Given a Scenario, Identify the Security Considerations and Risks, and Leverage the Appropriate Security Capabilities to Design a Secure Portal Architecture Including Access by Both Internal and External Users. TECHNICAL-ARCHITECT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the purpose of data sharing rules in a portal context?

   • ATo define password complexity requirements
   • BTo encrypt data at rest
   • CTo grant additional access to records based on criteria or owner
   • DTo restrict login times
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A portal allows external users to upload files. The security team is concerned about malicious file uploads that could compromise the server. Which combination of controls should the architect implement?

   • AUse a custom Apex class to validate file content and reject any file with executable code.
   • BStore files in a public Amazon S3 bucket and use a pre-signed URL for access.
   • CAllow any file type but rely on Salesforce's built-in virus scanning.
   • DRestrict allowed file types, set a maximum file size, and scan files with a third-party malware scanner before storing them.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   A portal handles protected health information (PHI) for US patients. Which compliance standard is most relevant?

   • APCI DSS
   • BGDPR
   • CFERPA
   • DHIPAA
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company is implementing a portal for its employees and external partners. Employees will use SAML SSO with their corporate IdP. Partners will use username/password. The architect wants to ensure that employees are automatically logged in when they access the portal from the corporate network. Which configuration should be used?

   • AEnable 'Is Single Sign-On Enabled' on the partner profile and use a custom login flow.
   • BUse OAuth 2.0 with the corporate IdP for internal users and username/password for partners.
   • CConfigure SAML SSO as the authentication service for the internal user profile and set the 'Is Single Sign-On Enabled' flag on that profile.
   • DConfigure SAML SSO for all portal users, including partners.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which security control is used to hide specific fields from external portal users?

   • AField-level security
   • BSession timeout
   • CPassword policies
   • DLogin IP restrictions
   Reveal Solution Discussion Select an answer first