Given a Scenario, Identify the Security Considerations and Risks, and Leverage the Appropriate Security Capabilities to Design a Secure Portal Architecture Including Access by Both Internal and External Users. TECHNICAL-ARCHITECT Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   In a Salesforce community, what is the standard way to create an external user account?

   • AManually by an administrator only
   • BBy using the Salesforce mobile app
   • CThrough self-registration, where the user provides information and creates credentials
   • DBy importing from a CSV file
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   An architect is designing a portal that will be used by both internal employees and external contractors. The internal employees will use SSO, and the external contractors will use username/password. The portal will contain sensitive project data. Which security consideration is most important to address in this design?

   • AEnsure that internal and external users are in separate profiles and that sharing rules enforce least privilege.
   • BDisable the portal for external users and provide access only through a VPN.
   • CRequire external users to use SAML SSO as well to ensure consistent security.
   • DUse the same profile for both user types to simplify administration.
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A healthcare portal stores patient data and must comply with HIPAA. The portal allows patients to self-register and access their records. The architect must balance usability with security. Which design decision best meets both requirements?

   • AUse a single profile for all patients and set OWD to Public Read Only on patient records.
   • BDisable self-registration and have an admin create each patient user after verifying identity over the phone.
   • CRequire multi-factor authentication (MFA) for all patient logins and use a secure identity verification process during registration.
   • DAllow self-registration without verification and rely on the patient's email address as proof of identity.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   When integrating internal user authentication with a portal, what is a key security boundary to maintain?

   • AInternal users should not be required to authenticate.
   • BThe portal should use the same session for internal and external users.
   • CInternal users should have unrestricted access to all portal data.
   • DThe portal should not expose internal authentication credentials to external users.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   An organization is deploying an Experience Cloud site for its customers. Each customer should see only their own orders and invoices. The order and invoice objects have OWD set to Private. The architect needs to grant access to records based on the customer's account. Which sharing mechanism should be used?

   • AEnable 'Grant Access Using Hierarchies' on the objects and assign portal users to a role hierarchy.
   • BSet OWD to Public Read Only on the order and invoice objects and use field-level security to hide sensitive fields.
   • CCreate a criteria-based sharing rule on the order and invoice objects that shares records with the portal user's account based on a matching account ID field.
   • DUse Apex-managed sharing to write a trigger that shares each record with the owner's manager.
   Reveal Solution Discussion Select an answer first