Updated Apr-2024 Test Engine to Practice Test for Sharing-and-Visibility-Architect Exam Questions and Answers!
Salesforce Certified Sharing and Visibility Architect Certification Sample Questions and Practice Exam
NEW QUESTION # 93
In order to comply with Regulatory Requirements, Universal Containers must store sensitive customer information on-premise. Universal Containers would like this on-premise information to be accessible from Salesforce. What technology can Universal Containers use to achieve this?
- A. Implement the Salesforce Shield toolkit.
- B. Implement a third-party tokenization service.
- C. Implement a third-party proxy server.
- D. Implement an on-premise database.
Answer: C
Explanation:
Explanation
Implementing a third-party proxy server is the best technology to achieve the requirement of accessing on-premise information from Salesforce. A proxy server acts as an intermediary between Salesforce and the on-premise database, and it can handle authentication, encryption, and data transformation. Option A is incorrect, as tokenization is a technique to replace sensitive data with tokens, not to access on-premise data.
Option B is incorrect, as it does not specify how Salesforce can connect to the on-premise database. Option D is incorrect, as Salesforce Shield is a set of tools to enhance data security and compliance in Salesforce, not to access external data sources.
NEW QUESTION # 94
Universal Containers would like to customize the security and sharing features of Salesforce Account Teams. They have decided to implement a Custom Account Team object. They would like the new enhancement to include all of the features of the existing account team, but also utilize Apex and Visualforce on the custom Account Team object.
Which two different approaches should the Architect consider when designing this enhancement?
Choose 2 answers
- A. The need to synchronize the AccountTeamMember object with the Custom Account Team object data.
- B. The need to maintain the Account_share object based upon the Custom Account Team object data.
- C. The need to customize Account screens in Visualforce, as the Account_share object cannot be maintained programmatically.
- D. The need to dynamically create Criteria-Based Sharing rules with Custom Account Team object data.
Answer: A,B
NEW QUESTION # 95
Universal Containers has selected a small and diverse group of users to review inactive accounts. Given the Private sharing model, a public group was created and made available to this group of users. A sharing rule was created to make inactive Accounts visible to the public group. However some of these users are reporting they don't see any of the Accounts that were shared with the public group.
What is the underlying issue for these users?
- A. The page layout assigned to these users is different than the Account owner.
- B. The users have a permission set that only allow Accounts in "Active" status.
- C. The Accounts are owned by users higher in the role hierarchy.
- D. The users are in profiles that have no access to the Account object.
Answer: D
NEW QUESTION # 96
A custom ServiceFeedback object is used to collect partner feedback. ServiceFeedback records should be available to all internal employees. The OWD is set to Private for external users so partners cannot see feedback from other partner users.
How can the Architect give access to all internal employees?
- A. Create a trigger on ServiceFeedback to change ownership to an internal employee.
- B. Ensure all the internal users are above the partners in the role hierarchy.
- C. Create an Owner based sharing rule for all ServiceFeedback records owned by Partners.
- D. Set OWD, for Internal Users to Public Read Only.
Answer: D
NEW QUESTION # 97
In order to comply with regulatory requirements, Universal Health must encrypt all Personally Identifiable Information (PII), both while it is being transmitted over the network and while it is at rest. Universal Health has completed a data audit and has determined that 12 fields on the contact record can contain PII, including the contact name and several other standard fields. Universal Health would like the fields to remain accessible in Salesforce. Which two options does Universal Health have to maintain compliance?
Choose 2 answers.
- A. Enable Salesforce Platform Encryption and select the 12 contact fields to be encrypted.
- B. Use an external, third party encryption service to encrypt PII before it enters Salesforce.
- C. Implement a custom Apex trigger to automatically encrypt the PII data using the Apex Crypto Class.
- D. Update the field type of each of the 12 fields to "Text (Encrypted)" so that they are encrypted at rest.
Answer: A,D
NEW QUESTION # 98
Below are some details regarding the organization at Universal containers:
1. Richard and Kevin are the east sales reps and their manager is Karen the East sales executive.
2. Sam and Wilder are West sales reps and the manager is Wendy, the West sales executive.
3. Bob is the CEO and managers both Karen and Wendy
Universal containers role hierarchy follows their management structure. Richard owns an account, NewCompany, and Kevin owns an account, OldCompany. Karen manually shared her account NewWorld with Kevin. However, she has moved to a new role to lead all Named Accounts, and Phil, who replaced her, is the new owner of NewWorld. Which employees will have access to the NewWorld account?
- A. Bob, Karen and Kevin
- B. Bob, Richard, Phil and Kevin
- C. Bob and Phil
- D. Bob, Phil and Kevin
Answer: C
NEW QUESTION # 99
Sales reps at Universal Containers (UC) complain about the manual activities they need to perform in order to grant access to supporting internal users (legal, engineering, finance, and so forth) for customer records when they need help. In general, the sales reps involved in the deals will not change.
How can a Salesforce architect help IK to Improve sales reps productivity?
- A. Create a criteria-based sharing rule to grant access to other users.
- B. Create a public group and replace the account ownership with it.
- C. Leverage default Account team.
- D. Create a permission set with "view all data" and assign to supporting users.
Answer: C
Explanation:
Explanation
Leveraging default Account team is the best way to help improve sales reps productivity by granting access to supporting internal users for customer records when they need help. Default Account teams are predefined groups of users who work together on an account. When a user creates or owns an account, Salesforce automatically adds the default Account team to the account team related list on the account2. Creating a permission set with "view all data" and assigning it to supporting users would give them too much access to data that they may not need. Creating a public group and replacing the account ownership with it would not be feasible or scalable. Creating a criteria-based sharing rule to grant access to other users would require manual maintenance and may not reflect the changes in the account team.
NEW QUESTION # 100
To grant Universal Containers sales manager access to shipment records properly, it was necessary to leverage Apex managed sharing. The IT team is worried about improper access to records.
Which two features and best practices should a Salesforce architect recommend to mitigate this risk?
- A. Use with Sharing keyword in Apex classes to assure record visibility will be followed.
- B. Use runAs system method in test classes to test using different users and profiles.
- C. Use isAccessible keyword in Apex classes to assure record visibility will be followed
- D. Use isShareable in Apex classes to assure record visibility will be followed.
Answer: C
NEW QUESTION # 101
If you want to create some logic that will share certain records in APEX code, you just have to create special records that will open access to the desired records.
The aim is to create records of certain type, for example, all share objects for custom objects are named as ____________?
Answer:
Explanation:
MyCustomObject__Share
Explanation:
The correct format for creating share objects for custom objects in Apex code is MyCustomObject__Share.
Share objects are used to grant access to individual records that are owned by another user or queue.
For standard objects, the share object name is ObjectNameShare, such as AccountShare or ContactShare.
For custom objects, the share object name is ObjectName__Share, such as MyCustomObject__Share or Project__Share.
NEW QUESTION # 102
Universal Containers has implemented a strict software architecture for their custom Apex code. One of the requirements is that all SOQL queries are contained within reusable classes. Depending on the context of the Apex transaction, the queries should be able to run either "With Sharing" or "Without Sharing". Which two ways allow the Architect to meet these requirements?
Choose 2 answers.
- A. Create a reusable SOQLQueries class; do not specify "With" or "Without Sharing" on the SOQLQueries class.
- B. Create a reusable SOQLQueries class; do not specify "With" or "Without Sharing" on the SOQLQueries class and use the runAs() method to dynamically set the context.
- C. Create a SystemSOQLQueries class and a UserSOQLQueries class; set the "With Sharing" keyword on the User SOQLQueries class and "Without Sharing" on the SystemSOQLQueries class.
- D. Create a reusable SOQLQueries class; specify "With Sharing" on the methods that require user context and "Without Sharing" on the methods requiring system context.
Answer: A,D
Explanation:
Explanation
Creating a reusable SOQLQueries class without specifying "With" or "Without Sharing" on the class or specifying "With Sharing" or "Without Sharing" on the methods are two ways to meet the requirements. The sharing mode of the class or method will depend on the context of the calling code, which can be either "With Sharing" or "Without Sharing". Option B is incorrect because the runAs() method is only available in test methods and does not change the sharing mode. Option D is incorrect because it requires creating two separate classes for different sharing modes, which is not reusable.
NEW QUESTION # 103
Universal Container (UC) is in a legal dispute regarding several orders. UC has found out these records VP of Sales has asked to ensure this cannot happen in the future.
What approach would meet this requirement?
- A. Implement a Sharing Rule that changes access for order to Read.
- B. Change the Record Type/Page Layout assignment for orders to be Read Only.
- C. Remove Order delete Permission from Profiles and Permission Sets
- D. Remove the Delete button from the Order Page Layout.
Answer: B,C
NEW QUESTION # 104
Which two settings are available in profiles, but not permission sets?
Choose 2 answers.
- A. Tab Settings
- B. Page Layout Assignments
- C. Login Hours
- D. Record Types
Answer: B,C
NEW QUESTION # 105
Universal Containers has built a recruiting application on the salesforce Platform. HR requested that all internal users should have edit access to the referral custom object. One of the recruiters needed to share a referral record with another colleague for collaboration using manual sharing. The recruiter opened the referral record and could not find the share button. What could be the technical reason for this?
- A. The Referral object OWD is public Read/Write.
- B. The Referral object OWD is private.
- C. The Referral object OWD is public Read only.
- D. The Referral object OWD is public Full Access.
Answer: A
Explanation:
Explanation
The Referral object OWD is public Read/Write, which could be the technical reason for the recruiter not finding the share button. When an object's OWD is public Read/Write, all users can view and edit all records of that object, so there is no need for manual sharing. The share button only appears when an object's OWD is private or public Read Only. Option A is incorrect, since the Referral object OWD is not private. Option C is incorrect, since the Referral object OWD is not public Read Only. Option D is incorrect, since public Full Access is not a valid OWD setting.
NEW QUESTION # 106
A banking company wants their customers Date of Birth Field searchable by Banking Reps, but only editable by Customer Support Reps.
Which approach is recommended to meet this requirement?
- A. Create a Validation rule in the Data of Birth field so the rule returns true only when user.profilename matches Customer Support Rep.
- B. Set the Fled Level Security for the Date of Birth field to be Visible to Customer Support Rep Profile, and set the Date of Birth Field Visible and Read-only to Banking Rep profile.
- C. Add Date of Birth field to the Search layout of the Contact Object. Modify the Page layout assigned to Customer Support Rep and add Date of Birth field as Required.
Answer: B
Explanation:
Explanation
Setting the Field Level Security for the Date of Birth field to be Visible to Customer Support Rep Profile, and set the Date of Birth Field Visible and Read-only to Banking Rep profile is the best approach to meet this requirement, as it allows admins to control who can see and edit a specific field on an object. Creating a Validation rule in the Data of Birth field so the rule returns true only when user.profilename matches Customer Support Rep will work, but it will require additional logic and error handling. Adding Date of Birth field to the Search layout of the Contact Object and modifying the Page layout assigned to Customer Support Rep and adding Date of Birth field as Required will not work, as it will only affect how the field is displayed and searched, not who can edit it.
NEW QUESTION # 107
Sales manager want their team members to help each other close Opportunities. The Opportunity and ..
private. To grant Opportunity access to sales reps on the same team, ownership-based sharing rules ..
What is the side effect of this approach?
- A. Sales reps on the same will have Read access to the Accounts for Opportunities owned by their.
- B. All sales reps will have Read access to Accounts for all Opportunities.
- C. Sales Reps on the same team will have Edit access to the Accounts for Opportunity owned by their.
- D. All sales reps will have Read access to all Accounts.
Answer: D
Explanation:
Explanation
The side effect of granting opportunity access to sales reps on the same team using ownership-based sharing rules is that all sales reps will have Read access to all accounts. This is because ownership-based sharing rules are based on the role or territory of the owner of the record, and they grant access to both the record and its parent account. Therefore, if a sharing rule grants Read access to opportunities owned by users in a certain role or below, it also grants Read access to the accounts of those opportunities4. Sales reps on the same team will not have Edit access to the accounts for opportunities owned by their peers, as sharing rules only grant Read or Read/Write access, not Edit access. Sales reps on the same team will not have Read access to the accounts for opportunities owned by their peers only, as sharing rules grant access to all accounts in the specified role or below, not just their peers. All sales reps will not have Read access to accounts for all opportunities, as sharing rules only grant access to accounts for opportunities owned by users in a certain role or below, not all opportunities.
NEW QUESTION # 108
Universal Containers (UC) operates worldwide, with offices in more than 100 regions in 10 different countries, and has established a very complex Role Hierarchy to control data visibility. In the new fiscal year, UC is planning to reorganize the roles and reassign account owners.
Which feature should an architect recommend to avoid problems with this operation?
- A. Partition data using Divisions
- B. Skinny table
- C. Deferred Sharing Recalculation
Answer: C
NEW QUESTION # 109
Universal Containers has selected a small and diverse group of users to review Inactive accounts. Given the Private sharing model, a public group was created and made available to this group of users. A sharing rule was created to make inactive Accounts visible to the public group. However, some of these users are reporting they don't see any of the Accounts that were shared with the public group.
what is the underlying Issue for these users?
- A. The users have a permission set that only allow Accounts in "Active' status.
- B. The Accounts ire owned by users higher In the role hierarchy.
- C. The page layout assigned to these marts to different than the Account owner
- D. The users are in profiles that have no access to the Account object.
Answer: D
NEW QUESTION # 110
To grant Universal Containers sales manager access to shipment records properly, it was necessary to leverage Apex managed sharing. The IT team is worried about improper access to records.
Which two features and best practices should a Salesforce architect recommend to mitigate this risk?
- A. Use isAccessible keyword in Apex classes to assure record visibility will be followed
- B. Use with Sharing keyword in Apex classes to assure record visibility will be followed.
- C. Use isShareable in Apex classes to assure record visibility will be followed.
- D. Use runAs system method in test classes to test using different users and profiles.
Answer: B,D
NEW QUESTION # 111
Universal Containers would like to control access to records and objects according to the following business requirements:* Sales users can view all Account records but only edit their own records.
* Sales managers view all Account records but only edit records of the team.
* Service users can view all Account records that are not marked with a RecordType of Prospect.
Which organization-wide default configuration should a Salesforce architect recommend to fulfill these requirements?
- A. Public tad Only
- B. Public Read Write
- C. Private
- D. Public Read/Transfer
Answer: A
Explanation:
Explanation
Public Read Only is the best organization-wide default configuration to fulfill the requirements. Public Read Only means that all users can view all records, but only the owners and those above them in the role hierarchy can edit them3. This matches the requirements for sales users and sales managers. For service users, a record type-based sharing rule can be created to restrict their access to accounts with a RecordType of Prospect.
Public Read Write, Private, and Public Read/Transfer are not suitable configurations for the requirements.
NEW QUESTION # 112
Dreamforce presenters need to be able to edit their presentation details (summary, presenter biographies, etc) on a private custom object in Salesforce (Presentation). All presenters for a presentation are captured on a Presenters juction object between Presenter and User.
How can this be accomplished?
- A. Trigger on Presenter junction object that adds the user to the Sales Team for the Presentation record.
- B. Trigger on Presenter junction object that uses Apex Managed sharing to add or remove access to the related Presentation record.
- C. Give Edit rights to the Presentation record via a Permission set that is given to the Presenters for a record.
Answer: B
NEW QUESTION # 113
Jane, a support representative at Universal Containers, created a report to view all her open cases that have been created in the past 7 days and saved the report in the "Private Reports" folder.
Who can view and run the report?
- A. The report owner and any users who have been given access to the "My Private Reports" folder
- B. The report owner and anybody in the role hierarchy above the report owner
- C. The report owner and users with the "View All Data" permission
- D. The report owner
Answer: D
Explanation:
Explanation
The report owner is the only one who can view and run the report that is saved in the "Private Reports" folder.
Option A is incorrect, since there is no such thing as the "My Private Reports" folder in Salesforce. Option B is incorrect, since the role hierarchy does not affect the access to private reports. Option D is incorrect, since the "View All Data" permission does not grant access to private reports.
NEW QUESTION # 114
The System Administrator at Universal Containers has created two list views called ListV1 and ListV2. One group of users should only see ListV1 and the second group of users should only see ListV2. Two public groups were created to restrict visibility to the respective list views. However, users in both groups are able to see both list views. What system permission in their profile enabled the users to see all list views?
- A. Manage Custom Permissions
- B. Manage Custom List Views
- C. Manage Private List Views
- D. Manage Public List Views
Answer: D
Explanation:
Explanation
The system permission in their profile that enabled the users to see all list views is manage public list views.
This permission allows users to create, edit, and delete public list views, as well as view all list views shared with them or with their groups. To restrict visibility to the respective list views, the system administrator should remove this permission from the users' profiles and assign it only to those who need to manage public list views
NEW QUESTION # 115
Universal Containers (UC) uses a custom lightning component with an Apex class to display shipment information (custom object, private OWD). UC sales managers are complaining about two important points:
Shipment records that belong to their teams can be seen by other users.
Shipment amount should be visible only by managers, but sales reps are able to view it. Which two features did the development team miss that is causing the problems?
Choose 2 answers.
- A. Use isAccessible() method in Apex classes to check field accessibility
- B. Use is Sharable keyword in Apex classes to assure record visibility.
- C. Use with Sharing keyword in Apex classes to enforce sharing rules evaluation.
- D. Use run as in test class to enforce user permissions and field-level permissions.
Answer: A,C
Explanation:
Explanation
The development team missed using the with Sharing keyword in Apex classes to enforce sharing rules evaluation, and the isAccessible() method in Apex classes to check field accessibility. The with Sharing keyword ensures that the Apex code respects the sharing rules defined for the current user, while the isAccessible() method checks if the user has read access to a specific field1. The run as method in test class is used to test whether a user can perform certain actions, not to enforce permissions2. The isSharable keyword in Apex classes does not exist.
NEW QUESTION # 116
......
Certification dumps Salesforce Architect Sharing-and-Visibility-Architect guides - 100% valid: https://exampdf.dumpsactual.com/Sharing-and-Visibility-Architect-actualtests-dumps.html
