important business logic within the application.Which two options should an architect recommend, as the source of truth for storing this reference data?Choose 2 answers

Store the records in sandboxes and production.

Use a third-party product to manage these records.

Store the records in sandboxes and production.

Store the records in a version control system.

Use a third-party product to manage these records.

Attach CSV files to the user stories in a project management system.

Metadata API supports deploy () and retrieve () calls for file-based deployment.Which two scenarios are the primary use cases for writing code to call retrieve () and deploy () methods directly?Choose 2 answers

Development of a custom application in a scratch org. After completing development and testing, the application is then deployed into an upper sandbox using Salesforce CLI (SFDX)

Development of a customization in a sandbox organization. The deployment team then utilize the Ant Migration Tool to deploy the customization to an upper sandbox for testing.

Team development of an application in a Developer Edition organization. After completing development and testing, the application is Distributed via Lightning Platform AppExchange.

Development of a custom application in a scratch org. After completing development and testing, the application is then deployed into an upper sandbox using Salesforce CLI (SFDX)

Development of a customization in a sandbox organization. The deployment team then utilize the Ant Migration Tool to deploy the customization to an upper sandbox for testing.

Development of a custom application in a sandbox organization. After completing development and testing, the application is then deployed Into a production organization using Metadata API.

Product owners at Universal Containers want to ensure that all the requirements have test cases associated with them so that no functionality is left untested during user acceptance testing.What project artifact can help meet the needs of the business?

Requirement traceability matrix

Universal Containers (UC) has four different business units (BUS) with different processes that shares global customers. They have implemented a multi-org strategy with one org consolidating customer 360-degree view, and four orgs for the different BUS. Each of the BU orgs read and write customer information from/to the customer 360-degree view org in real time. UC is now launching a new BU that will use Salesforce. It does not share customers with the other BUS and needs flexibility in their Business processes.What should an architect recommend as org strategy for this new BU

Use a new Salesforce org for the new BU, and customize integration so that it reads and writes customer information from the customer data org

Use a new stand-alone Salesforce org for the new BU, not integrated with the others.

Deploy the new BU in customer 360-degree view org, and read and write customer information from it without need of custom integration.

Use the same Salesforce org of another BU that shares geographical localization with the new BU.

Use a new Salesforce org for the new BU, and customize integration so that it reads and writes customer information from the customer data org

Universal Containers (UC) had been using change sets for deploying all of the modifications to its Sales Cloud apps. After multiple business units joined the single Salesforce instance, there is a need to evaluate which development model is the most suitable for UC. The IT management has shown a particular interest in finding out more about the package development model.As an architect, which two statements can be made to articulate the differences between the change set model and package development model?Choose 2 answers

In package development, the source of truth is the metadata in the package project, which makes it easy to integrate to a version controlSystem.

In change set development, the source of truth is a combination of the metadata already in the environment and the content of your change Set.

In package development, the source of truth is the metadata in the package project, which makes it easy to integrate to a version controlSystem.

A change set can be retrieved from the developer’s workbench as a package, then pushed into the version control system to achieve theVersioning control.

In change set development, the source of truth is a combination of the metadata already in the environment and the content of your change Set.

In package development, the best practice is to consider the dependencies and build the dependencies into the package so it can be deploye In any other target orgs.

Universal Containers is a global organization that maintains regional production instances of Salesforce. One region has created a new application to track shipping containers.The CIO has requested that this new application be used globally by all the Salesforce instances and further maintained and modified regionally by local administrators.Which two deployment tools will support the request?Choose 2 answers

VS Code with Salesforce Extension

Universal Containers (UC) had implemented two full sandboxes. One, known as Stage, is used for performance, regression testing, and production readiness check. The other is used primarily for user acceptance testing (UAT). Both full sandboxes were refreshed two months ago.Currently, UC is targeting to start user acceptance testing in two weeks, and do production release in four weeks. An admin also realized Salesforce will have a major release in six weeks.UC needs to release on the current Salesforce version, but also wants to make sure the new Salesforce release does not break anything What should an architect recommend?

Use the Sandbox Preview Guide to check if there is any necessary action needed. UC might have to prepare, refresh, and redeploy to UAT.

Refresh Stage now, and do not refresh UAT. This way, Stage will be on preview and UAT will not.

Use the Sandbox Preview Guide to check if there is any necessary action needed. UC might have to prepare, refresh, and redeploy to UAT.

Visit trust.salesforce.com to figure out the preview cutoff dates, if the dates had passed, work with support to get on the preview instance.

Refresh Stage from UAT now. After preview cutoff, use the upgraded one for regression test, use the non-upgraded one for user acceptance Test.

Universal Containers (UC) has multiple teams with major projects working concurrently in their own developer sandboxes. After deploying to production, a bug is discovered. Due to tight timelines, the development team has suggested correcting the bug in the user acceptance testing (UAT) environment, which is a full copy sandbox.What should the architect recommend?

UC should spin up a new sandbox to use as a hot fix environment. Once the bug is corrected, the change should be applied to production and downstream environments.

Since the issue was found in production, it should be treated as a change request and go into the backlog as an enhancement.

UC should spin up a new sandbox to use as a hot fix environment. Once the bug is corrected, the change should be applied to production and downstream environments.

The fix should be made in the developer environment where the project work was done.Once the fix has been made, it should go through a full deployment/testing process and adhere to the normal project cadence.

Since the issue was found in production, it should be treated as a change request and go into the backlog as an enhancement.

Correcting the bug in UAT is ideal. Since UAT is a full copy, it will be the fastest location to fix and test the resolution.

A developer on the Universal Containers team has written a test class to test a method that involves a web service callout. Within the test class, the developer is supposed to load test data, create an instance of the Mock object, set the Test.setMock() to that Mock object, call startTest(), execute the code that makes the callout, call stopTest(), and compare the result with expectations. Unfortunately, the Developer forgot to use the Test.setMock() method step.What would happen when the developer runs this test class?

The test class fails and the developer will see a message stating: Methods defined as TestMethod do not support Web service callouts.

The test class fails without error message since the test class will simply skip the web service callout during the execution.

The test class fails and the developer will see a message stating: Methods defined as TestMethod do not support Web service callouts.

The test class would make the web service callout and may or may not fail depending on the circumstances on the web service end

It is impossible to miss the Test.setMock() statement, the Developer Console will not let the developer save it since the test methou callout

Universal Containers is having trouble deploying metadata from SIT to UAT. UAT is complaining that it does not recognize some new Salesforce metadata types to be deployed. The deployment from Dev to SIT worked perfectly What could be the problem?

SIT is on a preview release and UAT is not.

There is no problem, this is expected behavior.

UAT is on a preview release and SIT is not.

SIT is on a preview release and UAT is not.

Use the DX command line instead.

Salesforce Certified Development Lifecycle and Deployment Architect Practice Test 5

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Salesforce Certified Development Lifecycle and Deployment Architect Practice Test 5

Question

Salesforce Certified Development Lifecycle and Deployment Architect Practice Tests

Practice Tests