What is used to specify the objects and fields users can access?

What is used to specify the individual records that users can view and edit?

True or False: A user can have many profiles.

True or False: A user can have multiple permission sets.

True or False: Every Record is owned by a user.

Yes or No: Does role hierarchy override OWD settings?

What is the difference between profiles, permissions sets and roles?

True or False: A Role hierarchy is an example of a Sharing rule.

What is the difference between a profile and permission set?

If users have “Master” record type in their profile and one custom record type in their permission sets, which record types will the user have access to

True or False: Record types in permission sets can be moved via permission sets.

True or False: If there is no associated license to a permission set there are no requirements to assign the permission set.

You added the “Use Identity connect” permission to a permission set then assigned the permission set to a user. However, the assignment failed. Why?

True or False: View All and Modify All Object permissions (set in Profiles or permission sets) override sharing rules.

Yes or No: Org Wide Default(OWD) is a single setting that applies to all standard objects?

True or False: Role Hierarchy extends access vertically while sharing rules extend access horizontally.

True or False: In a Salesforce Org there can be many role hierarchies.

What wins when object level settings (profiles/permission sets) conflict with record level settings (roles, sharing rules)?

Which best describes a queue?

What are the basic tenets of role hierarchy? (Choose 2)

How should the Architect ensure that OBJECT-LEVEL SECURITY is enforce within a custom Visualforce application that was a standard Apex controller on the Lead object?

Which two options provide implicit record access to users? (Choose 2)

Universal Containers has set Opportunity Sharing to Private with Opportunity Teams enabled.Which three options can change the Owner of the Opportunity? (Choose 3)

Universal Containers has the following requirements:

The Commercial Account and Consumer Account support departments should not collaborate.

The Commercial and Consumer sales users roll up to the same VP of Sales, but there should be no collaboration between sales departments.

The Commercial sales department should share its customers with the Commercial support department.

The Consumer sales department shares its customers with the Consumer support department.

The Commercial and Consumer support departments roll up to the same Support Director.

The sales departments will remain the Account Owner for the Accounts that they sell to.

What is the recommended Org-Wide Sharing Default for Accounts, and how would the
Architect enable proper Commercial and Consumer Sales to Support Account Sharing for this scenario?

Universal Health is planning to store patient notes in Salesforce. Patient notes consist of long text notes taken by a use to document phone calls with a patient.A date audit has identified that these notes can contain Personally Identifiable Information (PII) and Personal Health Information (PHI). The regulatory requirements state that this data must be encrypted at rest as well as in transit.What should the Architect do in order to make sure Universal Health stays compliant?

Universal Containers has the following requirements:

1. A custom Loan object requires Org-Wide Defaults set to Private.
2. The owner of the Loan record will be the Loan Origination Officer.
3. The Loan record must be shared with a specific Underwriter on a loan-by-loan basis.
4. The Underwriters should only see the Loan records for which they are assigned.

What should the Architect recommend to meet these requirements?

Universal Containers has the following Sharing Settings for their Org:

Account = Private
Contact = Controlled by Parent
Opportunity = Private
Case = Private

They have enabled “Default Account Teams” and have trained users to set up their Default Team. Which three access levels can be set on the Account Team Member?

(Choose 3)

In order to comply with Regulatory Requirements, Universal Containers must store sensitive customer information on-premise. Universal Containers would like this on-premise information to be accessible from Salesforce. What technology can Universal Containers use to achieve this?

Universal Containers, a global corporation of 50,000 users, has a 24×7 call center operated by 20,000 users that includes employees and contractors. Their sales organization is 10,000 strong and they started processing about 100,000 updates to opportunity custom fields called Priority and NextStep. They also started processing 20,000 updates to a highly nested territory hierarchy. There was a third mass update on a Next Step field on the Action Plan custom object that has Case as a lookup field. Users started seeing a Group membership lock error in the system.What is a probable cause for this error?

Universal Containers has a custom object to maintain Job information with a private sharing model. The Delivery group is distributed through the Role Hierarchy based on geography. As the Delivery group often collaborates on Jobs, all users in the Delivery profile required View access to all Job records. In special case, the Delivery user who owns a job must be able to grant a Product Development user access to a Job record.Which two platform features can be used to support these requirements? (Choose 2)

Universal Containers has set the Org-Wide Sharing Default for Accounts to Private and has created some sharing rules to extend access based on certain data access policies. An architect has been asked to review access to a certain set of key customer accounts.How might this review be conducted?

User A at Universal Containers is in the default account team for User B. User B owns the ACME account and changed User A’s team member access to the account. What is the impact of this change?

Universal Containers is a fast-growing company that sells containers globally. It has thousands of dealerships throughout the world where local dealers service Containers sold locally. They recently opened two dealerships in California: NorthCal and SoCal. Universal Containers implemented a new partner community to enable their dealers. Each dealership has a dealer Manager who has all service agents report into them.Assuming a private sharing model, what is the best option to enable dealer managers to have visibility to customer cases within their dealership and not across all dealerships?

Universal Containers is implementing a community of High-Volume Community users. Community users should be able to see records associated to their Account or Contact record. The Architect is planning to use a Sharing Set to provide access to the records. When setting up the Sharing Set, certain objects are not available in the list of Available Objects. Which two reasons explain why an object is excluded from the list of Available Objects in a Sharing Set? (Choose 2)

What is the best practice for testing sharing and visibility changes?

When writing test methods, what functionality is verified by the system method”runAs()”?

Universal Containers has enabled External Default Sharing and wants to allow for external users to have the External Sharing Default set to Public Read-Only for a custom object.Which two options are valid Internal Default sharing settings for the custom object? (Choose 2)

The architect at Universal Containers would like to prevent users from editing encrypted fields. Assuming no customization is implemented, which two options should the Architect choose to support the requirement? (Choose 2)

Universal Containers has recently implemented an integration that is populating 50 custom fields on the account object. They would like these fields to be available to Managers for reporting but do not want them to clutter the page layouts.What should the Architect recommend as a solution?

A Sales Rep at Universal Containers wants to create a dashboard to see how his sales numbers compare with his peers.Assuming a Private model, which two permissions would the Sales Rep need to meet this requirement? (Choose 2)

What feature in Salesforce is needed to restrict access to a custom object that has Public Read/Write access?

The Architect notices that there are many duplicate Account records and numerous sharing rules created in Salesforce.What would be the reason?

At Universal Containers, users should only see Accounts they or their subordinates own. All Accounts with the custom field “Kay Customer” populated should be visible to all Senior Account Managers. There is a custom field on the Account record that contains sensitive information and should be hidden from all users, except 3 designated users who require view and edit access. These three users come from different user groups, and will change occasionally.Which three platform security features are required to support these requirements with the minimum amount of effort? (Choose 3)

Universal Containers does not want the Users in the Custom Sales Department Profile to be able to delete Opportunities.How would the Architect prevent a certain set of users from deleting Opportunities?

Universal Containers is designing a new community using the Customer Community license type. They would like to have the users complete survey questions through the community interface and store the responses in a Custom Object that has a lookup to the account object. Any internal user who has access to the account should be able to see all survey responses. All Customer Community users should be able to see surveys filled in by other users for their company, but not surveys for other companies.What are the correct security settings to achieve this?

Universal Containers has two custom objects: Job and Job Interview. The Job Interview object has a lookup relationship to Job. Both objects are set to Private in sharing settings. The HR team will own all Job and Job Interview records. They have asked their Salesforce Architect to automatically share the Job Interview when the Interviewer (lookup to user record) has been populated. The interviewer can be from any department.What method should the Architect use to achieve this requirement?

Universal Containers (UC) has a requirement to expose a web service to their business partners. The web service will be used to allow each business partner to query UC’s Salesforce instance to retrieve the status of orders. The business partner should only be allowed access to orders for which the business partner is the fulfillment vendor. The Architect does not want the business partners to utilize the standard APIs and would prefer a custom API be developed.Which three design elements should the Architect consider in order to ensure the data security of the solution? (Choose 3)

Below are some details regarding the organization at Universal containers:

1. Richard and Kevin are the east sales reps and their manager is Karen the East sales executive.

2. Sam and Wilder are West sales reps and the manager is Wendy, the West sales executive.

3. Bob is the CEO and managers both Karen and Wendy

Universal containers role hierarchy follows their management structure. Richard owns an account, NewCompany, and Kevin owns an account, OldCompany. Karen manually shared her account NewWorld with Kevin. However, she has moved to a new role to lead all Named Accounts, and Phil, who replaced her, is the new owner of NewWorld.Which employees will have access to the NewWorld account?

Universal containers has a global 24×7 salesforce.com implementation that supports sales, services, order management, and various other parts of their business. They have a nested territory hierarchy, 10,000 sales users cover and 20,000 support agents. Territory changes happen daily. The demand for new applications and changes to the platform is high and they follow and agile development methodology and deliver new releases every two weeks on the platform.What salesforce.com feature would have the system recover from a maintenance restart on Salesforce servers?

Which three capabilities are available with Enterprise Territory Management? (Choose 3)

Which two access grants are stored in the Group Maintenance tables? (Choose 2)

Which permissions bypass the FLS protections safeguarding a secret stored in a custom field? (Choose 3)

The following list contains possible ways of viewing the contents of encrypted custom fields. Which options would show the contents in clear text? (Choose 3)

A remote user is complaining that they can’t see a certain account when they run a particular Private Account List View that they created for themselves. How might a System Administrator assist in troubleshooting this issue?

Universal Containers has created a custom Sales Operations profile with read and edit access to the Category field on a custom object. There is a new requirement that 3 of the 100 users assigned to the Sales Operations Profile should have read-only access to the Category field. How can the Architect support this request?

At Universal Containers, the Sales VP likes to re-assign Opportunity Teams every six months. Each Opportunity Team has the following resources:

o AE (owner)
o Sales Engineer
o Vertical Overlay
o Sales Ops

What should the Architect use to re-assign Opportunity Team members so they have access to the appropriate Opportunity records?

Universal Containers has successfully implemented a large Service Cloud rollout for their national call center 3 months ago. One of their largest customer accounts, United Automotive, has over 15,000 open cases. Agents are now having trouble opening new cases for United Automotive. When they try to create a case, the following Error message appears for them:

UNABLE_TO_LOCK_ROW

They notice that this only occurs for the United Automotive account. If they try to save the case again it will usually work, but the problem seems to be happening more and more often. What option should the Architect recommend?

Which two license types can create and edit reports, when assigned the correct permissions? (Choose 2)

What permissions are required for users to see the Force.com Quick Access Menu?

Which of the following are standard profiles? (Choose 3)

What are the Rule Types that can be chosen when creating Account Sharing rules? (Choose 2)

What are some ways that Force.com provides to quickly delegate data administration access? (Choose 2)

What are not abilities of users in the Delegated Administrators group? (Choose 2)

What options allow delegated admins to log in as a user who has explicitly granted login access?

In a recruiting application, a Position custom object is related to a Salary custom object. Sensitive information such as current salary is stored on the Salary object. All users should be able to at least view position information. However, only select individuals should be able to read salary records.How should a developer accomplish this?

Which statement is TRUE about field-level security? (Choose 2)

Which mechanism allows for authenticated access to a Force.com site? (Choose 2)

In a recruiting application, a master-detail relationship has been defined between two custom objects, Job Applications (master) and Reviews (detail). Which statement is TRUE? (Choose 2)

A developer wants to build an application on the Force.com platform. The data model, the users needing access to the application, and the application business logic have been considered. The report and dashboard requirements have not been considered.
Which statement is TRUE about building the application?

Universal Containers requires that some employees are able to view and edit records of a custom object called Positions, but no users can delete them
How can Universal Containers accomplish this goal?

In a recruiting application, all users should be able to see positions with a status of Open. If the status is anything other that Open, the position should be visible only to the record owner. How would a developer accomplish this? (Choose 2)

In a recruiting application, all users should be able to see and edit all candidate records, but interviewers should NOT have access to the address of a candidate and should NOT be able to see the birth date of a candidate.
How would a developer meet this requirement?

Users X and Y need to see the same candidate record. For security reasons, user Y should NOT be able to view and read address field on the record.
How would a developer meet this requirement?

Which element is included in the security model for Force.com Sites? (Choose 2)

When do users have the option to manually share records they own from the record detail page?

All users of a Recruiting application should be able to edit all positions, except for user X, User X should be view positions. How can a developer meet this requirement?

The organization-wide default settings for Accounts is Private. A manager resides above a team in the role share some of the account data with the team.
Which feature can extend the viewing privileges of the team to allow them to see each other’s data? (Choose 2)

A group of executives has requested a convenient way to see daily metrics without having to log in to Salesforce. How would a developer accomplish this goal?

Which of the following is not a standard Profile? (Choose 2)

What settings can you specify on a profile? (Choose 2)

A manager in an organization wants to share specific fields of data to his subordinates that only he has access to. What is the best way to share specific fields of data? (Choose 2)

Under what circumstances would the sharing button to be enabled on a detail view for a record.

When creating a sharing rule what entities can data be shared to. (Choose 3)

An organization wishes to have everyone view/edit records on an object except for a single person x who should only have read-only access to the object. What is the best way to implement the requirement?

A remote user is complaining that they can’t see a certain account when they run a particular Private Account List View that they created for themselves. How might a
System Administrator assist in troubleshooting this issue?

Universal Containers has successfully implemented a large Service Cloud rollout for their national call center 3 months ago. One of their largest customer accounts, United Automotive, has over 15,000 open cases. Agents are now having trouble opening new cases for United Automotive. When they try to create a case, the following Error message appears for them:
UNABLE_TO_LOCK_ROW
They notice that this only occurs for the United Automotive account. If they try to save the case again it will usually work, but the problem seems to be happening more and more often.
What option should the Architect recommend?

Which two license types can be assigned the permissions to create and edit reports? (Choose 2)