Which Apex construct is used to obtain the schema (describe) information for a specific object, such as Account, at runtime?

Account.SObjectType.getDescribe()

Schema.getObjectDescribe('Account')

Why should hard-coded credentials be avoided in Apex code?

They are not allowed by Salesforce

They can be exposed in source code and pose a security risk

They are automatically encrypted

Which of the following is a common security vulnerability in Apex that can occur when user input is concatenated directly into a SOQL query?

Cross-site request forgery (CSRF)

Which of the following is the recommended approach to prevent SOQL injection when using dynamic SOQL with user input?

Use String.isAlpha() to validate input

Use String.escapeSingleQuotes() on the entire query

Use bind variables instead of concatenation

Use Database.query with concatenation but limit input length

A developer is writing an Apex class that makes a callout to an external service using a named credential. What is the recommended way to handle the authentication credentials?

Hard-code the credentials in the callout URL.

Store the credentials in a custom setting and access them in the class.

Use a named credential and reference it in the callout endpoint.

Store the username and password as static final variables in the class.

SalesforceCertified Platform Developer I

Domain 3Objective 5

Security and Programmatic Access PLATFORM-DEVELOPER-I Practice Questions (Page 2)

Part of the LOGIC AND PROCESS AUTOMATION domain, which accounts for 12% of the PLATFORM-DEVELOPER-I exam.

27questions here

6free pages

11concepts

12%of the exam

Questions 6–10

6foundation · easy
Which Apex construct is used to obtain the schema (describe) information for a specific object, such as Account, at runtime?
Select an answer first
7foundation · easy
Why should hard-coded credentials be avoided in Apex code?
Select an answer first
8foundation · easy
Which of the following is a common security vulnerability in Apex that can occur when user input is concatenated directly into a SOQL query?
Select an answer first
9foundation · easy
Which of the following is the recommended approach to prevent SOQL injection when using dynamic SOQL with user input?
Select an answer first
10application · medium
A developer is writing an Apex class that makes a callout to an external service using a named credential. What is the recommended way to handle the authentication credentials?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PLATFORM-DEVELOPER-I

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Salesforce. “PLATFORM-DEVELOPER-I” is a trademark of its owner, used for identification only.