INTEGRATING WITH SALESFORCE: SECURITY INTEGRATION-ARCHITECT Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A healthcare company is integrating an external patient portal with Salesforce. The portal needs to read and update patient records. The compliance team requires that the integration use a mechanism that supports single sign-on for portal users and allows fine-grained control over which records each user can access. Which security strategy should the architect recommend?

   • AUse OAuth 2.0 with the JWT bearer flow and a single integration user with a permission set granting broad access.
   • BUse SAML 2.0 assertions to authenticate portal users and map them to Salesforce users, then rely on their assigned profiles and permission sets for record access.
   • CUse a named credential with OAuth 2.0 client credentials and store the access token in a custom setting.
   • DUse API keys passed in HTTP headers and assign the integration user the 'View All Data' permission.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A multinational company is integrating Salesforce with a data warehouse. The data includes personally identifiable information (PII) of EU citizens. The company must comply with GDPR, which requires that personal data be protected and that transfers outside the EU be lawful. The data warehouse is hosted in the US. What should the architect consider?

   • AUse a VPN to connect Salesforce to the data warehouse to ensure the data is encrypted in transit.
   • BStore the PII only in Salesforce and never transfer it to the data warehouse.
   • CEnsure that the data warehouse provider has appropriate safeguards in place, such as Standard Contractual Clauses (SCCs), and that the transfer is lawful under GDPR.
   • DUse Salesforce Shield Platform Encryption to encrypt the PII at rest and rely on that to satisfy GDPR.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   An integration uses OAuth 2.0 to access Salesforce APIs. What is the primary purpose of OAuth scopes in this context?

   • ATo define the specific permissions the integration has, such as read or write access to certain data.
   • BTo encrypt the data transmitted between the integration and Salesforce.
   • CTo authenticate the user's identity and verify they are who they claim to be.
   • DTo specify the Salesforce instance (e.g., production or sandbox) the integration can access.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In Salesforce, what is the purpose of a Named Credential in the context of integration security?

   • AIt is a type of permission set that grants API access to external systems.
   • BIt securely stores the authentication information (such as OAuth tokens) for an external service, allowing callouts to use it without exposing credentials in code.
   • CIt provides a way to define custom OAuth scopes for external applications.
   • DIt is used to encrypt data at rest in Salesforce.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Why is audit logging considered a security best practice for integrations?

   • AIt reduces the need for strong authentication mechanisms.
   • BIt helps detect and investigate unauthorized access or suspicious activity.
   • CIt encrypts data in transit between systems.
   • DIt automatically blocks unauthorized users from accessing Salesforce.
   Reveal Solution Discussion Select an answer first