What kind of threats can be detected by Event Monitoring Threat Detection?

Session Hijacking, Credential Stuffing, Report Anomaly

Login outside of IP Range, Failed Password Attempt

Multiple login attempts, SQL injection

What is an implication of connecting or disconnecting a tenant during the update period?

This can cause partial data to load

All previous metrics are erased

This can cause partial data to load

Data will not be loaded until the following day

An error message will display to the user

User in one of the monitored orgs has been granted the 'Modify All Data' permission. Where can the consultant see how the permission was granted?

View the detail page of the 'Modify All Data' metric, and check the Context column on the change for the user.

View the Configuration Metrics detail page.

View the detail page of the 'View All Data' metric, and check the Context column on the change for the user.

View the detail page of the 'Modify All Data' metric, and check the Context column on the change for the user.

Which activity is not recommended for internal support teams after MFA is enabled?

Adjusting policies that enable or disable MFA for Salesforce users

Helping users recover access if they've lost or forgotten their verification methods

Maintaining a supply of replacement security keys

Enabling MFA for new employees as part of the new hire onboarding process

Which three standard authentication protocols does Salesforce support to integrate external applications using APIs?

Security Assertion Markup Language (SAML)

What are three recommended change management activities to prepare users for MFA?

Create onboarding materials on how to obtain, set up, and use verification methods to log in

Communicate frequently about when MFA is coming and why it's important Send users a single announcement email, the day before MFA is enabled

Provide launch day support such as office hours or an onsite help desk

Enable MFA for a test period to see what issues arise.

Create onboarding materials on how to obtain, set up, and use verification methods to log in

Communicate frequently about when MFA is coming and why it's important Send users a single announcement email, the day before MFA is enabled

What is an example of the principle of least privilege?

Limiting the number of users with admin rights

Prohibiting reuse of passwords on multiple accounts

Limiting the number of users with admin rights

What settings can be controlled from the user's profile?

Session time out, Password complexity requirement, Login IP Ranges, Login Hours

Session time out, Welcome email template, Password complexity requirement

Session time out, Password complexity requirement, Login IP Ranges, Login Hours

Session time out, Enabled Custom Permissions, Email opt-in

Session time out, Welcome email template, Password complexity requirement, Enabled Custom

Which two regulations are important to follow for many companies collecting and processing their customers' data?

California Consumer Privacy Act (CCA), United States

General Data Protection Regulation (GDPR), European Union

California Consumer Privacy Act (CCA), United States

Personal Electronic Documents Act (PEDA), Canada

General Data Protection Regulation (GDPR), European Union

California Corporate Privacy Regulation (CCPR), European Union

What is the correct order of precedence of strong verification methods for MFA logins?

Salesforce Authenticator, Third-party TOTP authenticator apps, Security keys

Security keys, Salesforce Authenticator, Third-party TOTP authenticator apps

Third-party TOTP authenticator apps, Security keys, Salesforce Authenticator

Salesforce Authenticator, Security keys, Third-party TOTP authenticator apps

What does Salesforce Data Mask do?

Anonymize, delete, or pseudonymize sensitive Salesforce sandbox data

Encrypt Salesforce Sandbox data

Change the color scheme of metrics within a production org based on predetermined rules

Anonymize data at rest within a production org

Anonymize, delete, or pseudonymize sensitive Salesforce sandbox data

Using Data Mask, how can a user mask the "Country" field with another country value?

Replace with Library and select "Country"

Replace with Library and select "Address"

Replace with Library and select "Country"

Replace with Pattern and then input "Country"

How does a user reverse the masking of data once the process has completed?

The masking of data is an irreversible process

Data Mask retains any historical data that can be retrieved by an admin

The masking of data is an irreversible process

Data Mask takes snapshots of prior versions of sandbox data that can be viewed

What are the actions that an admin can take with Transaction Security?

Block, Multi-Factor Authentication, and Notifications

Freeze User, End Session, require 2FA

Obfuscate, Encrypt, de-identify

Launch Workflow, Require Approval, Send SMS Text

Block, Multi-Factor Authentication, and Notifications

Within Data Mask, which operators are available for the DATETIME field type when using the data filter?

is prior to, is within, is after

is before, is after, is between

Which two technologies are used to stream and store real-time event monitoring data?

Platform Events and Big Objects

Platform Events and Standard Objects

What is the fastest way to combine CRM data with EventLogFile data?

Use the Big Object lightning app

Create a new Tableau CRM recipe in the Event Monitoring Analytics App

When enabled for streaming, Real-Time Events are published where?

To independent event subscription channels

To the EventMonitoring subscription channel

To independent custom object streams

To independent event subscription channels

What are two ways customers can satisfy the MFA requirement that goes into effect on February 1, 2022?

Enable MFA for all users who log in through a Salesforce product's user interface

Enable delegated authentication for all products built on the Salesforce Platform

Enable MFA for all users who log in through a Salesforce product's user interface

Enable MFA for all admins who log in through a Salesforce product's user interface

Enable MFA for your single sign-on identity provider and ensure all Salesforce users log in via SSO

Enable delegated authentication for all products built on the Salesforce Platform

A customer needs to track field history for more than 20 fields per object? How should the consultant advise them to proceed?

Purchase the Field Audit Trail add-on feature.

Purchase additional storage capacity to unlock additional field history tracking.

Purchase the Field Audit Trail add-on feature.

Purchase additional field history tracking capacity in blocks of 20 fields.

Enable and save field history tracking settings on the 21st field to automatically add additional field history tracking capacity to the org.

What does the default Field Audit Trail policy in a production org state?

Archive data after 18 months, store it for 10 years

Archive data after 12 months, store it for 5 years

Archive data after 6 months, store it for 18 months

Archive data after 18 months, store it for 10 years

Archive data after 24 months, store it for 7 years

Which Real-Time Events can be used with Transaction Security?

ApiEvent, ReportEvent, LoginEvent

ApiEvent, LoginEvent, MobileEmailEvent

ApiEvent, ReportEvent, LoginEvent

ApiEvent, LogoutEvent, UriEvent

ApiEvent, LoginEvent, LightningURI Event

Salesforce Certified Security and Privacy Accredited Professional Practice Test 1

Salesforce does not allow email or SMS text messages as verification methods for MF

A.

Which two reasons explain this? (2 options)

B.

Entering codes from text messages is error-prone

C.

Mobile devices can be lost or broken

D.

Email account credentials can be compromised

E.

SIM cards can be hacked

Salesforce Certified Security and Privacy Accredited Professional Practice Test 1

Question

Salesforce Certified Security and Privacy Accredited Professional Practice Tests

Practice Tests