What are two differences between MFA and Device Activation?

MFA challenges users on every login; Device Activation challenges users only when they log in from a new device

Users can opt out of receiving Device Activation challenges, but can't opt out of MFA challenges

MFA challenges users on every login; Device Activation challenges users only when they log in from a new device

Device Activation allows SMS as a verification method while MFA does not

MFA is enabled for all users by default, admins must enable Device Activation

Which option does not require My Domain?

OpenID Connect into a Salesforce org

The ability to brand the login page

You need to limit when and where from users can access Salesforce- to help reduce the risks of unauthorized access. How should you go about this.

Use MFA to help ensure users are using a more secure login process

Restrict Access based on Login IP Addresses but login hairs can't be set up in conjunction with this feature

Use MFA to help ensure users are using a more secure login process

Restrict Access based on Login IP Addresses and use the Login Hours feature together

Do not allow users to access Salesforce from outside the office.

10. Can a customer run a penetration test against Salesforce?

Penetration testing is allowed, but the Salesforce Agreement needs to be signed before testing can comment

Some types of penetration testing are permitted, but not in production

No, this is not permitted under any circumstances

Penetration testing is allowed, but the Salesforce Agreement needs to be signed before testing can comment

Penetration testing can be carried out at anytime by anyone

Which three capabilities are part of the Health Check tool?

Align your org's security setting with Salesforce-recommended security standards

Identify and fix vulnerabilities in your security settingsOrganize user access logs

Verify that multiple Salesforce applications have the same level of security

Align your org's security setting with Salesforce-recommended security standards

Identify and fix vulnerabilities in your security settingsOrganize user access logs

Access event log files to track user activity and feature adoption and troubleshoot issues

Verify that multiple Salesforce applications have the same level of security

When is it necessary to set an object configuration to "Run in Serial Mode"?Each time a configuration needs to be run more than one time

To mask objects that have multiple records with master detail or lookup relationships to the same re

For each custom object that is part of the configuration

To mask objects that have multiple records with master detail or lookup relationships to the same re

When a user needs to replace sensitive data with a random number

Which two options are good ways to check Filter Criteria before running a Data Mask configuration?

Click Query Preview in the Data Filter to preview your query in SOQL

Test the query on workbench or dev console.

Click Query Preview in the Data Filter to preview your query in SOQL

Test the query on workbench or dev console.

Run an initial configuration from end to end without filtering

Execute script in filtered view

What happens to metrics in the parent tenant when a child tenant is disconnected?

The data is retained in the parent tenant, but not viewable in the app.

Metrics for the tenant are deleted immediately.

Metrics for the tenant are deleted during the next update.

The user may see incomplete data in the app

What are two benefits of conducting a user inventory prior to implementing MFA?

Identify logical groups of users for a phased rollout

Identify admins and other privileged users

Identify users who should be deactivated

Identify logical groups of users for a phased rollout

Identify users who don't have the correct permissions

Identify admins and other privileged users

Identify users who don't need MFA18. If the client wants to record the set up changes users are making to fields for a three years, how would the client achieve this with the standard product?

The Setup Audit Trail is good for 180 days so, use this together with a process of exporting the changes out of Salesforce to another system

Buy Shield as this provides features that can do this

The Setup Audit Trail is good for 180 days so, use this together with a process of exporting the changes out of Salesforce to another system

The Setup Audit Trail is good for 5 years so can be used to record this as standard.

Leverage Platform Encryption and enable the archive feature

Which three options can be controlled through password policies in Salesforce?

Password with special characters

What are three implementation activities that should happen prior to enabling MFA for users?

Document processes and troubleshooting information

Enable the Salesforce Authenticator app for the org/tenant

Distribute verification methods and registration instructions to users

Document processes and troubleshooting information

Enable the Salesforce Authenticator app for the org/tenant

Create the Identity Verification Methods reportTest registration and login flows for each supported verification method

Distribute verification methods and registration instructions to users

What do Right to be Forgotten policies automate?

How to compile and send PII to customers.

How does a user schedule automated runs for a policy?

Under Run Frequency, indicate how often you want the policy to run.

Execute an APEX script in the Developer Console

Set email notifications in Salesforce for when to run a Policy

Scheduling of automated executions is not an included feature

Under Run Frequency, indicate how often you want the policy to run.

A customer prefers to generate an encryption key for Salesforce to use. They prefer to generate it manually, once a year.What key management capability should the admin advise them to use?

Implement a custom Apex key generation class

Bring your own key, plus opt-out of key derivation

What does encryption statistics display to users?

Percentage of records encrypted

Percentage of records failing encryption check

Number of records created since last sync job was run

Number of times encrypted data was accessed by user

What two things occur if Platform Encryption is later enabled on fields that are enabled for Field Audit Trail?

Customers must run encryption sync again to encrypt the previously stored data for these fields

All data for these fields will be automatically encrypted

Data that was stored prior to encryption enablement can be encrypted via a support case

Only new data in these fields will be encrypted

What are three of the Commerce Cloud features that are available only when MFA is enabled?

Embedded objects in HTML attributes

Javascript in HTML attributes (adding or modifying)

Embedded objects in HTML attributes

Javascript in HTML attributes (adding or modifying)

Generic and application-specific cartridges

What are three tactics for ensuring the success of an MFA implementation?

Train users on how to bypass MFA if they forget or lose their verification methods

Watch for recurring login problems and changes to how many users are logging in Collect and evaluate user feedback

Have a clear and easy access recovery process for users who forget or lose their verification method

Train users on how to bypass MFA if they forget or lose their verification methods

Defer MFA logins for new hires until they're comfortable working in Salesforce

Watch for recurring login problems and changes to how many users are logging in Collect and evaluate user feedback

Have a clear and easy access recovery process for users who forget or lose their verification method

When enabled for streaming, Real-Time Events are published where?

To independent event subscription channels

To the EventMonitoring subscription channel

To independent custom object streams

To independent event subscription channels

Salesforce Certified Security and Privacy Accredited Professional Practice Test 3

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Salesforce Certified Security and Privacy Accredited Professional Practice Test 3

Question

Salesforce Certified Security and Privacy Accredited Professional Practice Tests

Practice Tests