INTEGRATING WITH SALESFORCE: SECURITY INTEGRATION-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11expert · medium

   A company is integrating Salesforce with an external system that processes credit card payments. The company must comply with PCI DSS, which requires that cardholder data be protected both in transit and at rest. The company wants to minimize the scope of PCI DSS compliance. What should the architect recommend?

   • AUse Salesforce Shield Platform Encryption to encrypt cardholder data at rest and enforce TLS 1.2 for all API calls.
   • BUse field-level encryption for cardholder data and enforce TLS 1.2 for all API calls.
   • CUse a VPN to connect the external system to Salesforce and rely on Salesforce's default encryption.
   • DUse a tokenization service to replace cardholder data with tokens before storing it in Salesforce.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An integration architect is designing a solution where a third-party service needs to access Salesforce data using a named credential. The service will be used by multiple business units, each with different data access needs. The architect wants to ensure that credentials are stored securely and that access is controlled per business unit. What should the architect do?

   • AUse OAuth 2.0 client credentials and store the client secret in a custom setting.
   • BCreate a named credential for each business unit, each with its own external credential and a corresponding integration user with a permission set that matches that unit's needs.
   • CStore the credentials in a custom metadata type and reference them in Apex code.
   • DCreate a single named credential with a shared external credential and use the same integration user for all business units.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   A customer requires that sensitive fields such as Social Security numbers be encrypted in Salesforce at rest. Which Salesforce feature should the architect recommend?

   • AOAuth 2.0
   • BNamed Credentials
   • CField-Level Encryption
   • DTLS (Transport Layer Security)
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   An integration architect is designing a solution where a third-party system will use OAuth 2.0 to access Salesforce. The architect wants to ensure that the integration is auditable and that any security incidents can be traced. What should the architect configure?

   • AUse a named credential with an external credential and enable debug logs for the integration user.
   • BStore the OAuth tokens in a custom setting and review them periodically.
   • CUse a connected app with the 'full access' scope and rely on the login history report.
   • DEnable event monitoring and set up a streaming channel to capture login and API usage events.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   An integration architect is designing a solution where an external system will access Salesforce data. The customer requires that the integration use a strategy that minimizes the risk of data exposure if the external system is compromised. Which security strategy should the architect prioritize?

   • ARely on the external system's security controls and assume that Salesforce data will be safe as long as the external system is secure.
   • BApply the principle of least privilege by granting the integration only the permissions required for its specific data access needs.
   • CGrant the integration a broad set of permissions to ensure it can handle any future requirements without needing updates.
   • DUse a dedicated integration user with a strong password and share the credentials with the external system administrators.
   Reveal Solution Discussion Select an answer first