Given a Particular Complex Customer Org Setup, Design a Security Model That Is Maintainable at Large Numbers of Users and Records. SHARING-AND-VISIBILITY-ARCHITECT Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is a common reason to use a custom sharing solution instead of native sharing mechanisms?

   • ATo avoid the need for user permissions
   • BTo handle extreme scale where native sharing limits are exceeded
   • CTo simplify the security model for small orgs
   • DTo replace the role hierarchy
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A large enterprise has a centralized IT team that manages all user permissions and sharing rules. The company is growing rapidly, and the IT team is overwhelmed with requests to modify access. The architect wants to distribute administrative tasks while maintaining control. Which approach should the architect recommend?

   • ACreate delegated administrators for each business unit to manage users and permissions within their unit.
   • BUse permission sets to grant access and have IT manage them centrally.
   • CCreate a public group for each business unit and have IT manage membership.
   • DGive all business unit managers the 'Manage Users' permission.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is a best practice for using manual sharing in a large org?

   • AUse manual sharing for all access grants to avoid sharing rule complexity
   • BUse manual sharing to grant access to large groups of users at once
   • CLimit manual sharing to exceptions and regularly review and clean up manual shares
   • DUse manual sharing to replace criteria-based sharing rules
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company has 500,000 custom object records and 20,000 users. The support team frequently uses manual sharing to grant temporary access to records for specific cases. The architect notices that the number of manual shares is growing rapidly and performance is degrading. What should the architect recommend to address this?

   • AReplace manual sharing with a criteria-based sharing rule that grants access based on case status.
   • BUse the Sharing Gauge to monitor manual shares and manually clean them up.
   • CIncrease the number of sharing rules to handle the access needs.
   • DImplement a scheduled job to periodically delete manual shares that are older than a certain age.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company has a custom object with 10 million records. The access requirement is that users in the 'Sales' role should have read access to records where the 'Status' field is 'Active'. The Status field changes frequently. The architect is concerned about the performance impact of sharing recalculations. Which approach should the architect recommend?

   • AUse a criteria-based sharing rule that shares records where Status equals 'Active' with the Sales role.
   • BUse a workflow rule to manually share records when Status changes to 'Active'.
   • CUse a custom sharing solution with a platform event that triggers Apex to manage access.
   • DUse an owner-based sharing rule that shares records owned by users in the Sales role.
   Reveal Solution Discussion Select an answer first