Get Sharing-and-Visibility-Architect Products Practice Material for Sharing-and-Visibility-Architect Exam Question Preparation
Most Reliable Salesforce Sharing-and-Visibility-Architect Training Materials
NEW QUESTION # 30
If you want to create some logic that will share certain records in APEX code, you just have to create special records that will open access to the desired records. The aim is to create records of certain type, for example , all share objects for custom objects are named as
- A. MyCustomObject__Share
Answer: A
NEW QUESTION # 31
Universal Containers (UC) has 600 sales reps. UC has rollout plan to deploy salesforce in 3 weeks. At the end of the second week, they received a "User Role Limit Exceeded" error.
After investigation, they discovered that during the user provisioning process, a new role was generated for every new user.
Which two recommendations could solve this problem?
Choose 2 answers.
- A. Create an Apex class to replace the User Roles by generic one as soon as they are created.
- B. Contact salesforce support and request to increase the number of users' roles allowed.
- C. Remove role hierarchy from salesforce org and control the record access using apex managed sharing.
- D. Review the user provisioning process to not automatically create a user role for any new user.
Answer: B,D
Explanation:
Explanation
Reviewing the user provisioning process to not automatically create a user role for any new user and contacting Salesforce support and requesting to increase the number of users' roles allowed are two recommendations that could solve this problem. Salesforce has a limit on the number of roles that can be created in an organization, which depends on the edition and the number of licenses. If this limit is reached, no more roles can be created unless the limit is increased by Salesforce support. Therefore, it is not advisable to create a new role for every new user, as this would quickly exhaust the limit and cause the "User Role Limit Exceeded" error. Option B is incorrect, since removing role hierarchy from Salesforce org and controlling the record access using Apex managed sharing would be a complex and custom solution that would not address the root cause of the problem. Option D is incorrect, since creating an Apex class to replace the User Roles by generic one as soon as they are created would be unnecessary and inefficient.
NEW QUESTION # 32
Sales Operations at Universal Container (UC) wants to create the opens to fiber appropriates for center.
In which two ways can UC hide list that are not relevant to an individual use since there will be Choose 2 answers.
- A. Share the list views with the appropriate individual users.
- B. Share the list views with the appropriate queue.
- C. Share the list views with the appropriate public group.
- D. Share the list views with the appropriate role in the role hierarchy
Answer: C,D
NEW QUESTION # 33
Universal Containers has a custom Job object with a private sharing model. Based on the size and location of the Job, different teams must have access to edit the specific Job record. To support this requirement, Apex Managed Sharing has been implemented to share records with the required users. Since the teams change frequently, managed sharing recalculations need to be manually run frequently. What can the Architect do to optimize this process?
- A. Create a custom Visualforce page to edit the jobs and specify Without Sharing on the controller.
- B. Create a scheduled job to automatically run the sharing recalculations on a nightly basis.
- C. Create public groups for each team, and share the jobs with the groups instead of users.
- D. Change the sharing model on the Job object to Public Read/Write.
Answer: C
NEW QUESTION # 34
A developer at Universal Container is building an integration within a managed package for their internal org that requires login to an external system. The end point requires basic authentication. The Architect would like to ensure that the username and password are managed securely. Which three options should the Architect recommend to secure the credentials?
- A. Store the credentials in protected custom metadata that are used in the apex callout
- B. Store the credentials in protected custom settings that are used in the apex callout
- C. Store the credentials in a custom object using encrypted fields
- D. Store the credentials in the apex code, which will not be available to non-admins
- E. Store the credentials in named credentials that are used in the apex callout
Answer: A,B,E
Explanation:
Explanation
Named Credentials, Protected Custom Metadata, and Protected Custom Settings are three options to secure the credentials for the external system. They allow the developer to store the credentials in a secure way that is not exposed to other users or packages. Storing the credentials in a custom object using encrypted fields or in the apex code are not secure options
NEW QUESTION # 35
Universal Containers would like to track defects within Salesforce. A defect needs to have the following fields:
* Severity
* Type
* Status
* Description
There will be multiple Defects related to the standard Case object. Defects will be assigned to different owners which will often be different to the Case owner. Which option should the Architect choose to meet the requirement?
- A. Create a relationship between the standard defect object and the standard case object.
- B. Create all defect fields on the case object to track the defect and lookup.
- C. Create a custom object for defects and relate it to cases using master -detail
- D. Create a custom object for defects and relate it to cases using lookup
Answer: D
Explanation:
Explanation
Creating a custom object for defects and relating it to cases using lookup is the best option to meet the requirement. This way, the defects can have their own fields, owners, and security settings, and they can be related to multiple cases. The standard defect object does not exist in Salesforce, so option A is incorrect.
Option C is not scalable or flexible, as it would require adding many fields to the case object and limit the number of defects per case. Option D is also not suitable, as it would make the defects dependent on the cases and delete them if the cases are deleted.
NEW QUESTION # 36
Universal Containers created a public group with certain sales engineers to help on complex deals, as well as a sharing rule to grant access to these opportunities. The Opportunity organization-wide default is Private, What is the impact of these sharing settings?
- A. Subordinates of managers who have sales engineers in the public group will also have access to these records.
- B. Other sales engineers who are in the same Role Hierarchy as the sales engineers of the public group will also have access to these records.
- C. Sales engineers and their managers in the Role Hierarchy will also have access to these records.
Answer: A
NEW QUESTION # 37
A sales rep at Universal Containers was added to an opportunity team with Read/Write permissions.
Which action is she allowed to perform in the opportunity?
- A. Replace opportunity owner.
- B. Update opportunity stage.
- C. Add/remove members in the opportunity team.
Answer: B
Explanation:
Explanation
A sales rep who is added to an opportunity team with Read/Write permissions can perform actions such as updating opportunity fields, adding products, creating tasks, and logging calls4. Therefore, updating opportunity stage is an action that she is allowed to perform in the opportunity. Adding or removing members in the opportunity team is an action that only the opportunity owner or users above the owner in the role hierarchy can perform. Replacing opportunity owner is an action that only the current owner or users above the owner in the role hierarchy can perform.
NEW QUESTION # 38
For the Universal Containers Commercial and Consumer support departments, having access to Activities for Contacts with which they interact is important. Commercial support users should not see Consumer Accounts/Contacts and Consumer support users should not see Commercial Accounts/Contacts. Assuming the Organization-Wide Default for Activities is set to "Controlled by Parent" what is the minimum level of Sharing access a support user would need to Accounts/Contacts to view associated Activities?
- A. The users need no access to Accounts/Contacts with the proper Activity Sharing Rules and Profile Permissions for the Accounts Tab.
- B. Private Account/Contact Sharing Default with a Sharing Rule for each department set to Public Read/Write access to Accounts/Contacts.
- C. Private Account/Contact Sharing Default with a Sharing Rule for each department set to Private access to Accounts/Contacts.
- D. Private Account/Contact Sharing Default with a Sharing Rule for each department set to Public Read only access to Accounts/Contacts.
Answer: D
NEW QUESTION # 39
Sales reps at Universal Containers (UC) complain about the manual activities they need to perform in order to grant access to supporting internal users (legal, engineering, finance, and so forth) for customer records when they need help. In general, the sales reps involved in the deals will not change.
How can a Salesforce architect help IK to Improve sales reps productivity?
- A. Create a criteria-based sharing rule to grant access to other users.
- B. Leverage default Account team.
- C. Create a permission set with "view all data" and assign to supporting users.
- D. Create a public group and replace the account ownership with it.
Answer: B
Explanation:
Explanation
Leveraging default Account team is the best way to help improve sales reps productivity by granting access to supporting internal users for customer records when they need help. Default Account teams are predefined groups of users who work together on an account. When a user creates or owns an account, Salesforce automatically adds the default Account team to the account team related list on the account2. Creating a permission set with "view all data" and assigning it to supporting users would give them too much access to data that they may not need. Creating a public group and replacing the account ownership with it would not be feasible or scalable. Creating a criteria-based sharing rule to grant access to other users would require manual maintenance and may not reflect the changes in the account team.
NEW QUESTION # 40
The Collections department at Universal Containers uses Salesforce to track its efforts. All Invoices and Invoice Line Items are stored in Salesforce. Invoice Line Item object details, such as Quantity and Extended Amount, should be summarized at the Invoice Object level, and all users who can see a given invoice should always see all invoice line items. Without leveraging Apex code, how should an Architect create the relationship between the Invoice object and the Invoice Line Item Object?
- A. The Invoice Line Item Object should have a Lookup to the Invoice Object
- B. The Invoice Line Item Object should have a Master-Detail to the Invoice Object
- C. The Invoice object should have a Master-Detail to the Invoice Line Item Object
- D. The Invoice Object should have an inner joint to the Invoice Line Item Object
Answer: B
Explanation:
Explanation
A master-detail relationship is a type of relationship between two objects where the master object controls certain behaviors of the detail object, such as security and deletion. In this case, the Invoice Line Item Object should have a master-detail relationship to the Invoice Object, so that3:
The Invoice Line Item records are deleted when the parent Invoice record is deleted.
The Invoice Line Item records inherit the sharing and security settings of the parent Invoice record.
The Invoice Line Item fields can be rolled up to calculate sums, averages, etc. on the parent Invoice record.
NEW QUESTION # 41
Universal Containers (UC) has a mostly private organization-wide default (OWD), as it is a core principle of UC to respect client data privacy. UC has implemented complex processes for granting access to Opportunity dat a. A few key members of the Sales Reporting team need to always be able to see, but not change, Opportunity data for all Opportunities.
What should an architect recommend as an approach to meet these requirements?
- A. Create a Permission Set that grants "View All" permission for Opportunity.
- B. Make Opportunity OWD read-only.
- C. Give "View All Data" Permission to the Sales Reporting Profile.
- D. Create a Permission Set that grants "View All Data" Permission.
Answer: A
NEW QUESTION # 42
Universal Containers (UC) turned off the customer visibility feature in its customer community. What community functionality is impacted by having the customer user visibility turned off?
- A. Searching for internal users.
- B. Updating their user profile.
- C. Searching for the external users.
- D. Creating new customer community users.
Answer: C
NEW QUESTION # 43
Universal Containers would like to store an encryption key within Salesforce for use in Apex Code, but does not want users to be able to see this confidential key. Users require the view setup permission.
How can Universal Containers securely store the confidential key?
- A. Create 4 protected custom metadata type that stores the encryption key. Package the protected custom metadata type with its associated records in an unlocked package. Install the package In the production org.
- B. Create a protected custom metadata type that stores the encryption key. Package the protected custom metadata type with its associated records in a managed package. Install the package In the production org.
- C. Create 6 custom metadata type that stores the encryption key. Make sure that only the admin profile has access to the custom metadata type $0 that end users cannot access the encryption key.
Answer: B
NEW QUESTION # 44
A Visualforce controller has a requirement to be written with "Without Sharing" at the top level; however, certain methods within the page still need to enforce the user permissions for creating records and accessing certain fields. Which two methods below would be used to enforce this requirements?
Choose 2 answers.
- A. Schema.getGlobalDescribe
- B. Schema.DescribeSObjectResult
- C. Schema.DescribeFieldResult
- D. UserInfo.getProfileID
Answer: B,C
Explanation:
Explanation
The two methods that would be used to enforce this requirement are A and D. Schema.DescribeFieldResult and Schema.DescribeSObjectResult can be used to check the user permissions for creating records and accessing certain fields, even if the Visualforce controller is written with "Without Sharing". The other options are either not related to field or object permissions, or not sufficient to enforce them.
NEW QUESTION # 45
Universal Containers has a requirement to share Accounts automatically to the users at a field office. They currently have the following setup in their environment:
* Accounts are set to Private in the Org-Wide Default.
* The field office is specified by a lookup in the Account object.
* There are 400 field offices.
* The users in each field office are managed using public groups.
Based upon a lookup relationship field on the Account, how should the Architect meet this requirement?
- A. Use Criteria-Based Sharing to share the Account with the appropriate field office.
- B. Use Manual Sharing to share the Account with the appropriate field office.
- C. Use Account Teams to share the Account with the appropriate field office.
- D. Use Programmatic Sharing to share the Account with the appropriate field office.
Answer: D
NEW QUESTION # 46
What vulnerability can exist when controllers use dynamic rather than static queries and bind variables?
- A. SOQL Injection.
- B. Buffer Overflow Attacks.
- C. Cross-site scripting.
- D. Record Access Override.
Answer: A
Explanation:
Explanation
SOQL injection is a vulnerability that can exist when controllers use dynamic rather than static queries and bind variables. SOQL injection is a technique that exploits a security vulnerability by inserting malicious SOQL statements into an existing query. This can result in data loss, data exposure, or unauthorized access1.
Buffer overflow attacks, cross-site scripting, and record access override are not vulnerabilities related to dynamic queries and bind variables.
NEW QUESTION # 47
Universal Containers (UC) delivers training and courses to students and companies. UC is implementing a Salesforce Customer Community for its students granting them a Customer Community license. As part of the community requirements, UC asked to give students access to cases that are related to their account in the UC community.
What is the optimum sharing technique that can achieve the requirements?
- A. Create a sharing rule to share cases with the students.
- B. Create a share group to share cases with the students.
- C. Use Apex sharing to share cases with the students.
- D. Create a sharing set to share cases with the students.
Answer: B
NEW QUESTION # 48
Which method should be used to grant access to an unrelated group of users?
- A. Sharing Sets
- B. Role Hierarchy
- C. Public Groups
Answer: C
Explanation:
Explanation
Public groups are used to grant access to a set of users who do not have a predefined relationship in the role hierarchy or territory hierarchy. Sharing sets are used for community users, not internal users. Role hierarchy is used to grant access based on the user's position in the organization.
NEW QUESTION # 49
Universal Containers has two custom objects: Job and Job Interview. The Job Interview object has a lookup relationship to Job. Both objects are set to Private in sharing settings. The HR team will own all Job and Job Interview records. They have asked their Salesforce Architect to automatically share the Job Interview when the Interviewer (lookup to user record) has been populated. The interviewer can be from any department. What method should the Architect use to achieve this requirement?
- A. Build a criteria-based sharing rule between the Job Interview and the Interviewer
- B. Build a standard sharing rule between Job Interview and the Interviewer
- C. Build a workflow email notification to notify the interviewer of the record assignment
- D. Build apex Managed Sharing code to share Job Interview with the Interviewer user
Answer: D
Explanation:
Explanation
According to this source, Apex managed sharing is the best way to share records based on complex logic that can't be handled by declarative sharing. In this case, the architect can use Apex code to create a trigger on the Job Interview object that will create a share record for the interviewer user when the lookup field is populated.
The other options are not feasible or scalable.
NEW QUESTION # 50
Universal Containers has set Account Sharing to Private with Account Teams enabled. Which two user groups can add team members on the Account? Choose 2 answers
- A. The current Account Owner can add team members.
- B. Someone above the Account Owner in the Role Hierarchy with read access
- C. Any Account Team Member with read access on the Account
- D. The user specified as the Manager on the Owner's User record
Answer: B
NEW QUESTION # 51
A sales coach at Universal Containers wants to create and share report folder with other sales coaches, Which two permissions are required to accomplish this?
- A. Manage Reports in Public Folders and edit My Reports.
- B. Create and customize Reports and Report Folders.
- C. Create Report Folders and manage Reports in Public Folders.
Answer: B
Explanation:
Explanation
Creating and customizing Reports and Report Folders and Manage Reports in Public Folders are two permissions that are required to accomplish this task, as they allow users to create reports and folders and share them with other users or groups. Editing My Reports is not a permission that is required to accomplish this task, as it only allows users to edit reports in their personal folders. Creating Report Folders is not a permission that exists in Salesforce.
NEW QUESTION # 52
Universal Health is planning to store patient notes in Salesforce. Patient notes consist of long text notes taken by a use to document phone calls with a patient.
A date audit has identified that these notes can contain Personally Identifiable Information (PII) and Personal Health Information (PHI). The regulatory requirements state that this data must be encrypted at rest as well as in transit.
What should the Architect do in order to make sure Universal Health stays compliant?
- A. Enable Salesforce Shield Platform Data Encryption and mark the patient notes field as encrypted.
- B. Use an Apex trigger and the Apex Crypto class to encrypt patient notes as soon as they are saved to Salesforce.
- C. Create a new Custom Field of type "Text (Encrypted)" and move the patient notes data into the new field.
- D. No action is required; all Salesforce data is encrypted at rest as part of Salesforce's standard trust measures.
Answer: A
Explanation:
Explanation
The best option for the architect to make sure Universal Health stays compliant is B. Enabling Salesforce Shield Platform Data Encryption and marking the patient notes field as encrypted will ensure that the data is encrypted at rest as well as in transit, using a tenant secret that only Universal Health can access. This will also allow them to use standard Salesforce features and functionality with the encrypted data. The other options are either incorrect or not optimal.
NEW QUESTION # 53
If a Case requires involvement from one of the Legal team, the Case owner adds one of the corporate lawyers to the Legal SME field on the case.
Since cases are private, how can we grant a lawyer access to a specific case when their assistance is needed?
- A. Create a Criteria Based Sharing Rule that shares to the Legal Public Group when the ''legal assistance needed?'' field is checked.
- B. Use Apex Managed sharing in a case Trigger that shares the record to the user identified in the Legal SME field.
- C. Create an Criteria Based Sharing Rule that shares to the Corporate Legal Team Role when the ''legal assistance needed? Field is checked.
Answer: B
Explanation:
Explanation
Using Apex Managed sharing in a case Trigger that shares the record to the user identified in the Legal SME field is the best way to grant a lawyer access to a specific case when their assistance is needed, as it allows the case owner to dynamically share the case with a specific user based on a custom field value1. Creating a Criteria Based Sharing Rule that shares to the Corporate Legal Team Role when the ''legal assistance needed?
Field is checked will not work, as it will share the case with all users in that role, not just the lawyer in the Legal SME field. Creating a Criteria Based Sharing Rule that shares to the Legal Public Group when the
''legal assistance needed?'' field is checked will not work, as it will share the case with all users in that group, not just the lawyer in the Legal SME field.
NEW QUESTION # 54
Universal Containers would like to customize the security and sharing features of Salesforce Account Teams.
They have decided to implement a Custom Account Team object. They would like the new enhancement to include all of the features of the existing account team, but also utilize Apex and Visualforce on the custom Account Team object.
Which two different approaches should the Architect consider when designing this enhancement?
Choose 2 answers
- A. The need to synchronize the AccountTeamMember object with the Custom Account Team object data.
- B. The need to customize Account screens in Visualforce, as the Account_share object cannot be maintained programmatically.
- C. The need to maintain the Account_share object based upon the Custom Account Team object data.
- D. The need to dynamically create Criteria-Based Sharing rules with Custom Account Team object data.
Answer: A,C
Explanation:
Explanation
The two different approaches that the architect should consider when designing this enhancement are A and B.
Option A ensures that the custom account team object data is consistent with the standard account team member object data, which is used for implicit sharing. Option B ensures that the account share object, which stores the sharing records for accounts, is updated based on the custom account team object data. The other options are either not necessary or not possible.
NEW QUESTION # 55
......
LATEST Sharing-and-Visibility-Architect Exam Practice Material: https://pdfdumps.free4torrent.com/Sharing-and-Visibility-Architect-valid-dumps-torrent.html