Given a Scenario, Identify the Programmatic Platform Security Features That Can Be Used to Meet Security Requirements. TECHNICAL-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A developer is writing a test class for a trigger that updates a custom object. The test must verify that a user with a restricted profile cannot update a record they do not own. The org uses a private sharing model. What should the developer do in the test?

   • AUse System.runAs(restrictedUser) and attempt the update, then assert that an exception is thrown.
   • BUse System.runAs(adminUser) and attempt the update.
   • CDeclare the trigger class with 'without sharing'.
   • DUse isUpdateable() checks to simulate the restriction.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A developer is writing a method that queries a custom object and then updates it. The method must respect both object-level and field-level security for the running user. The developer wants to avoid hardcoding field names. What should the developer do?

   • AUse System.runAs(adminUser) to run the query and update.
   • BUse Schema.getGlobalDescribe() to dynamically check isAccessible() and isUpdateable() for each field.
   • CDeclare the class with 'with sharing'.
   • DUse Security.stripInaccessible on the query results.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which governor limit is most relevant to preventing a denial-of-service attack that attempts to exhaust database resources through excessive queries?

   • ACPU time limit
   • BDML statement limit
   • CHeap size limit
   • DSOQL query limit
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which access type should be specified when calling Security.stripInaccessible() for a dynamic SOQL query?

   • AAccessType.DELETABLE
   • BAccessType.CREATABLE
   • CAccessType.READABLE
   • DAccessType.UPDATABLE
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A developer exposes an Apex REST endpoint that accepts a JSON payload and updates a custom object. The endpoint must reject requests from unauthenticated users and must validate that the payload does not contain fields the user cannot update. What should the developer do?

   • AUse Apex Crypto to encrypt the payload.
   • BUse Platform Cache to store the payload temporarily.
   • CCheck the session ID in the method and use Security.stripInaccessible on the payload before the update.
   • DUse a Named Credential to authenticate the request.
   Reveal Solution Discussion Select an answer first