Security and Programmatic Access PLATFORM-DEVELOPER-I Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which Visualforce output component automatically escapes HTML by default, preventing XSS?

   • A<apex:outputPanel>
   • B<apex:outputField>
   • C<apex:outputText>
   • D<apex:outputLink>
   Reveal Solution Discussion Select an answer first
2. 2application · hard

   A developer is writing a utility that dynamically queries any object and returns the records. The utility receives the object name and a list of field names as strings. Which approach correctly builds a dynamic SOQL query that is safe from injection and respects field accessibility?

   • AUse String.escapeSingleQuotes() on objectName and fieldNames before concatenating them into the query.
   • BString query = 'SELECT ' + String.join(fieldNames, ', ') + ' FROM ' + objectName + ' WHERE Id IN :ids'; List<SObject> records = Database.query(query);
   • CUse a static SOQL query with a bind variable for the object name: 'SELECT Id FROM :objectName'.
   • DValidate objectName against Schema.getGlobalDescribe().keySet(), and for each fieldName check isAccessible() before adding it to the query. Then use Database.query with the validated names.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which Apex keyword enforces the sharing rules of the current user for a class?

   • Asystem mode
   • Binherited sharing
   • Cwith sharing
   • Dwithout sharing
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following is a valid way to execute a dynamic SOQL query in Apex?

   • ADatabase.queryWithBinds('SELECT Id FROM Account')
   • BDatabase.getQueryLocator('SELECT Id FROM Account')
   • CDatabase.query('SELECT Id FROM Account')
   • DDatabase.execute('SELECT Id FROM Account')
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What does Schema.getGlobalDescribe() return?

   • AA Set of object API names only
   • BA Map of object names to SObjectType tokens
   • CA List of SObject records
   • DA Map of field names to field tokens
   Reveal Solution Discussion Select an answer first