Demonstrate How to Properly Enforce Object and Field Level Permission When Designing Programmatic Solutions. SHARING-AND-VISIBILITY-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A developer is creating a Lightning Web Component that displays a custom field 'Secret_Key__c' from the Account object. The component is used by users with different profiles. The developer wants to ensure that the field is only displayed if the user has FLS read access. Which approach should be used in the Apex controller?

   • AUse the WITH SECURITY_ENFORCED clause in the SOQL query.
   • BUse System.runAs() to run the query as a system administrator.
   • CUse Schema.getGlobalDescribe() to check the field's isAccessible() method and return a safe default if false.
   • DUse the Database.query() method with the accessLevel parameter set to 'SYSTEM_MODE'.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   When a user lacks read access to an object in Apex, what is a recommended best practice for handling the situation?

   • AQuery the records anyway
   • BSilently return an empty list
   • CUse the 'without sharing' keyword
   • DThrow a System.NoAccessException
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A developer is writing an Apex method that inserts a new 'Lead' record. The method is called from a Lightning component. The developer wants to ensure that if the user does not have create access to the Lead object, the method throws a custom exception with a user-friendly message. Which approach should be used?

   • AUse the WITH SECURITY_ENFORCED clause in a SOQL query.
   • BUse Database.insert() without any access level parameter.
   • CUse System.runAs() to run the insert as a system administrator.
   • DCheck Schema.sObjectType.Lead.isCreateable() and throw a custom exception if false.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following is a security best practice when designing Apex code that accesses sensitive fields?

   • AUse dynamic SOQL to avoid FLS checks
   • BUse the 'without sharing' keyword to ensure all records are accessible
   • CUse the 'with sharing' keyword and perform explicit FLS checks
   • DUse the 'inherited sharing' keyword to always run as the system user
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A developer is designing a programmatic solution that uses a custom object 'Invoice__c' and a related object 'Invoice_Line_Item__c'. The solution is used by users with different profiles. The developer wants to ensure that the solution respects both object-level and field-level security. The developer also wants to avoid hard-coding field names to make the solution more maintainable. Which approach should be taken?

   • AUse Schema.getGlobalDescribe() to dynamically check object and field permissions and use the describe results to construct SOQL queries.
   • BUse the Database.query() method with the accessLevel parameter set to 'SYSTEM_MODE'.
   • CUse System.runAs() to run the solution as a system administrator.
   • DUse the WITH SECURITY_ENFORCED clause in SOQL queries and hard-code field names.
   Reveal Solution Discussion Select an answer first