Download the Latest Sharing-and-Visibility-Architect Dumps - 2024 Sharing-and-Visibility-Architect Exam Questions
Latest Salesforce Sharing-and-Visibility-Architect Certification Practice Test Questions
Salesforce Sharing-and-Visibility-Architect certification is a valuable certification for architects who specialize in Salesforce security and sharing. Salesforce Certified Sharing and Visibility Architect certification demonstrates expertise in Salesforce security and sharing models and is highly regarded by employers. To become certified, candidates must pass the Salesforce Certified Sharing and Visibility Architect exam, which covers topics such as data security, data sharing, user access, and record-level security. Candidates can prepare for the exam by taking the Salesforce Sharing-and-Visibility-Architect certification course and accessing online resources such as practice exams and study guides.
Salesforce is a powerful customer relationship management (CRM) platform that allows businesses to manage all aspects of their customer interactions. As a Salesforce professional, it is important to have a deep understanding of the platform's sharing and visibility architecture. This is where the Salesforce Sharing-and-Visibility-Architect (Salesforce Certified Sharing and Visibility Architect) Certification Exam comes into play.
NEW QUESTION # 119
Universal Containers would like to store an encryption key within Salesforce for use in Apex Code, but does not want users to be able to see this confidential key. Users require the view setup permission.
How can Universal Containers securely store the confidential key?
- A. Create 6 custom metadata type that stores the encryption key. Make sure that only the admin profile has access to the custom metadata type $0 that end users cannot access the encryption key.
- B. Create a protected custom metadata type that stores the encryption key. Package the protected custom metadata type with its associated records in a managed package. Install the package In the production org.
- C. Create 4 protected custom metadata type that stores the encryption key. Package the protected custom metadata type with its associated records in an unlocked package. Install the package In the production org.
Answer: B
NEW QUESTION # 120
Universal Containers has developed an AppExchange managed package for their distribution partners, which required a private key to be generated for each partner and used by the code. Universal Containers support representatives must be able to access the private key value to debug connection issues, but it must not be possible for the partner to access the value.
How can the Architect best support this requirement?
- A. Store the value in the text field on a list custom setting in the managed package.
- B. Store the value in an encrypted field on a custom object in the package.
- C. Store the value in a static variable in a class included in the managed package.
- D. Store the value in a text field on a protected custom setting in the package.
Answer: A
NEW QUESTION # 121
Besides their own team accounts, sales managers at Universal Containers need to have READ access to all accounts of the same segment in other countries. Role hierarchy was implemented accordingly (based on countries), but a sales manager in the US is complaining that he cannot view account records of the same segment in Canad a. What should be done to grant access in a proper way?
- A. Create an owner-based sharing rule to grant access to account records that have the same segment to all sales manager roles.
- B. Change the role hierarchy and put all of the sales managers in the US and Canada in the same role.
- C. Owner-Based Sharing Rules An owner-based sharing rule opens access to records owned by certain users. For example, a
- D. Create criteria-based sharing rules to grant access to account records that have the same segment to all sales manager roles.
- E. Create a public group and include all accounts of the same segment and grant access through a permission set.
Answer: A
Explanation:
company's sales managers need to see opportunities owned by sales managers in a different region. The U.S. sales manager could give the APAC sales manager access to the opportunities owned by the U.S. team using owner-based sharing.
https://help.salesforce.com/articleView?id=security_sharing_rule_types.htm&type=5
NEW QUESTION # 122
Universal Health is planning to store patient notes in Salesforce. Patient notes consist of long text notes taken by a use to document phone calls with a patient.
A date audit has identified that these notes can contain Personally Identifiable Information (PII) and Personal Health Information (PHI). The regulatory requirements state that this data must be encrypted at rest as well as in transit.
What should the Architect do in order to make sure Universal Health stays compliant?
- A. Enable Salesforce Shield Platform Data Encryption and mark the patient notes field as encrypted.
- B. No action is required; all Salesforce data is encrypted at rest as part of Salesforce's standard trust measures.
- C. Use an Apex trigger and the Apex Crypto class to encrypt patient notes as soon as they are saved to Salesforce.
- D. Create a new Custom Field of type "Text (Encrypted)" and move the patient notes data into the new field.
Answer: A
Explanation:
Explanation
The best option for the architect to make sure Universal Health stays compliant is B. Enabling Salesforce Shield Platform Data Encryption and marking the patient notes field as encrypted will ensure that the data is encrypted at rest as well as in transit, using a tenant secret that only Universal Health can access. This will also allow them to use standard Salesforce features and functionality with the encrypted data. The other options are either incorrect or not optimal.
NEW QUESTION # 123
Universal Containers has junction object called "Job Production Facility", with 2 master-detail relationships to the Job and Production Facility custom objects. Both master records have a private sharing model.
What statement is true if a user's profile allows access (Create/Read) to the Job, but no access to the Production Facility Object?
- A. The user will see the junction object and the link to the Production Facility.
- B. The user will not be able to see the junction object records or the field values.
- C. The user will see the junction object but not the link to the Production Facility.
- D. The user will be granted read access to the Production Facility record
Answer: B
Explanation:
Explanation
The user will not be able to see the junction object records or the field values if their profile allows access to the Job object but not to the Production Facility object. This is because junction objects inherit the sharing and security settings from both master objects, and users need access to both master objects to access the junction object records. If a user does not have access to one of the master objects, they will not see any records or fields from the junction object
NEW QUESTION # 124
Universal Computers (UC) is looking to expand its delivery capabilities through a network of distributors that use a Partner Community license. UC employees currently can view all delivery records through the organization-wide default (OWD) setting of Public Read Only.
Which approach would an architect recommend to limit the records a distributor can see?
- A. Create a criteria-based sharing rule to grant access to the distributor
- B. Remove Read permission from the distributor profile.
- C. Set the External OWD to Private for the Delivery object.
- D. Create an ownership-based sharing rule to grant access to the distributor.
Answer: C
NEW QUESTION # 125
Universal Containers has just deployed a change to its role hierarchy. A manager is reporting that their staff can now see Accounts that they do not own and should not have access to. How should the Architect troubleshoot?
- A. While logged in as the one of the Staff members, navigate to their user record and inspect their profile and role membership.
- B. While logged in as the one of the Staff members, navigate to a sample account and use the Sharing button to determine who has access.
- C. While logged in as the System Administrator, use the Field Accessibility Viewer to view a matrix of who has access to Accounts.
- D. While logged in as the System Administrator, use the Field Accessibility Viewer to view a matrix of who has access to Accounts.
Answer: B
Explanation:
Explanation
To troubleshoot why staff members can see accounts that they do not own and should not have access to after a change in the role hierarchy, the architect should log in as one of the staff members, navigate to a sample account, and use the sharing button to determine who has access. The sharing button shows all the reasons why a user has access to a record, such as role hierarchy, sharing rules, manual sharing, teams, etc. The architect can then identify which sharing mechanism is causing the issue and fix it accordingly
NEW QUESTION # 126
Universal Container is creating a custom VF page to allow user to edit contact records. The developer has used an apex:outputField for the Phone field on the contact obj. What is the expected behavior if a user without FLS accesses the VF page?
- A. The field is automatically removed from the page
- B. The output field is visible to user
- C. The user is able to enter a value into the phone field
- D. The user encounters an error while saving the record
Answer: A
NEW QUESTION # 127
Universal Container (UC) is in a legal dispute regarding several orders. UC has found out these records VP of Sales has asked to ensure this cannot happen in the future.
What approach would meet this requirement?
- A. Implement a Sharing Rule that changes access for order to Read.
- B. Remove Order delete Permission from Profiles and Permission Sets
- C. Remove the Delete button from the Order Page Layout.
- D. Change the Record Type/Page Layout assignment for orders to be Read Only.
Answer: B,D
NEW QUESTION # 128
Which two options provide implicit record access to users? Choose 2 answers
- A. Read-only access to parent account for a user, based on a criteria-based sharing rule
- B. Read-only access to parent account for a user with access to a child case
- C. Access to child opportunities for the owner of the parent account
- D. Access to related leads for the owner of the parent campaign
Answer: B,C
Explanation:
Explanation
According to this source, users with access to a child case have read-only access to the parent account by default, and owners of a parent account have access to child opportunities by default. The other options are not implicit record access mechanisms.
NEW QUESTION # 129
Universal Containers has set the Org-Wide Sharing Default for Accounts to Private and has created some sharing rules to extend access based on certain data access policies. An architect has been asked to review access to a certain set of key customer accounts. How might this review be conducted?
- A. Export the Account Share table and review.
- B. Log in as each user and Run the All Accounts List View.
- C. Run a Report on Sharing in the Admin Console.
- D. Use the Sharing button on each customer Account.
Answer: A
NEW QUESTION # 130
Universal Containers keeps product brochures in Salesforce as files. Sarah shares a public Unit to a product brochure with potential customers during a meeting. She wants to ensure they do not have access to the file after the meeting.
How should Sarah accomplish this?
- A. Delete the public link.
- B. Move the file to another folder
- C. Delete the file.
- D. Rename the file.
Answer: A
NEW QUESTION # 131
Universal Computers (UC) is looking to expand its delivery capabilities through a network of distributors that use a Partner Community license. UC employees currently can view all delivery records through the organization-wide default (OWD) setting of Public Read Only.
Which approach would an architect recommend to limit the records a distributor can see?
- A. Create a criteria-based sharing rule to grant access to the distributor
- B. Remove Read permission from the distributor profile.
- C. Set the External OWD to Private for the Delivery object.
- D. Create an ownership-based sharing rule to grant access to the distributor.
Answer: C
Explanation:
Explanation
Setting the External OWD to Private for the Delivery object is the best approach to limit the records a distributor can see, since it will restrict the access to only the records they own or are shared with them. Option A is incorrect, since ownership-based sharing rules are not available for partner community users. Option B is incorrect, since removing Read permission from the distributor profile would prevent them from accessing any delivery records. Option D is incorrect, since criteria-based sharing rules are not available for partner community users.
NEW QUESTION # 132
Universal Containers is planning to pilot a new application to a small set of Sales Reps.
What is the optimal way to grant inly this Sales Reps access to the new functionality, while hiding ..
- A. Revoke access to legacy function in the Sales Rep profile and create a permission set for the ..
- B. Clone the Sales Rep profile, adjust settings, and assign the pilot users the new profile.
- C. Create a permission set to grant access to the new functionality and hide the old functionality.
- D. Create new user records for the pilot user that they will use for the pilot.
Answer: B
Explanation:
Explanation
Cloning the Sales Rep profile, adjusting settings, and assigning the pilot users the new profile is the optimal way to grant only this Sales Reps access to the new functionality, while hiding it from other users. This way, the pilot users can have different permissions and access than the other Sales Reps who are not part of the pilot. Option B is incorrect, since revoking access to legacy function in the Sales Rep profile and creating a permission set for the new functionality would affect all Sales Reps, not just the pilot users. Option C is incorrect, since creating a permission set to grant access to the new functionality and hide the old functionality would not work, as permission sets cannot revoke access. Option D is incorrect, since creating new user records for the pilot user that they will use for the pilot would be unnecessary and inefficient.
NEW QUESTION # 133
The sales manager in Japan have asked the sales manager in Australia to assist them with closing their deals.
How are these requirements achieved?
- A. Create ownership-based sharing rule.
- B. Use opportunity teams to automatically add the sales manager as a team member.
- C. Assign the sales manager View All on the opportunity object.
- D. Use sharing set to give the sales manager access to the deals.
Answer: B
NEW QUESTION # 134
Universal Containers (UC) has affiliates who sell containers in countries where UC does not have a local office. UC uses a Partner Community to manage the sales cycle in those countries. One of its affiliates has grown substantially and restructured its internal sales team with the following structure; Sales VP -> Director of Sales -> Sales Manager -> Sales Reps. Sales Reps should not see each others' opportunities, and visibility of deals should open up within e Sales Rep's hierarchy.
What is the main problem an architect should address in this situation?
- A. Partner Community does not support Role Hierarchy.
- B. The Channel Manager role cannot be shared with Partner Community.
- C. Partner User roles are limited to three levels.
Answer: C
NEW QUESTION # 135
Sales reps at Universal Containers (UC) complain about the manual activities they need to perform in order to grant access to supporting internal users (legal, engineering, finance, and so forth) for customer records when they need help. In general, the sales reps involved in the deals will not change.
How can a Salesforce architect help IK to Improve sales reps productivity?
- A. Leverage default Account team.
- B. Create a permission set with "view all data" and assign to supporting users.
- C. Create a public group and replace the account ownership with it.
- D. Create a criteria-based sharing rule to grant access to other users.
Answer: A
Explanation:
Explanation
Leveraging default Account team is the best way to help improve sales reps productivity by granting access to supporting internal users for customer records when they need help. Default Account teams are predefined groups of users who work together on an account. When a user creates or owns an account, Salesforce automatically adds the default Account team to the account team related list on the account2. Creating a permission set with "view all data" and assigning it to supporting users would give them too much access to data that they may not need. Creating a public group and replacing the account ownership with it would not be feasible or scalable. Creating a criteria-based sharing rule to grant access to other users would require manual maintenance and may not reflect the changes in the account team.
NEW QUESTION # 136
To grant Universal Containers sales manager access to shipment records properly, it was necessary to leverage Apex managed sharing. The IT team is worried about improper access to records.
Which two features and best practices should a Salesforce architect recommend to mitigate this risk?
- A. Use is Shareable in Apex classes to assure record visibility will be followed.
- B. Use runAs system method in test classes to test using different users and profiles.
- C. Use is Accessible keyword in Apex classes to assure record visibility will be followed
- D. Use with Sharing keyword in Apex classes to assure record visibility will be followed.
Answer: B,D
Explanation:
Explanation
To mitigate the risk of improper access to records when using Apex managed sharing, the Salesforce architect should recommend using runAs system method in test classes and with Sharing keyword in Apex classes. The runAs system method allows testing the code as different users with different profiles and permissions, which can help verify that the sharing logic is working as expected2. The with Sharing keyword enforces the record visibility rules for the current user context, which can help prevent unauthorized access to records that are not shared with the user
NEW QUESTION # 137
Which three capabilities are available with Enterprise Territory Management? Choose 3 answers
- A. Assignment of Territory on Opportunities
- B. Integration with Collaborative Forecasting
- C. Create a public group with Territory
- D. Share a report or dashboard folder with a Territory
- E. Metadata API Support
Answer: A,B,E
NEW QUESTION # 138
Which two are potential vulnerabilities in the following code snippet? <apex:page> <apex:form>
<apex:outputText value="Enter Name"/> <apex:inputText value="{!name}" /> <apex:commandButton value="Query" action="{!query}" /> </apex:form> </apex:page> public class SOQLController { public String name { get { return name;} set {name=value;} } public PageReference query() { String qryString='SELECT Id FROM Contact WHERE '+ '(IsDeleted = false and Name like \'%' + name + '%\'}'; queryResult = Database.query(qryString); retunr null; } } Choose 2 answers
- A. FLS check
- B. Arbitrary Redirects
- C. SOQL Injection
- D. Data Access Control
Answer: C,D
Explanation:
Explanation
The potential vulnerabilities in the code snippet are SOQL Injection and Data Access Control. SOQL Injection is a technique that exploits a security vulnerability in a database layer of an application. It occurs when user input is directly appended to a SOQL query string, which allows attackers to execute arbitrary SOQL commands2. Data Access Control is a mechanism that ensures that users have appropriate permissions to access data in Salesforce. It involves checking the object-level, field-level, and record-level access of the user before performing any data operation3. The code snippet does not perform any FLS check or data access control check, which could expose sensitive data to unauthorized users or allow them to modify data without proper permissions3. Arbitrary Redirects are not a vulnerability in this code snippet, as they occur when a web application accepts untrusted input that could cause the web browser to redirect the user to a malicious website
NEW QUESTION # 139
......
Verified Sharing-and-Visibility-Architect Dumps Q&As - 1 Year Free & Quickly Updates: https://www.exam4docs.com/Sharing-and-Visibility-Architect-study-questions.html
Get 2024 Updated Free Salesforce Sharing-and-Visibility-Architect Exam Questions and Answer: https://drive.google.com/open?id=1W0hb6-y1JkeJr4zNvPb8mAjgPtvkhzNq
