Security and Programmatic Access PLATFORM-DEVELOPER-I Practice Questions (Page 6)

Questions 26–27

1. 26expert · hard

   A developer is creating a public Apex REST service that allows external users to query Account records. The service must return only records the external user is allowed to see, and it must not expose fields the user cannot read. The developer is using a class with a 'with sharing' keyword. What additional step is necessary to ensure field-level security is enforced?

   • AUse the 'system mode' by omitting the sharing keyword.
   • BUse the 'inherited sharing' keyword to inherit the caller's sharing.
   • CUse Schema.getGlobalDescribe() to check isAccessible() on each field before including it in the query.
   • DUse the 'without sharing' keyword to bypass sharing and then manually filter records.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which of the following correctly obtains the describe result for the custom object 'MyObject__c' using Schema.getGlobalDescribe()?

   • ASchema.getGlobalDescribe().getDescribe('MyObject__c')
   • BSchema.getGlobalDescribe('MyObject__c')
   • CSchema.getGlobalDescribe().MyObject__c.getDescribe()
   • DSchema.getGlobalDescribe().get('MyObject__c').getDescribe()
   Reveal Solution Discussion Select an answer first