A developer is writing an Apex method that searches for Accounts by name. The method accepts a user-provided search term and uses it in a dynamic SOQL query. The developer wants to prevent SOQL injection while also allowing partial matches. What is the most secure way to construct the query?

Use `Database.query` with the input directly concatenated, but add a try-catch block.

Use `System.debug` to log the query and manually review it for injection.

Use `String.escapeSingleQuotes(input)` and concatenate it into the query string.

Use a binding variable with a wildcard: `WHERE Name LIKE :searchTerm` and set `searchTerm = '%' + input + '%'`.

What is the impact of a Visualforce extension class declared without a sharing keyword?

The extension cannot access any records

The extension inherits the sharing mode of the controller that instantiates it

The extension always runs in system mode

The extension always enforces sharing rules

What is the purpose of using Schema.describeSObjects in Apex?

To create a new object in the org

To retrieve metadata about objects, such as field permissions

What is a risk of using expressions like {!Account.SSN__c} directly in a Visualforce page?

It can cause a SOQL injection vulnerability

It can slow down page load times

It can cause a cross-site scripting vulnerability

It can expose sensitive field data without FLS checks

SalesforceCertified Sharing and Visibility Architect

Domain 3Objective 2

Given a Scenario, Describe How to Minimize Security Risks in Programmatic Customizations (Apex and Visualforce) Relative to Data Visibility. SHARING-AND-VISIBILITY-ARCHITECT Practice Questions (Page 4)

Part of the PROGRAMMATIC SHARING domain, which accounts for 25% of the SHARING-AND-VISIBILITY-ARCHITECT exam.

27questions here

6free pages

10concepts

25%of the exam

10 Concepts in This Objective

Apex Security Risks
Visualforce Security Risks
Enforcing Sharing in Apex
Enforcing Sharing in Visualforce
CRUD and FLS Enforcement
Using Security Methods
Mitigating SOQL Injection
Mitigating XSS in Visualforce
Secure Data Binding
Testing Security Controls

Questions 16–20

16expert · medium
A developer is writing an Apex method that searches for Accounts by name. The method accepts a user-provided search term and uses it in a dynamic SOQL query. The developer wants to prevent SOQL injection while also allowing partial matches. What is the most secure way to construct the query?
Select an answer first
17foundation · easy
Which Visualforce component attribute is used to prevent XSS by encoding output?
Select an answer first
18foundation · easy
What is the impact of a Visualforce extension class declared without a sharing keyword?
Select an answer first
19foundation · easy
What is the purpose of using Schema.describeSObjects in Apex?
Select an answer first
20foundation · easy
What is a risk of using expressions like {!Account.SSN__c} directly in a Visualforce page?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SHARING-AND-VISIBILITY-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Salesforce. “SHARING-AND-VISIBILITY-ARCHITECT” is a trademark of its owner, used for identification only.