Given a Scenario, Describe How to Minimize Security Risks in Programmatic Customizations (Apex and Visualforce) Relative to Data Visibility. SHARING-AND-VISIBILITY-ARCHITECT Practice Questions (Page 6)

Questions 26–27

1. 26application · medium

   A developer is writing an Apex method that updates the `AnnualRevenue` field on Account records. The method is called from a Visualforce page used by sales reps. The org has field-level security (FLS) that restricts `AnnualRevenue` to managers only. What must the developer do to prevent unauthorized updates?

   • AUse `stripInaccessible` to remove the field from the records before update.
   • BUse the `with sharing` keyword on the class to enforce field-level security.
   • CThe update will automatically fail if the user lacks FLS, so no check is needed.
   • DCheck `Schema.sObjectType.Account.fields.AnnualRevenue.isUpdateable()` before performing the update.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A developer wrote a test class for an Apex class that enforces sharing. The test runs as a user with the 'View All Data' permission. What is the most important consideration when writing the test to verify sharing enforcement?

   • AThe test must use `@isTest(seeAllData=true)` to access real records for sharing verification.
   • BThe test must be in a class declared `without sharing` to test the system context.
   • CUse `System.runAs` to run the test as a user with the 'View All Data' permission to test the most privileged scenario.
   • DRun the test as a user without 'View All Data' to ensure sharing rules are actually enforced.
   Reveal Solution Discussion Select an answer first