What is used to specify the objects and fields users can access?

What is used to specify the individual records that users can view and edit?

True or False: A user can have many profiles.

True or False: A user can have multiple permission sets.

True or False: Every Record is owned by a user.

Yes or No: Does role hierarchy override OWD settings?

What is the difference between profiles, permissions sets and roles?

True or False: A Role hierarchy is an example of a Sharing rule.

What is the difference between a profile and permission set?

If users have “Master” record type in their profile and one custom record type in their permission sets, which record types will the user have access to

True or False: Record types in permission sets can be moved via permission sets.

True or False: If there is no associated license to a permission set there are no requirements to assign the permission set.

You added the “Use Identity connect” permission to a permission set then assigned the permission set to a user. However, the assignment failed. Why?

True or False: View All and Modify All Object permissions (set in Profiles or permission sets) override sharing rules.

Yes or No: Org Wide Default(OWD) is a single setting that applies to all standard objects?

True or False: Role Hierarchy extends access vertically while sharing rules extend access horizontally.

True or False: In a Salesforce Org there can be many role hierarchies.

What wins when object level settings (profiles/permission sets) conflict with record level settings (roles, sharing rules)?

Which best describes a queue?

What are the basic tenets of role hierarchy? (Choose 2)

How should the Architect ensure that OBJECT-LEVEL SECURITY is enforce within a custom Visualforce application that was a standard Apex controller on the Lead object?

Which two options provide implicit record access to users? (Choose 2)

Universal Containers has set Opportunity Sharing to Private with Opportunity Teams enabled.Which three options can change the Owner of the Opportunity? (Choose 3)

Universal Containers has the following requirements:

The Commercial Account and Consumer Account support departments should not collaborate.

The Commercial and Consumer sales users roll up to the same VP of Sales, but there should be no collaboration between sales departments.

The Commercial sales department should share its customers with the Commercial support department.

The Consumer sales department shares its customers with the Consumer support department.

The Commercial and Consumer support departments roll up to the same Support Director.

The sales departments will remain the Account Owner for the Accounts that they sell to.

What is the recommended Org-Wide Sharing Default for Accounts, and how would the
Architect enable proper Commercial and Consumer Sales to Support Account Sharing for this scenario?

Universal Health is planning to store patient notes in Salesforce. Patient notes consist of long text notes taken by a use to document phone calls with a patient.A date audit has identified that these notes can contain Personally Identifiable Information (PII) and Personal Health Information (PHI). The regulatory requirements state that this data must be encrypted at rest as well as in transit.What should the Architect do in order to make sure Universal Health stays compliant?

Universal Containers has the following requirements:

1. A custom Loan object requires Org-Wide Defaults set to Private.
2. The owner of the Loan record will be the Loan Origination Officer.
3. The Loan record must be shared with a specific Underwriter on a loan-by-loan basis.
4. The Underwriters should only see the Loan records for which they are assigned.

What should the Architect recommend to meet these requirements?

Universal Containers has the following Sharing Settings for their Org:

Account = Private
Contact = Controlled by Parent
Opportunity = Private
Case = Private

They have enabled “Default Account Teams” and have trained users to set up their Default Team. Which three access levels can be set on the Account Team Member?

(Choose 3)

In order to comply with Regulatory Requirements, Universal Containers must store sensitive customer information on-premise. Universal Containers would like this on-premise information to be accessible from Salesforce. What technology can Universal Containers use to achieve this?

Universal Containers, a global corporation of 50,000 users, has a 24×7 call center operated by 20,000 users that includes employees and contractors. Their sales organization is 10,000 strong and they started processing about 100,000 updates to opportunity custom fields called Priority and NextStep. They also started processing 20,000 updates to a highly nested territory hierarchy. There was a third mass update on a Next Step field on the Action Plan custom object that has Case as a lookup field. Users started seeing a Group membership lock error in the system.What is a probable cause for this error?

Universal Containers has a custom object to maintain Job information with a private sharing model. The Delivery group is distributed through the Role Hierarchy based on geography. As the Delivery group often collaborates on Jobs, all users in the Delivery profile required View access to all Job records. In special case, the Delivery user who owns a job must be able to grant a Product Development user access to a Job record.Which two platform features can be used to support these requirements? (Choose 2)

Universal Containers has set the Org-Wide Sharing Default for Accounts to Private and has created some sharing rules to extend access based on certain data access policies. An architect has been asked to review access to a certain set of key customer accounts.How might this review be conducted?

User A at Universal Containers is in the default account team for User B. User B owns the ACME account and changed User A’s team member access to the account. What is the impact of this change?

Universal Containers is a fast-growing company that sells containers globally. It has thousands of dealerships throughout the world where local dealers service Containers sold locally. They recently opened two dealerships in California: NorthCal and SoCal. Universal Containers implemented a new partner community to enable their dealers. Each dealership has a dealer Manager who has all service agents report into them.Assuming a private sharing model, what is the best option to enable dealer managers to have visibility to customer cases within their dealership and not across all dealerships?

Universal Containers is implementing a community of High-Volume Community users. Community users should be able to see records associated to their Account or Contact record. The Architect is planning to use a Sharing Set to provide access to the records. When setting up the Sharing Set, certain objects are not available in the list of Available Objects. Which two reasons explain why an object is excluded from the list of Available Objects in a Sharing Set? (Choose 2)

What is the best practice for testing sharing and visibility changes?

When writing test methods, what functionality is verified by the system method”runAs()”?

Universal Containers has enabled External Default Sharing and wants to allow for external users to have the External Sharing Default set to Public Read-Only for a custom object.Which two options are valid Internal Default sharing settings for the custom object? (Choose 2)

The architect at Universal Containers would like to prevent users from editing encrypted fields. Assuming no customization is implemented, which two options should the Architect choose to support the requirement? (Choose 2)

Universal Containers has recently implemented an integration that is populating 50 custom fields on the account object. They would like these fields to be available to Managers for reporting but do not want them to clutter the page layouts.What should the Architect recommend as a solution?

A Sales Rep at Universal Containers wants to create a dashboard to see how his sales numbers compare with his peers.Assuming a Private model, which two permissions would the Sales Rep need to meet this requirement? (Choose 2)

What feature in Salesforce is needed to restrict access to a custom object that has Public Read/Write access?

The Architect notices that there are many duplicate Account records and numerous sharing rules created in Salesforce.What would be the reason?

At Universal Containers, users should only see Accounts they or their subordinates own. All Accounts with the custom field “Kay Customer” populated should be visible to all Senior Account Managers. There is a custom field on the Account record that contains sensitive information and should be hidden from all users, except 3 designated users who require view and edit access. These three users come from different user groups, and will change occasionally.Which three platform security features are required to support these requirements with the minimum amount of effort? (Choose 3)

Universal Containers does not want the Users in the Custom Sales Department Profile to be able to delete Opportunities.How would the Architect prevent a certain set of users from deleting Opportunities?

Universal Containers is designing a new community using the Customer Community license type. They would like to have the users complete survey questions through the community interface and store the responses in a Custom Object that has a lookup to the account object. Any internal user who has access to the account should be able to see all survey responses. All Customer Community users should be able to see surveys filled in by other users for their company, but not surveys for other companies.What are the correct security settings to achieve this?

Universal Containers has two custom objects: Job and Job Interview. The Job Interview object has a lookup relationship to Job. Both objects are set to Private in sharing settings. The HR team will own all Job and Job Interview records. They have asked their Salesforce Architect to automatically share the Job Interview when the Interviewer (lookup to user record) has been populated. The interviewer can be from any department.What method should the Architect use to achieve this requirement?

Universal Containers (UC) has a requirement to expose a web service to their business partners. The web service will be used to allow each business partner to query UC’s Salesforce instance to retrieve the status of orders. The business partner should only be allowed access to orders for which the business partner is the fulfillment vendor. The Architect does not want the business partners to utilize the standard APIs and would prefer a custom API be developed.Which three design elements should the Architect consider in order to ensure the data security of the solution? (Choose 3)

Below are some details regarding the organization at Universal containers:

1. Richard and Kevin are the east sales reps and their manager is Karen the East sales executive.

2. Sam and Wilder are West sales reps and the manager is Wendy, the West sales executive.

3. Bob is the CEO and managers both Karen and Wendy

Universal containers role hierarchy follows their management structure. Richard owns an account, NewCompany, and Kevin owns an account, OldCompany. Karen manually shared her account NewWorld with Kevin. However, she has moved to a new role to lead all Named Accounts, and Phil, who replaced her, is the new owner of NewWorld.Which employees will have access to the NewWorld account?

Universal containers has a global 24×7 salesforce.com implementation that supports sales, services, order management, and various other parts of their business. They have a nested territory hierarchy, 10,000 sales users cover and 20,000 support agents. Territory changes happen daily. The demand for new applications and changes to the platform is high and they follow and agile development methodology and deliver new releases every two weeks on the platform.What salesforce.com feature would have the system recover from a maintenance restart on Salesforce servers?

Which three capabilities are available with Enterprise Territory Management? (Choose 3)

Which two access grants are stored in the Group Maintenance tables? (Choose 2)

Which permissions bypass the FLS protections safeguarding a secret stored in a custom field? (Choose 3)

The following list contains possible ways of viewing the contents of encrypted custom fields. Which options would show the contents in clear text? (Choose 3)

A remote user is complaining that they can’t see a certain account when they run a particular Private Account List View that they created for themselves. How might a System Administrator assist in troubleshooting this issue?

Universal Containers has created a custom Sales Operations profile with read and edit access to the Category field on a custom object. There is a new requirement that 3 of the 100 users assigned to the Sales Operations Profile should have read-only access to the Category field. How can the Architect support this request?

At Universal Containers, the Sales VP likes to re-assign Opportunity Teams every six months. Each Opportunity Team has the following resources:

o AE (owner)
o Sales Engineer
o Vertical Overlay
o Sales Ops

What should the Architect use to re-assign Opportunity Team members so they have access to the appropriate Opportunity records?

Universal Containers has successfully implemented a large Service Cloud rollout for their national call center 3 months ago. One of their largest customer accounts, United Automotive, has over 15,000 open cases. Agents are now having trouble opening new cases for United Automotive. When they try to create a case, the following Error message appears for them:

UNABLE_TO_LOCK_ROW

They notice that this only occurs for the United Automotive account. If they try to save the case again it will usually work, but the problem seems to be happening more and more often. What option should the Architect recommend?

Which two license types can create and edit reports, when assigned the correct permissions? (Choose 2)

What permissions are required for users to see the Force.com Quick Access Menu?

Which of the following are standard profiles? (Choose 3)

What are the Rule Types that can be chosen when creating Account Sharing rules? (Choose 2)

What are some ways that Force.com provides to quickly delegate data administration access? (Choose 2)

What are not abilities of users in the Delegated Administrators group? (Choose 2)

What options allow delegated admins to log in as a user who has explicitly granted login access?

In a recruiting application, a Position custom object is related to a Salary custom object. Sensitive information such as current salary is stored on the Salary object. All users should be able to at least view position information. However, only select individuals should be able to read salary records.How should a developer accomplish this?

Which statement is TRUE about field-level security? (Choose 2)

Which mechanism allows for authenticated access to a Force.com site? (Choose 2)

In a recruiting application, a master-detail relationship has been defined between two custom objects, Job Applications (master) and Reviews (detail). Which statement is TRUE? (Choose 2)

A developer wants to build an application on the Force.com platform. The data model, the users needing access to the application, and the application business logic have been considered. The report and dashboard requirements have not been considered.
Which statement is TRUE about building the application?

Universal Containers requires that some employees are able to view and edit records of a custom object called Positions, but no users can delete them
How can Universal Containers accomplish this goal?

In a recruiting application, all users should be able to see positions with a status of Open. If the status is anything other that Open, the position should be visible only to the record owner. How would a developer accomplish this? (Choose 2)

In a recruiting application, all users should be able to see and edit all candidate records, but interviewers should NOT have access to the address of a candidate and should NOT be able to see the birth date of a candidate.
How would a developer meet this requirement?

Users X and Y need to see the same candidate record. For security reasons, user Y should NOT be able to view and read address field on the record.
How would a developer meet this requirement?

Which element is included in the security model for Force.com Sites? (Choose 2)

When do users have the option to manually share records they own from the record detail page?

All users of a Recruiting application should be able to edit all positions, except for user X, User X should be view positions. How can a developer meet this requirement?

The organization-wide default settings for Accounts is Private. A manager resides above a team in the role share some of the account data with the team.
Which feature can extend the viewing privileges of the team to allow them to see each other’s data? (Choose 2)

A group of executives has requested a convenient way to see daily metrics without having to log in to Salesforce. How would a developer accomplish this goal?

Which of the following is not a standard Profile? (Choose 2)

What settings can you specify on a profile? (Choose 2)

A manager in an organization wants to share specific fields of data to his subordinates that only he has access to. What is the best way to share specific fields of data? (Choose 2)

Under what circumstances would the sharing button to be enabled on a detail view for a record.

When creating a sharing rule what entities can data be shared to. (Choose 3)

An organization wishes to have everyone view/edit records on an object except for a single person x who should only have read-only access to the object. What is the best way to implement the requirement?

A remote user is complaining that they can’t see a certain account when they run a particular Private Account List View that they created for themselves. How might a
System Administrator assist in troubleshooting this issue?

Universal Containers has successfully implemented a large Service Cloud rollout for their national call center 3 months ago. One of their largest customer accounts, United Automotive, has over 15,000 open cases. Agents are now having trouble opening new cases for United Automotive. When they try to create a case, the following Error message appears for them:
UNABLE_TO_LOCK_ROW
They notice that this only occurs for the United Automotive account. If they try to save the case again it will usually work, but the problem seems to be happening more and more often.
What option should the Architect recommend?

Which two license types can be assigned the permissions to create and edit reports? (Choose 2)

What is the security vulnerability in the following code snippet?
<apex:form>
<apex:commandButton rerender=”outputIt” value=”Update It”/>
<apex:inputText value=”{ !myTextField}”/>
</apex:form>
<apex:outputPanel id=”outputIt”>
Value of myTextField is <apex:outputText value=”{!myTextField}” escape=”false”/>
</apex:outputPanel>

Universal Containers has a custom Job object with a private sharing model. Based on the size and location of the Job, different teams must have access to edit the specific Job record. To support this requirement, Apex Managed Sharing has been implemented to share records with the required users. Since the teams change frequently, managed sharing recalculations need to be manually run frequently. What can the Architect do to optimize this process?

Universal Containers is creating a custom Visualforce page to allow users to edit contact records. The developer has used an apex:outputField for the Phone field on the contact object. What is the expected behavior if a user without field-level security accesses the Visualforce page?

The Collections department at Universal Containers uses Salesforce to track its efforts. All Invoices and invoice line items are store in salesforce. Invoice line item object details, such as quantity and extended amount, should be summarized at the invoice object level, and all users who can see a given invoice should always see all invoice
line items. Without leveraging Apex code, how should an Architect create the relationship between the Invoice object and the Invoice Line Item object?

What should the Architect do to ensure Field-Level Security is enforced on a custom Visualforce page using the Standard Lead Controller?

Universal Containers has Controlled by Parent sharing settings on the Contact object and Public Read Only sharing settings on Account, Opportunity, and Case objects. Which two options can the user see while adding Account team members to the Account?(Choose 2)

Universal Containers has just deployed a change to its role hierarchy. A manager is reporting that their staff can now see Accounts that they do not own and should not have access to. How should the Architect troubleshoot?

When writing test methods, what functionality is verified by the system method “runAs()”?

Universal Containers has created a custom object to store highly confidential client relationship data with Private sharing settings. Which two options would an Architect choose to ensure access only to the record owner and the administrator?
Choose 2 answers.

Which two options can help mitigate the risks of import failures associated with large-volume bulk data loads?
Choose 2 answers.

A sales representative at Universal Containers needs assistance from specific product managers when selling certain deals. Product managers do not have access to opportunities they don’t own, as the sharing model is Private, but need to gain access when they are assisting with a specific deal. How can an Architect accomplish the requirement?

Universal Containers maintains Job information in a Custom Object that contains sensitive information. The only users who should be able to view and edit Job records are the user who owns the record and all users in the Delivery profile. Which three platform sharing tools are required to support the above requirements?
Choose 3 answers.

Below are some details regarding the organization at Universal Containers:
Richard and Kevin are the East sales reps and their manager is Karen, the East sales executive.
Sam and Wilder are West sales reps and their manager is Wendy, the West sales executive.
Bob is the CEO and manages both Karen and Wendy.
Universal Containers role hierarchy follows their management structure. Richard owns an account, NewCompany, and Kevin owns an account, OldCompany. Karen manually shared her account NewWorld with Kevin. However, she has moved to a new role to lead all Named Accounts, and Phil, who replaced her, is the new owner of NewWorld. Which employees will have access to the NewWorld account?

Universal Containers has requirement to integrate Salesforce with an external system to control record access.
What option should the Architect consider when designing a solution?

Which three areas should the Architect review in order to increase performance of “Record Access” and “Sharing” calculations?
Choose 3 answers.

Which are two valid use cases for programmatic sharing?
Choose 2 answers.

Universal Containers would like to create a custom team solution that can be used on a custom Loan object. The following requirements must be met:
The Loan custom object should be set to Private in the Org-Wide Defaults.
Any user added to the Custom Team object should have Read Only access to the corresponding Loan record.
If the Custom Team record is marked as “Primary” then the corresponding user should have Read/Edit access to the corresponding Loan record.

Which two methods will allow the Architect to meet the requirements?
Choose 2 answers.

Which features does Salesforce provide for restricting login access to the application?
Choose 2 answers.

Which three capabilities are available with Enterprise Territory Management?
Choose 3 answers.

Which two options are available to share a Report or Dashboard folder with other users in the Organization?
Choose 2 answers.

Universal Containers, a global corporation of 50,000 users, has a 24×7 call center operated by 20,000 users that includes employees and contractors. Their sales organization is 10,000 strong and they started processing about 100,000 updates to opportunity custom fields called Priority and NextStep. They also started processing 20,000 updates to a highly nested territory hierarchy. There was a third mass update on a Next Step field on the Action Plan custom object that has Case as a lookup field. Users started seeing a Group membership lock error in the system. What is a probable cause for this error?

In order to comply with regulatory requirements, Universal Health must encrypt all Personally Identifiable Information (PII), both while it is being transmitted over the network and while it is at rest. Universal Health has completed a data audit and has determined that 12 fields on the contact record can contain PII, including the contact name and several other standard fields. Univesal Health would like the fields to remain accessible in Salesforce. Which two options does Universal Health have to maintain compliance?
Choose 2 answers.

A Visualforce controller has a requirement to be written with “Without Sharing” at the top level; however, certain methods within the page still need to enforce the user permissions for creating records and accessing certain fields. Which two methods below would be used to enforce this requirements?
Choose 2 answers.

Which two are potential security vulnerabilities in the following code snippet?
<apex:page>
<apex:form>
<apex:outputText value=”Enter Name” />
<apex:inputText value=” { !name}” />
<apex:commandButton value=”Query” action=” {!query}” />
<apex:form>
<apex:page>
Public class SOQLController {
Public String name{
Get {return name;}
Set {name=value;}
}
Public PageReference query() {
String qryString= ‘SELECT Id FROM Contact WHERE’ +
‘(IsDeleted = false and Name like \’#’ + name + ‘#\’)’;
queryResult = Database.query{qryString};
return null;
}
}
Choose 2 answers.

Universal Containers (UC) works with a dealer network to sell their products. There are approximately 5,000 dealers that do business with UC and UC has purchased a Partner Community to interact with each of their dealers on Opportunities. Each dealer is structured so that there are a group of managers who will oversee a larger team of agents. UC would like to set the Organization-Wide Defaults to Private for the Opportunity object, both internally and externally. Within each dealer, there are a few agents called Lead Agents who should be able to see the Opportunities for all of the other Agents at the dealer. What is the optimal solution for an Architect to recommend?

A user at Universal Containers would like to give access to a Report folder to someone else in the organization.
Which two access permissions should the user have to support this requirement?
Choose 2 answers.

The System Administrator at Universal Containers has created two list views called ListV1 and ListV2. One group of users should only see ListV1 and the second group of users should only see ListV2. Two public groups were created to restrict visibility to the respective list views. However, users in both groups are able to see both list views. What system permission in their profile enabled the users to see all list views?

Universal Containers has the following Sharing Settings for their Org:
Account = Private
Contact = Controlled by Parent
Opportunity = Private
Case = Private
They have enabled “Default Account Teams” and have trained users to set up their Default Team. Which three access levels can be set on the Account Team Member? Choose 3 answers.

Universal Containers has a private sharing model on Accounts. Apex Managed Sharing is required to share certain account records with all users who are assigned to a specific Role in the Role Hierarchy. What should be the recommended way for the Architect to implement this?

Universal Containers has Public Read Only sharing settings on the Opportunity object. What Opportunity access options can the user see while adding account team members to the Account?

Universal Containers has a junction object called “Job Production Facility”. With 2 master-detail relationships to the Job and Production Facility custom objects. Both master records have a private sharing model. What statement is true if a user’s profile allows access (Create/Read) to the Job and junction object, but no access to the Production Facility Object?

Which users have access to Opportunity records owned by an external user, assuming no other changes to the sharing model have been implemented?

Universal Containers has implemented a strict software architecture for their custom Apex code. One of the requirements is that all SOQL queries are contained within reusable classes. Depending on the context of the Apex transaction, the queries should be able to run either “With Sharing” or “Without Sharing”. Which two ways allow the Architect to meet these requirements?
Choose 2 answers.

Universal Containers has a custom object, Employee Review, with an Organization-Wide Default security setting of Private. A user lookup on the Employee Review object is populated when a reviewer is assigned to perform a review. How can this user be granted edit access to the record if they are not the owner?

Assuming granular locking is enabled, what activity can happen in parallel to changing a community account owner without risking group membership lock errors?

Universal Containers created a custom object called Defect and would like to enable the Sharing button on the Defect page layout to share the records manually to other users in the organization. In which scenario will the Sharing button appear?

A dummy user at Universal Containers owns more that 10,000 lead records. The system assigned all these leads to a dummy user. This is causing performance issues whenever role hierarchy changes. Which two options should be recommended to improve performance?
Choose 2 answers.

Universal Containers regularly uploads large amounts of parent and child records into Salesforce to maintain integrations with other systems that update their date in scheduled batches or continuously in real time. Which two situations may pose a risk of producing locking errors? Choose 2 answers.

Which two settings are available in profiles, but not permission sets?
Choose 2 answers.

Universal Containers has a requirement to share Accounts automatically to the users at a field office. They currently have the following setup in their environment:
Accounts are set to Private in the Org-Wide Default.
The field office is specified by a lookup in the account object.
There are 400 field offices.
The users in each field office are managed using public groups.
Based upon a lookup relationship field on the Account, how should the Architect meet their requirement?

The Architect at Universal Containers would like to prevent users from editing encrypted fields. Assuming no customizations are implemented, which two options should the Architect choose to support the requirement?
Choose 2 answers.

Universal Containers has implemented a community for its customers using the Customer Community license type. They have implemented a custom object to store service requests that has a lookup to the account record.
The Organization-Wide Default External Access for the service request object is set to Private. Universal Containers wants their customers to be able to see service requests for their account through the community.
Customers should not see service requests for other accounts. What Salesforce feature can the Architect use to implement this?

Universal Containers is a fast-growing company that sells containers globally. It has thousands of dealerships throughout the world where local dealers service Containers sold locally. They recently opened two dealerships in California: NorthCal and SoCal. Universal Containers implemented a new partner community to enable their dealers. Each dealership has a dealer Manager who has all service agents report into them. Assuming a private sharing model, what is the best option to enable dealer managers to have visibility to customer cases within their dealership and not across all dealerships?

Universal Containers has a set of Account Management users that should only see Accounts once the Account becomes a customer. The Type field on the Account identifies whether the Account is a Prospect, Customer, Partner or Other. Which two methods could an Architect use to enable this sharing requirement, assuming a private sharing model for Accounts?
Choose 2 answers.

Universal Containers has a Private Sharing Model for the Opportunity object. Sales Rep A at Universal containers created the Opportunity record and then transferred ownership of the Opportunity record to Sales Rep B. both Sales Rep A and B have the same role in the Role Hierarchy. What access will Sales Rep A have to the Opportunity after the transfer?

Universal Containers has a custom object to maintain Job information with a private sharing model. They Delivery group is distributed through the Role Hierarchy based on geography. As the Delivery group often collaborates on Jobs, all users in the Delivery profile require View access to all job records. In special cases, the Delivery user who owns a job must be able to grant a Product Development user access to a Job record. Which two platform features can be used to support these requirements?
Choose 2 answers.

Universal Containers wants to create a way to store sensitive Invoice Data in Salesforce. A User who owns an Account should not see every Invoice, but only invoices that they or their subordinates own. Which two features should be considered during this solution implementation?
Choose 2 answers.

Universal Containers has a global 24×7 Salesforce.com implementation that supports Sales, Services, Order Management, and various other parts of their business. They have a nested territory hierarchy, 10,000 sales users, and 20,000 support agents. Territory changes happen daily. The demand for new applications and changes to the platform is high and they follow an agile development methodology and deliver new releases every two weeks on the platform. What Salesforce.com feature would help to system recover from a maintenance restart on Salesforce servers?

Universal Containers has enabled External Default Sharing and wants to allow for external users to have the External Sharing Default set to Public Read-Only for a custom object. Which two options are valid Internal Default sharing settings for the custom object?
Choose 2 answers.