Which of the following is a common prevention technique for cross-site request forgery (CSRF) in Visualforce?

Using String.escapeSingleQuotes()

Using output escaping on all fields

Using Salesforce's built-in CSRF protection on actions

Which of the following is a secure coding practice for handling user input in Apex?

Validate and sanitize all user input before use

Disable all field-level security checks

Use hard-coded credentials for API calls

Use system mode for all classes

A developer is reviewing a trigger that uses a dynamic SOQL query built from a URL parameter. The query concatenates the parameter directly. Which of the following is the most secure way to fix the vulnerability?

Use a static SOQL query with the parameter concatenated.

Validate that the parameter contains only alphanumeric characters before using it.

Use a bind variable in the dynamic query.

Use String.escapeSingleQuotes() on the parameter before concatenating it into the query.

Which security vulnerability in Visualforce occurs when user input is rendered as HTML without proper escaping, allowing an attacker to inject scripts?

Cross-site request forgery (CSRF)

SalesforceCertified Platform Developer I

Domain 3Objective 5

Security and Programmatic Access PLATFORM-DEVELOPER-I Practice Questions (Page 3)

Part of the LOGIC AND PROCESS AUTOMATION domain, which accounts for 12% of the PLATFORM-DEVELOPER-I exam.

27questions here

6free pages

11concepts

12%of the exam

Questions 11–15

11foundation · easy
Which of the following is a common prevention technique for cross-site request forgery (CSRF) in Visualforce?
Select an answer first
12foundation · easy
Which of the following is a secure coding practice for handling user input in Apex?
Select an answer first
13expert · medium
A developer is reviewing a trigger that uses a dynamic SOQL query built from a URL parameter. The query concatenates the parameter directly. Which of the following is the most secure way to fix the vulnerability?
Select an answer first
14foundation · easy
In Apex, which method is used to retrieve a map of all SObject tokens for every standard and custom object in the org?
Select an answer first
15foundation · easy
Which security vulnerability in Visualforce occurs when user input is rendered as HTML without proper escaping, allowing an attacker to inject scripts?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PLATFORM-DEVELOPER-I

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Salesforce. “PLATFORM-DEVELOPER-I” is a trademark of its owner, used for identification only.