Given a Set of Requirements, Architect a Solution That Utilizes the Appropriate Platform Security Mechanisms. TECHNICAL-ARCHITECT Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which Salesforce feature allows users to log in to Salesforce using their corporate credentials from an external identity provider?

   • ASingle Sign-On (SSO)
   • BLogin IP ranges
   • CSession timeout settings
   • DMulti-Factor Authentication (MFA)
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the purpose of multi-factor authentication (MFA) in Salesforce?

   • ATo require users to provide two or more verification factors to access Salesforce, adding an extra layer of security beyond a password.
   • BTo encrypt data at rest in Salesforce.
   • CTo allow users to log in with a single sign-on (SSO) provider.
   • DTo restrict access to Salesforce based on IP ranges.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A developer wrote an Apex class that queries Case records and displays them in a Lightning component. The class is declared as 'public without sharing'. The user running the component has a profile with Read access to Case and the OWD for Case is Private. The user is not the owner of any Case records. What will the component display?

   • AAll Case records in the org, regardless of ownership.
   • BOnly Case records owned by the user.
   • CNo Case records because the user does not own any.
   • DAn error because the class does not have access to Case.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   A Salesforce admin needs to prevent a group of users from seeing the 'Salary' field on the Contact object, but they should still be able to view other Contact fields. Which security mechanism should be used?

   • ARole hierarchy
   • BSharing rules
   • CField-level security
   • DOrganization-wide defaults
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security analyst suspects that a user's credentials were compromised and used to export a large number of Contact records. The analyst needs to determine when the export occurred and from which IP address. Which two tools should the architect recommend?

   • ALogin History and Field History.
   • BField History and Setup Audit Trail.
   • CEvent Monitoring and Setup Audit Trail.
   • DLogin History and Event Monitoring (e.g., API or Report Export events).
   Reveal Solution Discussion Select an answer first