Which two reasons explain this?

Entering codes from text messages is error-prone

Email account credentials can be compromised

Entering codes from text messages is error-prone

Mobile devices can be lost or broken

Email account credentials can be compromised

What is the difference between Classic Encryption and Platform Encryption?

Classic Encryption masks characters whereas Platform Encryption does not

Classic Encryption encrypts standard fields

Platform Encryption encrypts custom fields only. Classic Encryption encrypts standard fields

Platform Encryption is built on Classic Encryption

Classic Encryption masks characters whereas Platform Encryption does not

What is the primary difference between Data Mask and Data Encryption?

Data Mask prevents malicious attackers from accessing or interacting with sensitive data at rest in the data center.

Data encryption is used for masking data in a production environment

Data encryption is an add on feature to the Data Mask product

Data Mask prevents malicious attackers from accessing or interacting with sensitive data at rest in the data center.

Data masking prevents developers or other users from viewing sensitive data in the user interface or exporting it as plain text

Which of the following is a blocker to rolling out MFA?

Licensing for Transaction Security Policies

Users refusing to install applications on their personal phones

How do triggers and process automations deactivate before running a Data Mask configuration?

While running a configuration, Data Mask will automatically disable triggers and process automation before the masking begins

Triggers and process automation do not need to be deactivated to run a configuration

User will manually deactivate all automated actions before running a configuration

User will need to run a script in the developer console to deactivate any automated processes

While running a configuration, Data Mask will automatically disable triggers and process automation before the masking begins

When is it necessary to set an object configuration to "Run in Serial Mode"?

To mask objects that have multiple records with master detail or lookup relationships to the same record

For each custom object that is part of the configuration

Each time a configuration needs to be run more than one time

When a user needs to replace sensitive data with a random number

Which technology enables an admin to query for data or write custom code when enforcing a security policy?

An apex based Transaction Security Policy

What three are driving factors for Data Mask completion time?

The amount of data in the fields

The time of day a config is run

When will a user select the "Unique' check box next to a field as part of their Data Mask configuration?

When a user wants to prevent unintended reuse of library words or random characters

If a user wants to mask with data generated using a defined pattern.

When a user wants to prevent unintended reuse of library words or random characters

Whenever a user needs to delete sensitive data entirely, leaving an empty data set

When a user needs to specify a minimum and maximum value for the field.

How does Salesforce protect your org from all other customer orgs on a multitenancy platform?

Uses a unique identifier which is associated with user's session

Restricts IP addresses users can log in from

Uses only server authentication

Leverages only classic encryption

If the client wants to record the set up changes users are making to fields for a three years, how would the client achieve this with the standard product?

The Setup Audit Trail is good for 180 days so, use this together with a process of exporting the changes out of Salesforce to another system.

The Setup Audit Trail is good for 5 years so can be used to record this as standard.

Leverage Platform Encryption and enable the archive feature

Buy Shield as this provides features that can do this

The Setup Audit Trail is good for 180 days so, use this together with a process of exporting the changes out of Salesforce to another system.

If a user is to have access to an object, but limit their access to individual fields in that object, how would a consultant address this?

Use field level security or field permissions

Use object level security or object permissions

Use record level security settings

The Admin wants to make Salesforce applications more secure. Which set of security settings should be enabled to achieve this?

Enable Click Jack protection, Require HTTPS, Enable Cross-Site Scripting (XSS) Protection

Enable ClickJack protection, Lightning Lockdown, Enable User Certificates

Enable ClickJack protection, Health Check, Enable User Certificates

Enable Click Jack protection, Require HTTPS, Enable Cross-Site Scripting (XSS) Protection

Run Health Check, Require HTTPS, Salesforce Shield

For products built on the Salesforce Platform, which three tools can admins use to monitor MFA usage patterns?

Identity Verification Methods report

Multi-Factor Authentication Dashboard App

Custom list view of Users in Setup

Identity Verification Methods report

Multi-Factor Authentication Dashboard App

Multi-Factor Authentication Assistant

Custom list view of Users in Setup

Which two options are good ways to check Filter Criteria before running a Data Mask configuration

Test the query on workbench or dev console.

Click Query Preview in the Data Filter to preview your query in SOOL.

Test the query on workbench or dev console.

Run an initial configuration from end to end without filtering

Execute script in filtered view

Which three login types must have MFA enabled when the MFA requirement goes into effect on February 1, 2022?

Delegated authentication logins

How frequently can a user gather encryption statistics?

Once every month per objectOnce every 24 hours per object

Via Field Level Security settings, a Salesforce user has view access to a field that is encrypted via Platform Encryption.

What will the user see in the Salesforce user interface when they view a page that includes the field on it?

The field label followed by the unencrypted field value

The field label followed by a message indicating that the field value is encrypted

The field label followed by the unencrypted field value

The field label followed by eight asterisks

The field label followed by 256 characters of cipher text

What is the primary function of the Consent Event Stream?

It provides one stream to receive notifications about changes to consent fields or contact Information on all core objects.

It stores and manages the data related to your customer's communication subscriptions, such as newsletters or appointment reminders.

It stores the name, version, and effective dates of authorization forms

It tracks customers' requests for updates to their data privacy preferences

Which three are key value points for Security Center?

Respond to Threats and Anomalies Faster

Gain Visibility to Drive Insights

Respond to Threats and Anomalies Faster

Gain Visibility to Drive Insights

Which method should an admin use to view the Security Center Metrics?

Utilize the built-in dashboard and detail pages

Use an analytics tool of your choosing

If a user loses their verification method, what are three of the recommended steps an admin should take?

Disconnect the lost verification method

Generate a temporary verification code so the user can log in

Monitor the user's account activity for suspicious activity

Disconnect the lost verification method

Generate a temporary verification code so the user can log in

Ask the user to submit a lost verification method report before proceeding with any other steps Post about the incident to all Salesforce users as a learning opportunity

Monitor the user's account activity for suspicious activity

For products built on the Salesforce Platform, how is MFA enabled?

Create a permission set that includes the "Multi-Factor Authentication for User Interface Logins' permission, then apply the permission set to desired users

On the Identity Verification page in Setup, select the Enable Multi-Factor Authentication checkbox

Create a permission set that includes the "Multi-Factor Authentication for User Interface Logins' permission, then apply the permission set to desired users

GMFA is enabled by default, each user simply registers a verification method from their personal settings

Click the Enable button in the Launch stage of the Multi-Factor Authentication Assistant

Salesforce Certified Security and Privacy Accredited Professional Practice Test 2

Why do admins need Shield Platform Encryption?

To protect data from external hackers

To meet regulatory compliance mandates

To mask sensitive data on UI and API

To encrypt ALL data Salesforce does not allow email or SMS text messages as verification methods for MFA.

Comment (0)

Salesforce Certified Security and Privacy Accredited Professional Practice Test 2

Question

Salesforce Certified Security and Privacy Accredited Professional Practice Tests

Practice Tests