Salesforce Sharing-and-Visibility-Designer Deluxe Study Guide with Online Test Engine [Q32-Q50]

4/5 - (2 votes)

Salesforce Sharing-and-Visibility-Designer Deluxe Study Guide with Online Test Engine

Sharing-and-Visibility-Designer dumps review – Professional Quiz Study Materials

NEW QUESTION 32
Universal Containers (UC) has a custom object to track the internal net promoter score (NPS) for all ..
How can UC ensure that NPS records cannot be accessed by an individual employee’s manager?

Create a criteria-based sharing rule to remove access to Manager role and above in the Role ..

Remove Create, Read, Edit and Delete from Manager Profiles and Permission sets.

Use Apex Sharing to remove NPS object share records for Manager profiles.

Set organization-wide default to Private and uncheck the Access Using Hierarchies Option for ..

NEW QUESTION 33
Universal Containers (UC) provides shipment tracking for its customers on a custom Shipment object. The .. yearly by the customers should be available on the Account record to the Marketing team, but the Marketing Shipment records.
What recommend should an Architect provide to accomplish this?

Public organization-wide default on Shipment, process builder, and lookup relationship to Account.

Private organization-Wide default on Shipment, rollup summary, and Master-Detail relationship to Account.

Controlled by Parent (Account) on Shipment, trigger, and trigger, and Master-Detail relationship to Account.

Private organization-wide default on Shipment, trigger, and Lookup relationship to Account,

NEW QUESTION 34
A sales rep (John) at Universal Containers (UC) requested to update information in an account record where he has READ only access. John requested the EDIT access permission from the owner of the record (Paul). Paul manually shared the record with John. Assuming the OWD of the Account object is Public Read-Only, what is the impact in the system?

New AccountShare record is created. Row Cause is “Manual” and Access Level is “Read/Write”.

Existing AccountShare record is updated. Row Cause is “Owner” and User/Group is “John”.

New AccountShare record is created. Row Cause is “Owner” and Access Level is “Full”.

Existing AccountShare record is updated. Row Cause is “Manual” and Access Level is “Read/Write”.

NEW QUESTION 35
A developer at Universal Containers is building an integration within a managed package for their internal org that requires login to an external system. The end point requires basic authentication. The Architect would like to ensure that the username and password are managed securely.
Which three options should the Architect recommend to secure the credentials?
Choose 3 answers

Store the credentials in protected custom metadata that are used in the Apex Callout.

Store the credentials in Named Credentials that are used in the Apex Callout.

Store the credentials in a custom object using encrypted fields.

Store the credentials in protected custom settings that are used in the Apex Callout.

Store the credentials in the Apex code, which will not be available to non-admins.

NEW QUESTION 36
Universal Containers has the following requirements:
1. A custom Loan object requires Org-Wide Defaults set to Private.
2. The owner of the Loan record will be the Loan Origination Officer.
3. The Loan record must be shared with a specific Underwriter on a loan-by-loan basis.
4. The Underwriters should only see the Loan records for which they are assigned.
What should the Architect recommend to meet these requirements?

Use criteria-based sharing rules to share the Loan object with the Underwriter based upon the criteria defined in the criteria-based sharing.

Create a lookup relationship from the Loan object to the User object. Use a trigger on the Loan object to create the corresponding record in the Loan_share object.

Create a master-detail relationship from the Loan to the User object. Loan records will be automatically shared with the Underwriter.

Create an Apex Sharing Reason on the Loan object that shares the Loan with the Underwriter based upon the criteria defined in the Sharing Reason.

NEW QUESTION 37
Universal Container maintains job info in a Custom object that contains sensitive information. The user who owns the record and all users in the delivery profile are the only users who should be able to view and edit job records. Which three platform sharing tools are required to support the above requirements?

Criteria-Based sharing rule for the Delibery Profile on the job object

View all data profile permission on the delivery profile

Modify all permission for job object on the delivery profile

Organization-wide default sharing setting of private on the job object

Grant access using hierarchy sharing setting on the job object set to false

NEW QUESTION 38
By Viewer Access you can see the data in a report or dashboard, but you can’t make any changes, except by cloning it into a new report or dashboard.

True

False

NEW QUESTION 39
Which two are potential vulnerabilities in the following code snippet? <apex:page> <apex:form> <apex:outputText value=”Enter Name”/> <apex:inputText value=”{!name}” /> <apex:commandButton value=”Query” action=”{!query}” /> </apex:form> </apex:page> public class SOQLController { public String name { get { return name;} set {name=value;} } public PageReference query() { String qryString=’SELECT Id FROM Contact WHERE ‘+ ‘(IsDeleted = false and Name like ‘%’ + name + ‘%’}’; queryResult = Database.query(qryString); retunr null; } } Choose 2 answers

FLS check

SOQL Injection

Data Access Control

Arbitrary Redirects

NEW QUESTION 40
Universal Containers (UC) stores basic employee information in a custom Employee object (OWD -Public Read Only). There are a few sensitive fields that need restricted access (salary, grade level, last performance rating).
Other than field level security, what other options are available to make these fields accessible to the Human Resource team?

Create a new custom object with private OWD and Lookup relationship to Employee to store new restricted information.

Change OWD of Employee custom object to private and a Lookup self-relationship to store only new restricted information.

Create a new custom object controlled by parent and a Master-Detail relationship to Employee to store new restricted information.

There are no other option besides using field level security.

NEW QUESTION 41
Cosmic Circle Financial uses the Contact object to store customer information. A Text Area (Long) field has been created on the object by an administrator to store demographic data. Whenever a new contact is created, the data in this field should be transmitted to an external service provider for the purpose of data collection and analysis. In order to comply with regulatory requirements, it is necessary to encrypt this field at rest and in transit. Which of the following can be used for this requirement?Choose 1 answer.

Shield Platform Encryption

A downloadable package from the AppExchange marketplace

Classic Encryption

Apex Trigger that uses the Apex Crypto class

NEW QUESTION 42
In a recruiting application, a master-detail relationship has been defined between two custom objects, Job Applications (master) and Reviews (detail). Which statement is TRUE? Choose 2

Review records may exist without an associated job application

The master-detail relationship between Job Applications and Reviews is defined on the Job Application object

Deleting a Job application record will delete associated review records

Review records will inherit ownership from the associated job application

NEW QUESTION 43
Which features does Salesforce provide for restricting login access to the application?
Choose 2 answers.

Profile-based login hour restrictions

Role-based IP restrictions

Organization-wide login hour restrictions

Profile-based IP restrictions

NEW QUESTION 44
User A at Universal Containers is in the default account team for User B.
User B owns the ACME account and changed User A’s team member access to the account.
What is the impact of this change?

Changes affect the default Opportunity team.

Changes affect only the ACME Account.

Changes affect the default Account team.

Changes affect all child ACME Accounts.

NEW QUESTION 45
The IT Director of Cosmic Solutions would like to prevent Cross-Site Request Forgery (CSRF) attacks on the company’s website. Which of the following is a defense mechanism provided by Salesforce that can prevent these attacks?Choose 1 answer.

Anti-CSRF Security

CSRF Protection

Security Token

Anti-CSRF Token

NEW QUESTION 46
If you have access to an account’s child record, what permission does that grant you to the account?

Read Only

Edit

Read/Write

Delete

NEW QUESTION 47
Universal Containers has Public Read Only sharing settings on the Opportunity object. What Opportunity access options can the user see while adding account team members to the Account?

Read Only

Private and Read Only

Private

Read Only and Read/Write

NEW QUESTION 48
If you want to create some logic that will share certain records in APEX code, you just have to create special records that will open access to the desired records.
The aim is to create records of certain type, for example , all share objects for custom objects are named as ___________?

NEW QUESTION 49
How should the Architect ensure that OBJECT-LEVEL SECURITY is enforce within a custom Visualforce application that was a standard Apex controller on the Lead object?

Use the runAs() method to enforce user permissions in the Apex controller.

Use the Schema.DescribeSObjectResultisAccessible() method in the Apex controller.

Use the {!$ObjectType.lead.accessible} expression within the Visualforce page.

Use the “With Sharing” keyword when defining the Visualforce page.

NEW QUESTION 50
Universal Container has developed a custom Visualforce page that will accept user input and must prefer returning the results to the users.
Which two techniques should be used to ensure the users cannot perform a SOQL injection attack?

Escape double quotes in the user input.

Use bind variable in the SOQL query.

Use the escapesinglequotes() method to sanitize user input.

Use the with Sharing keyword on the controller.