Given a Scenario, Identify the Programmatic Platform Security Features That Can Be Used to Meet Security Requirements. TECHNICAL-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A developer uses dynamic SOQL to query a custom object based on user input. The query includes fields that the running user may not have access to. What should the developer do to prevent field-level security violations?

   • AUse Security.stripInaccessible on the query results.
   • BUse isAccessible() on the object before the query.
   • CDeclare the class with 'with sharing'.
   • DUse System.runAs(adminUser) to run the query.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An org stores a session token in Platform Cache for a REST API. The token is sensitive and must only be readable by the API's integration user, not by other users in the org. What should the developer configure?

   • AStore the token in a custom setting instead of Platform Cache.
   • BEncrypt the token with Apex Crypto before storing it in an org-level partition.
   • CUse an org-level partition and store the token with a generic key.
   • DUse a private partition and store the token with the integration user's ID as the key.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which feature of Platform Cache helps isolate cached data so that only specific users or profiles can access it?

   • AKeys
   • BPartitions
   • CTTL (Time to Live)
   • DValues
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A custom object 'Case__c' has a private sharing model. A support manager must see all cases owned by their team. The team is defined by a custom field 'Team__c' on the User object. The developer must write Apex to grant access dynamically when a case is created or reassigned. What should the developer do?

   • ACreate a trigger that queries all users with the same Team__c value and inserts Case__Share records for each.
   • BUse System.runAs(manager) to insert the case.
   • CUse a public group and add users manually.
   • DDeclare the trigger class with 'without sharing'.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which Apex method allows a developer to execute code as a specific user to test how the code behaves under that user's permissions?

   • ASystem.debug()
   • BSystem.enqueueJob()
   • CSystem.runAs()
   • DSystem.schedule()
   Reveal Solution Discussion Select an answer first