Given a Scenario, Identify the Security Considerations and Risks, and Leverage the Appropriate Security Capabilities to Design a Secure Portal Architecture Including Access by Both Internal and External Users. TECHNICAL-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which portal security setting limits the IP addresses from which users can log in?

   • AField-level security
   • BLogin IP restrictions
   • CPassword complexity
   • DSession timeout
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of setting a session timeout in a portal?

   • ATo restrict login to specific IP addresses
   • BTo enforce password complexity
   • CTo encrypt session data
   • DTo automatically log out inactive users after a period of time
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which risk is commonly introduced when a portal is opened to external users?

   • AInternal users can no longer access the portal.
   • BThe portal must be hosted on a separate physical network to be secure.
   • CLoss of the ability to use encryption for data in transit.
   • DIncreased exposure to internet-based attacks such as credential theft and data scraping.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A healthcare organization is building a patient portal using Experience Cloud. Patients will self-register and access their medical records. The portal must comply with HIPAA and ensure that patients only see their own data. Which combination of features should the architect configure?

   • AUse a single profile with 'View All' on the patient record object and rely on field-level security to hide sensitive fields.
   • BEnable self-registration without verification, use standard Account object with OWD Public Read/Write, and rely on the portal profile's object permissions.
   • CEnable self-registration with email verification, use a custom object for patient records with OWD Private, and share records via criteria-based sharing rules on the patient ID.
   • DDisable self-registration and have an admin create every patient user manually, then use manual sharing for each record.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which access control principle ensures that portal users are granted only the permissions necessary to perform their job functions?

   • AFail-safe defaults
   • BLeast privilege
   • CDefense in depth
   • DSeparation of duties
   Reveal Solution Discussion Select an answer first