Given a Set of Requirements, Architect a Solution That Utilizes the Appropriate Platform Security Mechanisms. TECHNICAL-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which OAuth flow is commonly used for server-to-server integration where no user interaction is required?

   • AOAuth 2.0 Resource Owner Password flow
   • BOAuth 2.0 Implicit flow
   • COAuth 2.0 Client Credentials flow
   • DOAuth 2.0 Authorization Code flow
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   A Salesforce admin needs to give a group of users access to a custom object 'Audit_Log__c' without changing their existing profiles. Which approach should be used?

   • AUse a public group and add the users to it, then set OWD to Public Read Only.
   • BCreate a sharing rule that grants access to 'Audit_Log__c' records.
   • CCreate a permission set that includes object permissions for 'Audit_Log__c' and assign it to the users.
   • DEdit each user's profile to add object permissions for 'Audit_Log__c'.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the first step an architect should take when designing a security solution for a new Salesforce implementation?

   • AClassify the data sensitivity and identify compliance requirements.
   • BSet up all profiles and permission sets.
   • CEnable Platform Encryption for all fields.
   • DConfigure single sign-on for all users.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A sales manager needs to see all Opportunity records owned by the sales representatives in their team. The OWD for Opportunity is Private. The sales manager is above the reps in the role hierarchy. What is the simplest way to grant the manager access?

   • AEnable the role hierarchy so the manager automatically sees records owned by users below them.
   • BUse manual sharing to share each Opportunity with the manager.
   • CCreate a sharing rule that grants the manager access to all Opportunities owned by the reps.
   • DChange OWD to Public Read Only so the manager can see all Opportunities.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   A Salesforce architect needs to explain the core platform security features to a new team member. Which statement correctly describes the role of organization-wide defaults (OWD) in the Salesforce security model?

   • AOWD settings are used to assign object permissions like read, create, edit, and delete to groups of users.
   • BOWD settings specify the maximum access a user can have to records, and they cannot be overridden by any other sharing mechanism.
   • COWD settings define the baseline level of access that the most restricted user will have to records, and they can be overridden by sharing rules and other mechanisms.
   • DOWD settings determine which fields are visible to users based on their profile, and they can be overridden by field-level security.
   Reveal Solution Discussion Select an answer first