To grant Universal Containers sales managers access to shipment records properly it was necessarily to the IT Team is worried about improper access to records.Which two features and best practices should a Salesforce architect recommended to mitigate the risk?

Use runAs system method in test classes to test using different users and profiles.

USe isShareable keyword in Apex classes to assure record visibility will be followed

Use runAs system method in test classes to test using different users and profiles.

Use with Sharing keyword in Apex classes to assure record visibility will be followed

User isAccessable keyword Apex classes to assure recor visibility will be followed.

Susan posts a file to the Chatter feed for a record of an object.Which two statements accurately describe who can view the file by default?

Susan and users with the View all Data permission.

Susan and users with access to the record.

Susan and users with a shared Chatter post for the file.

Susan and users with the View all Data permission.

Susan and users with access to the record.

How would you make sure Visualforce page is security proof? Choose 3 answers

Submit to force security scanner

Use web application tool for security

Use debug to check hijacked requests

Manually check for sql injection

Submit to force security scanner

Use web application tool for security

Use debug to check hijacked requests

Which two options provide implicit record access to users? Choose 2 answers

Read-only access to parent account for a user with access to a child case

Access to child opportunities for the owner of the parent account

Read-only access to parent account for a user, based on a criteria-based sharing rule

Read-only access to parent account for a user with access to a child case

Access to child opportunities for the owner of the parent account

Access to related leads for the owner of the parent campaign

Universal Containers has developed Apex code to manually create AccountShare records to grant specific users access to individual Accounts. What must the Architect do to ensure the AccountShare records are not deleted when the owner of the Account is changed?

Create the share records and set the RowCause to a custom Apex Sharing Reason

Create the share records in a class with the ''Without Sharing'' keyword

Create the share records with the Delete on Owner Change field set to false

Create the share records and set the RowCause to Manual

Universal Containers has the following requirements: A custom Loan object requires Org-Wide Defaults set to Private. The owner of the Loan record will be the Loan Origination Officer. The Loan record must be shared with a specific Underwriter on a loan-by-loan basis. The Underwriters should only see the Loan records for which they are assigned. What should the Architect recommend to meet these requirements?

Create a lookup relationship from the Loan object to the User object. Use a trigger on the Loan object to create the corresponding record in the Loan share object

Use criteria-based sharing rules to share the Loan object with the Underwriter based upon the criteria defined in the criteria-based sharing

Create a lookup relationship from the Loan object to the User object. Use a trigger on the Loan object to create the corresponding record in the Loan share object

Create a master-detail relationship from the Loan to the User object. Loan records will be automatically shared with the Underwriter

Create an Apex Sharing Reason on the Loan object that shares the Loan with the Underwriter based upon the criteria defined in the Sharing Reason

Universal Containers has two custom objects: Job and Job Interview. The Job Interview object has a lookup relationship to Job. Both objects are set to Private in sharing settings. The HR team will own all Job and Job Interview records. They have asked their Salesforce Architect to automatically share the Job Interview when the Interviewer (lookup to user record) has been populated. The interviewer can be from any department. What method should the Architect use to achieve this requirement?

Build apex Managed Sharing code to share Job Interview with the Interviewer user

Build a criteria-based sharing rule between the Job Interview and the Interviewer

Build a standard sharing rule between Job Interview and the Interviewer

Build a workflow email notification to notify the interviewer of the record assignment

Universal Containers (UC) service reps are assigned to a profile which has ''View All'' in Case object (Private OWD). To make sure service reps have access to all relevant information to attend to customer requests, which two details should a salesforce Architects consider?Choose 2 answers:

Service reps will not be able to access all the UC Accounts records because Account OWD is private.

Service reps will be able to access all UC contact records if they are controlled by parent.

Service reps will not be able to access all UC contact records if they are controlled by parent.

Service reps will be able to access all the UC Account records due to Implicit Sharing.

Service reps will not be able to access all the UC Accounts records because Account OWD is private.

Dreamforce presenters need to be able to edit their presentation details (summary, presenter biographies, etc) on a private custom object inSalesforce (Presentation). All presenters for a presentation are captured on a Presenters juction object between Presenter and User.How can this be accomplished?

Trigger on Presenter junction object that uses Apex Managed sharing to add or remove access to the related Presentation record.

Trigger on Presenter junction object that adds the user to the Sales Team for the Presentation record.

Give Edit rights to the Presentation record via a Permission set that is given to the Presenters for a record.

Trigger on Presenter junction object that uses Apex Managed sharing to add or remove access to the related Presentation record.

A company intends bring work from anywhere culture in a bid to improve productivity. Their sellers use wide variety of devices with different form factors. The company currently uses one page layout to display opportunity record details to the sellers. The Regional Vice President of Seles is complaining about incorrect alignment of data in opportunity records, making it difficult for some sellers.Which steps are recommended to rectify this?

Use Dynamic Form to define different field sections applicable for different form factors of devices.

Use a visualforce override for Opportunity view action, identify the form factor onLoad action and display relevant layouts based on form factors,

Use Dynamic Form to define different field sections applicable for different form factors of devices.

Use a custom LWC override for Opportunity view action, identify form factor onLoad action and display relevant layouts based on form factors.

A banking company uses & VIP Flag in the Contact Object that they want only Private Banking Reps to see. Which approach is recommended to meet this requirement?

Set the Field Level Security for the VIP Flag field so that it is visible to Private Banking Rep Profile.

Define a page layout for Contact Object and add the VIP Flag field for that layout. Remove the VIP Flag field from other layouts.

Change the type of VIP Flag field to a picklist, define a new record type for the Contact Object and make the picklist field available for Editing.

Universal Containers created a public group with certain sales engineers to help on complex deals, as well as a sharing rule to grant access to these opportunities. The Opportunity organization-wide default is Private,What is the impact of these sharing settings?

Subordinates of managers who have sales engineers in the public group will also have access to these records.

Other sales engineers who are in the same Role Hierarchy as the sales engineers of the public group will also have access to these records.

Sales engineers and their managers in the Role Hierarchy will also have access to these records.

Subordinates of managers who have sales engineers in the public group will also have access to these records.

Universal Containers uses Person Accounts to represent retail customers and Business Accounts to represent commercial customers. The retail sales team should not have access to commercial customers but should have access to ALL retail customers.With the organization-wide default on Account set to Private, how should the architect meet these requirements?

Create o criteria-based sharing rule giving the Retail Sales role access to Accounts of type PersonAccount.

Create an owner-based sharing rule on AccountContactRelation to grant a@coess to all account contact roles records owned by retail sales reps.

Update the Retall Sales profile to grant access to Person Account record type.

Create o criteria-based sharing rule giving the Retail Sales role access to Accounts of type PersonAccount.

Universal Containers (UC) has a mostly Private organization-wide default, as it Is a core principle of UC to respect client data privacy. UC has implemented complex processes for granting access to Opportunity data. A few key members of the sales reporting team need to always be able to see, but not change, Opportunity data for all opportunities.What should an architect recommend as an approach to meet these requirements?

Create a permission set that grants the View All permission for Opportunity.

Create & permission set that grants the View All Data permission.

Give the View All Data permission to the Sales Reporting profile.

An architect from a previous project implemented Platform Shield Encryption for a company.However, based on a recent audit, the company's Privacy Team identified three additional fields in their Account Records (Billing Street, Billing City and Phone) that needs to be secure end protected.How should an architect proceed with this new policy change?

Use Encryption Policy and contact Salesforce to update the existing records so that their field values are encrypted.

Use Classic Encryption to ensure all fields are protected and contact Salesforce for help with encryption verification,

Use Encryption Policy and wait for an email from Salesforce indicating the field values are encrypted.

A sales coach at Universal Containers wants to create and share report folder with other sales coaches,Which two permissions are required to accomplish this?

Create and customize Reports and Report Folders.

Manage Reports in Public Folders and edit My Reports.

Create and customize Reports and Report Folders.

Create Report Folders and manage Reports in Public Folders.

Besides their own team accounts, sales managers at Universal Containers need to have READ access to all accounts of the same segment in other countries. Role hierarchy was implemented accordingly (based on countries), but a sales manager in the US is complaining that he cannot view account records of the same segment in Canada. What should be done to grant access in a proper way?

Create an owner-based sharing rule to grant access to account records that have the same segment to all sales manager roles.

Change the role hierarchy and put all of the sales managers in the US and Canada in the same role.

Create criteria-based sharing rules to grant access to account records that have the same segment to all sales manager roles.

Create a public group and include all accounts of the same segment and grant access through a permission set.

Create an owner-based sharing rule to grant access to account records that have the same segment to all sales manager roles.

Sales Reps at Universal Containers sometimes create large files as a part of the Sales process that are too large to share over email. They would like users to be able to share files with customers, but the CISO has requested that any file links shared must be protected by a password.How can this be accomplished?

Sales reps can create a content delivery. During creation, the user should select the option to require a password to access content.

Set up an experience cloud site for customers to access files. Share the file with customers via chatter. Customers can then log into the site to access the content.

Sales reps can create a content delivery. During creation, the user should select the option to require a password to access content.

Utilize an AppExchange product for delivering password-protected files to their customers,

.From customers on company Issued desktops and uses case object to track customer issues and grievances. The company would like to capture images of customer site captured by field consultants while they are editing the case record during customer site visit. The Director of IT wants to minimize customization and promote reusability of code artifacts wherever possible, what recommendations should an architect give to the company to implement the image capture requirement, while ensuring customer that the service rep can continue to use same lightningpages they were trained to use?

So Use Lightning Component as an override for 'Edit' action on lightning experience allowing image capture feature. Detect the form factor of the device and redirect the user to the default not overridden view.

Create 4 separate button ''Edit in Mobile', which opens & custom lightning component that will allow field consultants to add an image. No change required for desktop users.

Use Lightning Component as an override for 'Edit'' action on mobile view allowing image capture feature. No Change required for desktop users.

Customer complaints for bad interactions with a customer support agent are logged as Cases and assigned to a human resources representative. The agent of the complaint should not see the case, but their manager should.How is this accomplished?

Trigger on Case to lookup and share to the manager of an Assigned Agent custom field (the subject of the complaint) using Apex Managed Sharing.

Criteria based Sharing Rule on Case that shares to the Role Manager and above when a custom field Assigned Agent (subject of the complaint) Is not blank,

Case is owned by the subject of the complaint, so their manager in the role hierarchy can access the record. CRED permission are removed on Case so the agent cannot read the case record.

Universal Containers requested to leverage Lightning Web Components (LWC) to improve support reps' user experience. LWC will be used as view layer, and Apex classes will have the business logic.Which attention points should the development team consider when implementing this solution?

Once that Apex runs on system mode, the development team needs to enforce record visibility

Create test classes including runAs test different users accessing the data,

Use isShareable, isEditable, and isCreatable to enforce field permissions.

Universal Containers has a Performance Feedback custom object (Private organization-wide default) used by customers to report any Issues with delivery drivers. Feedback should not be visible to the driver, but any feedback records should be accessible to people above them in the RoleHierarchy, even when the driver changes managers. Assuming managers have Read access to the Feedback object, which three steps are necessaryto solve these requirements?

Remove Read permission on the Driver profile, have feedback ownership transferred to the driver when feedback is submitted, and use the Role Hierarchy to give access to 4 driver's manager.

Remove Read permission on the Driver profile, have feedback ownership transferred to the driver when feedback is submitted, and create an ownership-based sharing rule,

Remove Read permission on the Driver profile, have feedback ownership transferred to the driver's manager when feedback Is submitted, and use the Role Hierarchy to give access to a driver's manager.

If a Case requires involvement from one of the Legal team, the Case owner adds one of the corporate lawyers to the Legal SME field on the case.Since cases are private, how can we grant a lawyer access to a specific case when their assistance is needed?

Use Apex Managed sharing in a case Trigger that shares the record to the user identified in the Legal SME field.

Create an Criteria Based Sharing Rule that shares to the Corporate Legal Team Role when the ''legal assistance needed? Field is checked.

Use Apex Managed sharing in a case Trigger that shares the record to the user identified in the Legal SME field.

Create a Criteria Based Sharing Rule that shares to the Legal Public Group when the ''legal assistance needed?'' field is checked.

Universal Containers (UC) requested that branch managers and UC branch staff should only see customers and related information in their geographic location.Which options should be used together to achieve the requirements?

Configure organization-wide defaults of the Account object and create sharing rules.

Create the Account Team and add branch manager team members, and configure organization-wide defaults of the Account object.

Configure organization-wide defaults of the Account object and create sharing rules.

Configure Role Hierarchy and create sharing rules.

A user posts a file to the Chatter feed for a record of an object that has a Private organization-wide default.Which statement accurately describes who can view the file by default?

The user who posted the file and users with access to the record

The user who posted the file and users with a shared chatter post link to the file

The user who posted the file and users with access to the record

Only the user who posted the file

Sales operations at Universal Containers (UC) has created Public Reports and Dashboards folders for sales managers. Sales operations and salts managers' report to the VP of Sates. Sales operations currently spends a few hours each month updating users mat should have access to edit reports and dashboards in these folders.How should UC grant access to sales managers to automate access to these Public Reports and Dashboard folder?

Share the folders with the Sales Managers profile.

Share the folders with a 'Sales Managers' Public Group.

Share the folders with the lowest rates in the Role Hierarchy; superiors will get access automatically.

A banking company wants their customers Date of Birth Field searchable by Banking Reps, but only editable by Customer Support Reps.Which approach is recommended to meet this requirement?

Set the Fled Level Security for the Date of Birth field to be Visible to Customer Support Rep Profile, and set the Date of Birth Field Visible and Read-only to Banking Rep profile.

Create a Validation rule in the Data of Birth field so the rule returns true only when user.profilename matches Customer Support Rep.

Set the Fled Level Security for the Date of Birth field to be Visible to Customer Support Rep Profile, and set the Date of Birth Field Visible and Read-only to Banking Rep profile.

Add Date of Birth field to the Search layout of the Contact Object. Modify the Page layout assigned to Customer Support Rep and add Date of Birth field as Required.

Universal Containers (UC) has affiliates who sell containers in countries where UC does not have a local office. UC uses a Partner Community to manage the sales cycle in those countries. One of its affiliates has grown substantially and restructured its internal sales team with the following structure; Sales VP ---> Director of Sales ---> Sales Manager ---> Sales Reps. Sales Reps should not see each others' opportunities, and visibility of deals should open up within e Sales Rep's hierarchy.What is the main problem an architect should address in this situation?

Partner User roles are limited to three levels.

The Channel Manager role cannot be shared with Partner Community.

Partner Community does not support Role Hierarchy.

Universal Containers (UC) has affiliates who sell containers in countries where UC does not have a local office. UC uses a Partner Community to manage the sales cycle in those countries. One of its affiliates has grown substantially and restructured its internal sales team with the following structure; Sales VP ---> Director of Sales ---> Sales Manager ---> Sales Reps. Sales Reps should not see each others' opportunities, and visibility of deals should open up within e Sales Rep's hierarchy.What is the main problem an architect should address in this situation?

Partner User roles are limited to three levels.

The Channel Manager role cannot be shared with Partner Community.

Partner Community does not support Role Hierarchy.

Universal Containers would like to store an encryption key within Salesforce for use in Apex Code, but does not want users to be able to see this confidential key. Users require the view setup permission.How can Universal Containers securely store the confidential key?

Create a protected custom metadata type that stores the encryption key. Package the protected custom metadata type with its associated records in a managed package. Install the package in the production org.

Create 4 protected custom metadata type that stores the encryption key. Package the protected custom metadata type with its associated records in an unlocked package. Install the package In the production org.

Create 6 custom metadata type that stores the encryption key. Make sure that only the admin profile has access to the custom metadata type $0 that end users cannot access the encryption key.

A sales rep at Universal Containers was added to an opportunity team with Read/Write permissions.Which action is she allowed to perform in the opportunity?

Add/remove members in the opportunity team.

Sales operations at Universal Containers (UC) wants to create list views to filter opportunities for certain geographies.How should UC hide list views that are not relevant to an individual user since there will be more than 50 list views?

Share the list views with the appropriate role and internal subordinates.

Share the list views with the appropriate queue.

Share the list views with the appropriate individual users.

Universal Containers uses Standard WorkOrder object to track various work orders sent to field agents. Currently, the WorkOrder object has more than 400 fields. There are eight different types of work order processes established. The Director of Customer Service wants to ensure that field agents gets to see only required information specific to the WorkOrder type they are addressing.Which option is recommended to implement this requirement?

Use Dynamic form to add different page sections and control visibility of sections by Work Order RecordType value,

Use a custom LWC to override the view action of WorkOrder with custom metadata type defining relevant fields per WorkOrder type

Use different page layouts per work order type with different sections representing key information about the specific work order type.

Use Dynamic form to add different page sections and control visibility of sections by Work Order RecordType value,

Salesforce Certified Sharing and Visibility Architect Practice Test 6

Universal Containers has requirement to integrate Salesforce with an external system to control record access.

What option should the Architect consider when designing a solution?

Become a Premium Member for full access

Unlock Premium Member

Salesforce Certified Sharing and Visibility Architect Practice Test 6

Question

Salesforce Certified Sharing and Visibility Architect Practice Tests

Practice Tests