Given a Customer's Particular Data Storage and Data Residency Requirements, Have Awareness of Solution Options in the Marketplace That Properly Leverages Declarative and Programmatic Security Features of Salesforce. SHARING-AND-VISIBILITY-ARCHITECT Practice Questions (Page 4)

Questions 16–18

1. 16application · medium

   A company must store its data in a specific country where Salesforce does not have a data center. The company wants to use a third-party marketplace solution to meet this requirement. Which capability should the architect look for in the solution?

   • AThe ability to provide a VPN connection from the company's network to Salesforce.
   • BThe ability to encrypt data with customer-managed keys.
   • CThe ability to create a custom Salesforce app for users to access data.
   • DThe ability to replicate Salesforce data to an external database located in the required country.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company has a complex sharing model where access to a custom object's records is determined by a combination of the record's country field and the user's department. The company has tried to implement this with criteria-based sharing rules but has hit the limit of 50 rules per object. The architect must implement the remaining sharing logic. Which approach should the architect use?

   • AUse Apex sharing to implement the remaining sharing logic, as it is not subject to the 50-rule limit.
   • BConsolidate the existing sharing rules into fewer rules by using more complex criteria.
   • CUse a permission set to grant access to the custom object to all users who need it.
   • DUse a public group and manually add users based on the required criteria.
   Reveal Solution Discussion Select an answer first
3. 18application · medium

   A company is required by local law to keep all customer data physically within the country. They use Salesforce and have determined that Salesforce's Data Residency is not available for their specific country. They need a solution that keeps the data in-country while still allowing users to work with the data in Salesforce. Which marketplace solution approach should the architect evaluate?

   • AA third-party solution that provides a VPN connection from the company's on-premises data center to Salesforce.
   • BA third-party solution that uses Salesforce Connect to access data stored in an external in-country database.
   • CA third-party data residency solution that replicates Salesforce data to an in-country storage location and provides a custom Salesforce app for users to access that data.
   • DA third-party solution that encrypts all Salesforce data with customer-managed keys stored in the country.
   Reveal Solution Discussion Select an answer first