Given a Set of Requirements, Architect a Solution That Utilizes the Appropriate Platform Security Mechanisms. TECHNICAL-ARCHITECT Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A retail company stores customer credit card numbers in a custom field on the Contact object. They are required by PCI DSS to protect this data at rest. The company uses Salesforce Shield. What should the architect recommend to meet this requirement?

   • AUse a validation rule to mask the credit card number in the UI.
   • BSet the field's FLS to 'Private' so only admins can see it.
   • CEnable Platform Encryption for the custom field using deterministic encryption.
   • DStore the credit card numbers in an external system and reference them via a lookup field.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A Salesforce admin creates a Flow that updates the Owner field on Account records when a specific condition is met. The Flow is configured to 'Run As System'. The user who triggers the Flow has Read access to the Account but not Edit. What will happen when the Flow runs?

   • AThe Flow will fail because the user does not have Edit access.
   • BThe Flow will create a sharing rule to grant the user Edit access.
   • CThe Flow will update the Owner field only if the user is the record owner.
   • DThe Flow will successfully update the Owner field because it runs in system context.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   In Salesforce, what is the relationship between object permissions and field-level security (FLS)?

   • AA user must have at least read access to an object to see any of its fields, and FLS can further restrict which fields are visible.
   • BFLS overrides object permissions, so a user can see fields even if they do not have read access to the object.
   • CObject permissions and FLS are independent; a user can see fields without object access if FLS is set to visible.
   • DObject permissions are only needed for editing, while FLS controls all visibility.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary difference between a profile and a permission set in Salesforce?

   • AProfiles are used for standard users, while permission sets are used for system administrators.
   • BA permission set is assigned to a user and defines their baseline permissions, while a profile grants additional permissions.
   • CProfiles control record-level access, while permission sets control object-level access.
   • DA profile is assigned to a user and defines their baseline permissions, while a permission set grants additional permissions without changing the profile.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which Apex method is used to enforce field-level security when querying data, ensuring that only fields the user can see are returned?

   • ASecurity.stripInaccessible()
   • BSchema.getGlobalDescribe()
   • CSystem.enforceSharing()
   • DDatabase.query()
   Reveal Solution Discussion Select an answer first