INTEGRATING WITH SALESFORCE: SECURITY INTEGRATION-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company is integrating Salesforce with an external analytics platform. The integration will send large volumes of data from Salesforce to the platform. The data includes sensitive customer information. The company wants to ensure that the data is protected during transmission and that the integration is resilient to network failures. What should the architect consider?

   • AUse the Salesforce SOAP API with TLS 1.2 and implement a custom retry mechanism.
   • BUse the Salesforce REST API with TLS 1.2 and rely on the platform's built-in retry mechanism.
   • CUse the Salesforce Bulk API with TLS 1.2 and implement retry logic for failed batches.
   • DUse the Salesforce Streaming API with TLS 1.2 and rely on the platform's guaranteed delivery.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which encryption method is used to protect data in transit between an external system and Salesforce APIs?

   • ATLS (Transport Layer Security)
   • BPlatform Encryption
   • CField-Level Encryption
   • DAES-256 encryption at the application layer
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A financial services firm is integrating a legacy on-premises system with Salesforce. The integration transmits sensitive customer financial data. The firm's security policy requires that data be encrypted both in transit and at rest, and that the encryption keys be managed by the customer. Which combination of controls should the architect implement?

   • AEncrypt the data in the application layer before sending it to Salesforce and store the encrypted values in custom fields.
   • BEnforce TLS 1.2 for all API calls and enable Salesforce Shield Platform Encryption with a tenant-managed key (TMK).
   • CRely on Salesforce's default HTTPS and enable Platform Encryption with Salesforce-managed keys.
   • DUse a VPN tunnel for all API traffic and enable field-level encryption for the sensitive fields.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which security best practice should be applied when storing credentials for an integration in Salesforce?

   • AUse Named Credentials to securely store and manage authentication information.
   • BStore credentials in Apex code for easy access and maintenance.
   • CStore credentials in a custom object with public read access for transparency.
   • DShare credentials via email to the integration team for convenience.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   An integration architect is selecting an authentication mechanism for a server-to-server integration where the external system needs to access Salesforce APIs without user interaction. Which authentication method is specifically designed for this scenario?

   • AOAuth 2.0 Authorization Code Flow
   • BSAML Assertion Flow
   • COAuth 2.0 Username-Password Flow
   • DOAuth 2.0 JWT Bearer Flow
   Reveal Solution Discussion Select an answer first