Sharing & Visibility 2

31) Universal Containers uses person accounts to represent retail customers and business accounts to represent commercial customers. The Retail Sales team should not have access to commercial customers but have access to ALL retail customers.

With organization-wide default on Account set to Private, how might the architect meet these requirements?

• Update Retail Sales profile to grant access to Person Account record type.

• Create an owner-based sharing rule on AccountContactRelation to grant access to all account contact roles records owned by retail sales reps.

• Create a criteria-based sharing rule giving Retail Sales role access to Accounts of type PersonAccount.

• Give View All access for Accounts to the Retail Sales profile.

32) Universal Containers (UC) has a private Organization-Wide Defaults (OWD) model for the Account object and needs to control the access of records and fields according to these requirements:

• Sales reps can view/edit only their own records and cannot access the field "segment" in account page.

• Service reps need to view all accounts but cannot edit any information.

• Sales managers can modify any account of reps reporting to them.

• Service managers can modify any account.

How can a Salesforce architect provide an optimal solution for this scenario?

• Use profiles, sharing rules, and change OWD to public read-only.

• Use profiles, manual sharing, and field-level security.

• Use profiles, permission sets, and field-level security.

• Use profiles, permission sets, role hierarchy, and field-level security.

33) Universal Containers has developed a custom Visualforce page that will accept user input and must perform a dynamic SOQL query returning the results to the users.

Which two techniques should be used to ensure the users cannot perform a SOQL injection attack?

Choose 2 answers

• Use the With Sharing keyword on the controller.

• Use bind variables in the SOQL query.

• Use the esacapesinglequotes() method to sanitize user input.

• Escape double quotes in the user input.

34) A custom ServiceFeedback object is used to collect partner feedback. ServiceFeedback records should be available to all internal employees. The OWD is set to Private for external users so partners cannot see feedback from other partner users.

How can the Architect give access to all internal employees?

• Create a trigger on ServiceFeedback to change ownership to an internal employee.

• Ensure all the internal users are above the partners in the role hierarchy.

• Create an Owner based sharing rule for all ServiceFeedback records owned by Partners.

• Set OWD, for Internal Users to Public Read Only.

35) Universal Containers (SC) has recently changed its internal policy to follow market regulations and create an internal team to manage the collection process. Only this those should have access to Invoice records. Currently, Invoice is a child in a Master-Detail relationship to Account. Although related lists have been removed from the page layouts, some

profiles still have access to the Invoice object.

Which approach should an architect recommend to fix this problem?

• Create a Permission Set with No Access to the Invoice object and assign to unauthorized users.

• Create a new Profile with no access to the Invoice object and assign it to all unauthorized users.

• Change the Invoice organization-wide default from Controlled by Parent to Private and remove Invoice Access from the unauthorized profiles.

• Replace Account and Invoice Master-Detail Relationship by a Lookup and remove Invoice Access from the unauthorized profiles.

36) Universal Containers (UC) has a business unit that uses a custom object to track requests which demands a high level of internal team collaboration. Although all requests must have an owner, all employees are required to collaborate on requests.

Which recommendation should a Salesforce architect provide to optimize the solution and meet these requirements?

• Set the Request object's OWD to Public Read/Write.

• Set the Request object's OWD to Private and grant Modify All Data permission on all Profiles for the Request object.

• Set the Request object's OWD to Private and criteria-based sharing rule to share all Request records with all internal users.

• Set the Request object's OWD to Public Read Only and configure role hierarchy.

37) A sales rep (John) at Universal Containers (UC) requested to update information in an account record where he has READ only access. John requested the EDIT access permission from the owner of the record (Paul). Paul manually shared the record with John. Assuming the OWD of the Account object is Public Read-Only, what is the impact in the system?

• New AccountShare record is created. Row Cause is "Manual" and Access Level is "Read/Write”.

• Existing AccountShare record is updated. Row Cause is "Owner" and User/Group is "John".

• New AccountShare record is created. Row Cause is "Owner" and Access Level is "Full".

• Existing AccountShare record is updated. Row Cause is "Manual" and Access Level is "Read/Write".

38) Universal Containers (UC) operates worldwide with offices in more than 100 regions in 10 different countries and has established a very complex role hierarchy to control data visibility. In the new fiscal year UC is planning to reorganize the roles and reassign accounts owners.

Which three features could an architect recommend to avoid problems on this operation?Choose 3 answers

• Deferred Sharing Recalculation

• Partition data using Divisions

• Skinny table

• Parallel Sharing Rule recalculation

• Granular Locking

39) Ursa Major Solar is writing test methods.

Which functionality does the system method "runAs()” Verify?

• Enforcement of a user's public group assignments.

• Enforcement of a user's field-level security.

• Enforcement of user's permissions.

• Enforcement of a user's record sharing

40) Universal Containers (UC) uses a custom Visualforce page to display shipment tracking information (custom object, private OWD) to field manager and agents. The IT team wants to make sure that users have access to only the information that is allowed. Which Apex method must be used to make sure only allowed fields are shown to the users?

• isReadable()

• isShowable()

• isAccessible()

• isViewable()