Salesforce Data Security

Which of the following permissions enables the System Administrator Profile to edit any record, regardless of the Sharing Model?

• A. Customize Application

• B. Modify All Data

• C. View Setup and Configuration

• D. None of the above

Which of the following can be controlled through profiles? Choose 3 answers.

• A. Licence Type

• B. Roles

• C. Field Level Security

• D. Object Permissions

• E. Page Layouts

An organization has read-only opportunity sharing model. It also uses Enterprise Territory Management and has an active territory model with the following territories: Japan, United States, France and Argentina. The VP of Sales would like the reps inJapan and France to have read/write access to the opportunities owned by reps in the United States. How can the Salesforce Administrator most efficiently configure the system to meet this requirement?

• A. Change the org-wide default setting of opportunities to 'Public Read/Write'

• B. Create two sharing rules based on users assigned to territories

• C. Create a sharing rule that shares the opportunities owned by the US reps with a public group consisting of members in the Japan and France territories

• D. Ask United States reps to manually share their opportunities with the reps in Japan and France

Only the users who have been assigned to the 'Accounts Receivable' profile should be able to view and access the 'Credit Status' field on the account object via the detail page, reports and the API. What is the best way for the Salesforce Administrator to accomplish this?

• A. Create two page layouts, one with the credit status field, the other without. Assign the first to the 'Accounts Receivable' profile and the second to the other profiles.

• B. Use field-level security to set the 'Visible' setting to not visible for all profiles except Accounts Receivable

• C. It is not possible to display a field for only one profile

• D. Set the Credit Status field to be not visible on the page layout for all profiles except Accounts Receivable

A Sales Manager wants to add a PowerPoint file to a new Content Library but not make it visible to other sales users until a later time. What can be done to achieve this?

• A. Add the file to a library, add the sales public group as members, but don't assign an access type

• B. Disable the view permissions of the content object for the user's profile

• C. Add the file to a library, add the sales public group as members, and set the date when the file should become visible

• D. Add the file to the library but not add any library members

The Salesforce Administrator has been asked by the CTO to list the types of record-level sharing available in Salesforce. Which of the following is related to record-level sharing? Choose 3 answers.

• A. Org-wide defaults

• B. Permission sets

• C. Sharing rules

• D. Profiles

• E. Roles

Charleston Small Business Products has recently expanded its business to include marketing and technology services. Consequently, the Salesforce Administrator must set up several new profiles to limit access to new objects created. Which object settings can be controlled from a profile? Choose 3 answers.

• A. Tab settings

• B. User licences

• Object permissions but not field permissions

• D. Record types and page layout assignments

• E. Object permissions and field permissions

A user is assigned a profile that allows create, edit, and delete permissions on Leads. The org-wide setting for Leads has been set to private. A role hierarchy has been set up and the user has been assigned a role that has subordinate roles below it in the hierarchy. What will the user's access be to leads owned by other users?

• A. The profile setting will override the sharing setting and the user will be able to edit leads owned by other users.

• B. The profile setting will not override the sharing setting and the user will always have only read access to leads owned by other users.

• C. The user will not be able to read, edit, or delete leads owned by other users.

• D. The user will have access to leads owned by other users granted via the role hierarchy.

The CTO of Global Media Corporation would like to refine its security policies. He wants all of the Salesforce users in his organization to change their passwords after 60 days. The password should have a minimum password length of 12 characters, and the maximum invalid login attempts should be 3. What should the Salesforce Administrator consider when configuring this? Choose 2 answers.

• A. 'Password Policies' settings can be maintained on the user detail page

• B. A request to Salesforce is required to change the password policy

• C. 'Password Policies' settings can be maintained for each profile

• D. 'Password Policies' settings can be maintained at the organization level

All users have the 'Standard User' profile assigned. The Salesforce Administrator would now like all users to be able to read, create, and edit contacts but only allow managers to delete contacts. What is the best way to handle this?

• A. Add 'Delete All' permission to the user records

• B. Create a new profile for managers, and enable delete permission for contacts

• C. Modify the standard profile to remove delete permission on contacts, and create a new profile for managers with delete permission

• D. Clone the standard profile and assign it to all users. Remove delete permission on contacts in the cloned profile. Create a permission set that includes permission to delete contacts, and assign the permission set to managers.