Quiz
Saleforce Advanced Administrator - Security and Access (FOF June 2020)
Questions in this quiz (58)
1What is true regarding default access to Accounts and related Cases for users in a territory?
- ATerritory users automatically have review and edit access to the territory accounts
- BTerritory users automatically have view and edit access to the cases related to territory accounts
- CThe level of access to Accounts and Cases can be selected from predefined options
- DThe level of access to the Accounts and Cases can be defined for each account
2When would it be appropriate to use Permission Sets?
Choose 3.- AWhen there is a need to remove certain permissions for a group of users.
- BWhen there is a need to grant additional permissions to a group of unrelated users
- CWhen there is a need to grant a non-administrator user special access to view and modify all data in the organization
- DWhen there is a need to add special permissions to users with the same profile
- EWhen there is a need to add new permissions without changing existing profile settings
3Which of the following are true about Enterprise Territory Management?
Choose 2.- ATerritories organize accounts and users who work with those accounts
- BUsers in a territory can always view and edit accounts associated with the territory
- CTerritory type has an impact on record visibility
- DAn account may be assigned to more than one territory
4One of 10 sales managers in your organization has been given the task of managing dashboards. What is the most appropriate way of ensuring that the sales manager is able to manage dashboards?
- AAssign the Sales Manager as a delegated administrator of dashboards
- BCreate a permission set with the "Manage Dashboards in Public Folders" user permission and assign the Sales Manager
- CAdd the "Manage Dashboard in Public Folders" permission to the Sales Manager user
- DAdd the "Manage Dashboards in Public Folders" permission to the Sales Manager profile
5When configuring default record access levels in Enterprise Territory management, which of the following statements are true regarding access to accounts and/or related records.
Choose 2.- AUsers in a territory can always view, edit and transfer records that are related to the account assigned to the territory.
- BUsers in a territory are always able to view contacts and opportunities associated with accounts in the territory hierarchy
- CUsers in a territory can "Not Access", "View", or "View/Edit" records associated with accounts in the territory.
- DUsers in a territory always have at least "View" access to the accounts assigned to the territory
6When setting up Enterprise Territory Management, which of the following is the correct order?
- ATerritory Type, Territory, Territory Model
- BTerritory, Territory Model, Territory Type
- CTerritory, Territory Type, Territory Model
- DTerritory Type, Territory Model, Territory
7Which of the following statements are true regarding Enterprise Territory Management and Collaborative Forecasting in Salesforce?
- AEnterprise Territory Management works with Collaborative Forecasting without any additional configuration
- BIt is necessary to contact Salesforce Support to enable Collaborative Forecasting for Enterprise Territory Management
- CA setting needs to be enabled in Setup to activate Collaborative Forecasting for Enterprise Territory Management if the latter has been enabled
- DTerritory Forecasts by close date are available when using Collaborative Forecasting
8A non-administrator user needs to create and modify Product records. What is the best way to achieve this?
- ASet the default access of the Product's object to "Public/Read/Write/Transfer" in the sharing settings
- BCheck "Modify All Data" in the user's profile settings
- CCreate a permission set with "Create and Edit" access enabled for the Product object and assign it to the user
- DEnable "Create and Edit" access in the Standard Object Permissions of the Products object for the user's profile
9Sam Smith is a sales representative assigned to the US East Territory. A new account is created and assigned to the US East territory. What access will Sam have to the account?
- ADepends on the account level set for the US East Territory
- BAccess will be determined by a combination of the sharing settings and the territory settings
- CDepends on the owner of the account and the role hierarchy
- DSam will have full access to the account
10What is true regarding profiles and permission sets?
Choose 2.- AA user can have only on permission set assigned
- BA user can have multiple permission sets assigned
- CA user can have multiple profiles assigned
- DA user can only have one profile assigned
11A user has been assigned as a delegated administrator for a custom object. What tasks are they able to perform?
Choose 3.- AChange a master-detail relationship field to a lookup relationship field
- BMaintain picklist values for an existing field in the custom object
- CAdd a validation rule to the custom object
- DAdd a new field in the custom object
- EChange org-wide sharing setting for the custom object
12You are implementing Case management in Salesforce, and it is a requirement that not everyone should be given the capability to delete a case. There is a profile defined for case administrators with the permission to edit a closed case. However, a few case administrators should be able to delete a case. What would be the most appropriate solution?
- AAdd a custom permission to the user records required
- BCreate a permission set for providing delete access for the required case admins
- CClose the existing Case Admin profile to create a "Super Case Admin" profile
- DLeverage Role Hierarchy
13Which of the following is true regarding Enterprise Territory management?
- AUsers can be assigned to multiple territories
- BAccounts can be assigned to multiple territories
- CAccounts can be manually added to a territory
- DUsers can be automatically added to a territory
- EA territory field can be added to the Account page layout to display the Account territory
14A custom object "Application" has been created with the org-wide sharing setting of Private. Leo is the owner of multiple Application records. John currently has no access to Application records. What is required to allow only John to access and update certain Application records owned by Leo?
Choose 2 Answers.- AManually share the records by clicking the "Sharing" button
- BChange the org-wide sharing setting to "Public Read/Write" for the application object
- CUse a permission set with "Edit" access to application and assign it to John
- DChange the profile John is assigned to allow "Edit" access to Application
- EChange the org-wide sharing setting to "Public Read Only" for the Application object
15In Enterprise Territory Management Settings, which of the following default access levels are possible for accounts when the org-wide default sharing setting is "Private"?
- AView, Edit, Transfer and Delete
- BView, Edit, Delete
- CView and Edit
- DNo Access
16Which of the following are true regarding Territory Management?
Choose 3.- AA territory type must be assigned to a territory
- BA user must be assigned a territory role
- CA territory must have a priority defined
- DA user can have a different role in each territory
- EA territory type must have a priority defined
17Which of the following is NOT a Territory Model state?
- ADraft
- BPlanning
- CActive
- DArchived
18Consider an organization that has constructed territories based on geography. You have a requirement that if an account is created with "Type = Global", it must be assigned to the "US Territory" and all child territories. How would you define the assignment rule in this case?
- ACreate an assignment rule based on the Type field at the US territory level
- BCreate an assignment rule based on Type field at US territory level and mark "Apply to Child Territories"
- CCreate an assignment rule based on the Type field at Territory Model level
- DCreate an assignment rule based on the Type field at each state level
19In Enterprise Territory Management, which of the following are possible access levels for accounts assigned to territories when the org-wide default sharing setting is "Public Read/Write"?
Choose 2.- AView, Edit, Transfer and Delete
- BView and Delete
- CView and Edit
- DNo Access
20What is NOT true regarding Territory Account Assignment rules?
- AMultiple Assignment Rules can be defined for a territory
- BAssignment rules can use standard or custom account fields in the criteria definition
- CAssignment rules can be applied to descendant territories
- DAssignment rules are active as soon as they are created
21In Enterprise Territory Management, which of the following are capabilities of filter-based opportunity territory assignment?
- AAn Apex class can be created to automatically assign opportunities to territories based on custom criteria
- BAn option can be selected to run the filter-based opportunity territory assignment job automatically when opportunities are created
- CThe filter-based opportunity territory assignment job can only be run when opportunities are updated
- DUsers can manually define a filter based on which opportunities are automatically assigned to territories.
22What is true regarding fields available for a user to use to define account assignment rules in Enterprise Territory Management?
- AAll standard fields are available
- BAll standard and custom fields are available
- CThe fields available depend on field level security settings applicable to the user
- DThe fields available are the same for all users
23What is true about profiles and permission sets?
Choose 3.- APermission sets can be assigned to multiple users
- BUser permission can be enabled in custom profiles
- CUser permissions can be enabled in permission sets
- DPermission sets can be assigned to multiple profiles
- EA permission set can be only assigned to one profile
24When an account is edited and saved, what is the impact on territory assignment rules?
- ATerritory assignment rules are applied again
- BTerritory assignments do not apply on the update
- CDepends on the territory model setting
- DDepends on a setting an account page layout properties
25Which of the following are true about Enterprise Territory Management?
Choose 2.- AAn account may be assigned to more than one territory
- BTerritory Type has an impact on record visibility
- CUsers in a territory can always view and edit accounts associated to the territory
- DTerritories organize accounts and users who work with the accounts
26A group of users and their team leader who share the same profile have the ability to edit Case records apart from creating them. What is the best way to fulfill this requirement?
- ACreate and assign a permission set with "Edit" access on the Case object to the team leader
- BSelect the "Edit" or "Modify All" access to the Case object in the profile assigned to the team leader and users
- CCreate and assign a permission set with "Modify All" access on the Case object to the team leader
- DCreate a custom profile with "Edit" access on the Case object and assign it to the team leader
27Which of the following is true about manually assigning a territory to an opportunity?
- AUsers with sharing access to the opportunity's account can assign any active territory
- BUsers with sharing access to the opportunity's account can only assign the account's territory
- CUsers without sharing access to the opportunity's account can assign any active territory
- DUsers with sharing access to the opportunity's account cannot assign a territory manually
28Which of the following are capabilities of a delegated administrator?
- AMaintain Standard Objects
- BUnlock users
- CAdd users to certain public groups
- DCreate a user in any role
- EAssign a user to any profile
29In Enterprise Territory Management, if Joe has sharing access to an account that is related to an opportunity, what is true regarding the territory that can be assigned to the Opportunity?
- AAny Territory in the Territory model can be assigned to the Opportunity
- BOnly Territory administrators can assign Territories to Opportunities
- COnly territories assigned to the account can be assigned to the opportunity
- DTerritory assignment rules are used to assign territories to opportunities
30Which of the following are features of a territory model?
- AA territory model in "Planning" state allows the results of account assignment rules to be previewed
- BMultiple territory models can be defined and activated
- CTerritory models in the "Planning" or "Archived" state can be activated
- DChatter can be used to collaborate on territory models
- ETerritory models can be cloned with the new territory model created in "Planning" state
31Which of the following statements about sharing access are true?
- AIf "Grant Access Using Hierarchies" is selected, users that are higher in the role hierarchy do NOT automatically receive access to records owned by subordinates
- BIf you are an Account owner, you do not have to be a member of a portal share group to see child records owned by portal users
- CIf "Grant Access Using Hierarchies" is selected, users that are higher in the role hierarchy automatically receive access to records owned by subordinates
- DWhen you edit groups, roles, and territories, sharing rules are automatically recalculated to add or remove access as needed
32You have been made a delegated administrator. which of the actions with the new delegated administrator be able to perform?
- AManage users in specified roles and subordinate roles
- BLog in as a user who has granted administrator login access
- CDelete users with specified profiles
- DCreate custom profiles with limited permissions
33Bright Paints has created custom objects "Fund" and "Investment" to track investments that are managed in a particular fund. A master-detail relationship has been created between the objects, with Fund as the master object and Investment as the detail. What is true regarding the security and access to the Investment records?
- AIf all users should have read access to investment records, the Org-Wide default for the investment object can be set to Public Read Only
- BManual sharing can be used to increase access to selected users to Investment records
- CThe value of "Grant Access Using Hierarchies" for the Investment object will be inherited from the Fund object
- DThe owner of Investment records will default to the owner of the Fund record but can be changed
34A Sales Manager has reported that he does not have visibility to records owned by his Account Managers. The Salesforce Administration has checked the role hierarchy and found that it is set up with the Account Manager roles and the Sales Manager role. What could be the reason that the Sales Manager does not have visibility to the records?
- AThe org-wide default sharing setting for the object is set to "Public Read Only"
- BThe profile assigned to the sales manager does not have "Read" access to the object
- CThe user record associated with the Account Manager user is inactive
- DThe "Grant Access Using Hierarchies" option is not enabled for this object
35Bright Paints tracks Positions using a custom object. "Positions" should not be visible to users, except if the status is "Under Consideration". How can this requirement be fulfilled?
- AUse manual sharing
- BSet the org-wide default setting to "Public Read Only" on the Position object and add a sharing rule to share "Position" records with all users based on the value of the status field
- CSet the org-wide setting to "Private" on the Position object and add criteria-based sharing rules to hare position records with all users based on the value of the status field.
- DUse Apex Managed Sharing
36You are a System Administrator for Bright Paints, inc. In order to track open positions in your company, you have created a custom object for a recruiting application. recruiters should have the ability to edit, delete, create and read Position records. How would you ensure that recruiters have the correct access?
- ACreate a custom profile and enable the custom object permissions
- BUse an existing standard profile that automatically has the custom object permissions enabled
- CUse an existing custom profile that automatically has the custom object permissions enabled
- DModify a standard profile and enable the custom object permissions
37As a result of a business restructuring, a company needs to make a number of changes to the role hierarchy. What is true in this situation?
- AA case must be logged with Salesforce to request a sharing recalculation
- BThe changes need to be completed in full Sandbox prior to being made in the production org
- CIt may result in error messages when editing records
- DThis will result in recalculation of all record access.
38Light Speed Computers sells computer hardware and consulting services, and the business has two divisions. Two opportunity record types have been created, and access needs to be defined to give users from each division access to records in their own division. How can the sharing setting be set up to meet this requirement?
- AThe org-wide default for opportunities should be set to "Private" and manual sharing can be used to share with the roles of each division
- BThe org-wide default for Opportunities should be set to "Private" and sharing rules can be used to share with the public groups that include members of each division.
- CThe org-wide default for Opportunities should be set to "Private" and sharing rules can be used to share with the roles of each division
- DThe org-wide default for Opportunities should be set to "Private" and manual sharing to share with the public groups that include members of each division
39Which of the following statements about Permission Sets is true?
- APermission sets grant access through a hierarchy
- BThe possible Permission set settings are: Private, Public Read Only, Public Read/Write and Public Read/Write/Transfer
- CUsers can be assigned to multiple permission sets
- DPermission sets give a user a baseline level of access to records
40The org-wide sharing setting for the Case object is set to Private. No sharing rules have been configured. How can the administrator ensure that a user has access to all Case records with this new record type?
- AAsk users to manually share Cases with this new record type to the user
- BAssign a permission set to the user that includes "View All" access
- CCreate a criteria based sharing rule
- DAssign a permission set to the user that includes assignment to the new record type
41The Position object has a Salary field that only certain users should have access to. What is the best way to fulfill this requirement?
- AUse field restrictions to restrict access to the field
- BUse object permissions to restrict access to the Salary field
- CUse field level security to restrict access to the field
- DRemove the field from the page layout used by the profiles that should not have access to it
42Bright Paints has created a new custom object called "Profit" which is a child object of Opportunity in a master-detail relationship. The org-wide default of Opportunity is set to "Private". Only Executive level users should have access to the Profit records. How can this be enabled?
- AEnsure that the role hierarchy is set up to allow appropriate record access
- BRemove object permissions to the "Profit" object from all profiles except the Executive profile and ensure the role hierarchy is set up appropriately
- CUse sharing rules to ensure the executive level users have access to "Profit" records
- DThis is not possible as child objects in a master-detail relationship inherit the security and org-wide default sharing settings of the parent
43What is required for Account Managers in the same role to have access to each other's Opportunities when the org-wide default sharing setting is set to "Private"?
- AA sharing rule must be created
- BA permission set must be added to each user
- CNothing, users who have the same role will share data
- DManual sharing must be used each time an Opportunity is created
44what will be the result if a field is read-only in field level security, but marked as required on the page layout?
- AA field will not display on the page layout
- BThe field will still be required
- CThe field will be read only
- DAn error message will appear
45Bright Paints Inc. has set the org-wide default for Accounts to Public Read/Write. The Sales team wants to restrict access to a new set of Account records that are upserting via Data Loader. Only the Account owners and members of a public group should be able to access this data. how would this requirement be fulfilled?
- ACreate a sharing rule to grant access to members of the public group
- BUpgrade the role hierarchy an assign members of the group to a role at the top of the hierarchy
- CUpdate the org-wide default for accounts to "Private" and create sharing rules to provide appropriate access
- DManually share each account record with members of the public group
46In your organization, you have 100 users in the contact center. Only the team leaders should have delete permissions for a custom object, in addition to a small number of finance users. What is the best way to enable this?
- ACreate a permission set and assign to all users that should have delete access
- BCreate a custom profile that has the delete permission and assign the appropriate users that should have delete access
- CAdd the delete permission to a permission set and assign the permission set to a public group that contains the users that should have delete access
- DAssigned delegated Administration permission to the users that need delete access for that object
47A user from the marketing team needs to be able to manage and customize the Campaign object. How would the administrator facilitate this request to enable a single user to administer and configure just the Campaign object?
- AUse the "Elevated" Administration feature
- BUsers who aren't administrators cannot be given administrative privileges to a standard object
- CUse the "Defined Administration" feature
- DUse the "Delegated Administration" feature
48Which of the following are valid reasons why a user in unable to view an account record owned by another user?
- AThe user's role is below the owner's role in the role hierarchy
- BThe org-wide default setting for the object is set to private
- CThe record has not been manually shared with the user
- DThe org-wide default setting for the object is set to Public Read Only
- EThe user is not in a public group
49Bright Paints has assigned users from HR and maintenance teams to the same profile. they just created a new job applications, but only wants HR users to have access to this new object. How can you achieve this?
- AAssign the HR team to a new role in the role hierarchy
- BModify the standard profile currently shared by both teams
- CConfigure field-level security on the new object for the HR team
- DCreate a new custom profile for users on the HR team
50Cosmic Solutions uses a custom object to track Leave Requests. When employees create a Leave Request, they specify their Project Manager using a lookup field on the User object. Lead Requests are private, and in addition to the access granted via the role hierarchy, only the specified Project Manager should have access to a Leave Request record. Which of the following can be used to meet the requirement?
- AChange the role hierarchy to reflect the project managers and employees
- BUse Apex Managed Sharing
- CAsk the employee to manually share the record each time they submit a leave request
- DCreate a Sharing Rule
51A user reported a problem that they no longer have access to an account record that they had access to last week, however, they still have access to other accounts. The "View All" object permission is not used for any profiles. What would NOT be a possible explanation?
- ASharing rules were removed
- BMembers of the public groups were removed
- CThe role of the user has changed
- DThe profile of the user was changed
- EThe Account owner has changed
52DELETE ME: You just created a new Opportunity record type for the Salesforce org of Bright Paints. Sales users are complaining that they cannot select the new record type when they create new Opportunity records. What could be the root cause of this problem?
- AThe record type has not been set as the default record type
- BThe record type has not been activated
- CThe record type does not have an associated page layout
- DThe record type has not been added to the Sales User profile
53You just created a new Opportunity record type for the Salesforce org of Bright Paints. Sales users are complaining that they cannot select the new record type when they create new Opportunity records. What could be the root cause of this problem?
- AThe record type has not been set as the default record type
- BThe record type has not been activated
- CThe record type does not have an associated page layout
- DThe record type has not been added to the Sales User profile
54A user at bright Paints has reported to the Administrator that she is unable to see the Phone Number field on her Contact records even though she knows that she has the Read permission on the object. What could be the reason for this issue?
- AThe Phone Number field is hidden via field-level security
- BThe user has the "Modify All" permission
- CThe phone number field is required
- DThe user does not have the "View All" permission
55Which of the following is true regarding roles and profiles?
- ARoles control record level access and is mandatory for all users
- BProfiles control record level access and is not mandatory for all users
- CRoles control object level access and is mandatory for all users
- DProfiles control object level and field level access and is mandatory for all users.
56In your organization, users from two teams share the same profile, but each team should have different default record types. What is the best way of enabling this?
- AUse a workflow to set the default record type
- BUse roles to specify the default record type
- CCreate two custom profiles with the default record type set
- DCreate a permission set for each group of users and assign the default record type
57Which of the following could explain why the Sharing button is not available on the detail page of a custom object?
- AA button has not been added to the page layout
- BThe org-wide default sharing setting of the object is "Private"
- CThe org-wide default sharing setting of the object is Public Read Only
- DThe org-wide default sharing setting of the object is Public Read/Write
58At Bright Paints, the org-wide default setting for accounts is set to private. Access is determined using the role hierarchy and sharing rules. An Account Manager from another division is assisting with an account on a one-time basis and needs access to the account as well as contacts, opportunities and cases related to it. What would be the best way to enable this access?
- AAdd a sharing rule
- BChange the role of the user
- CAsk the opportunity owner to manually share the opportunity
- DAdd the Account Manager to the Account team with at least View access for Opportunities
- EManually share the opportunity and let the account manager know
Information
- Description
- Advanced Administrator Certification Quiz on Saleforce Advanced Administrator - Security and Access (FOF June 2020), created by Victoria Jones on 02/06/2020.
- Author
- Victoria Jones
- Language
- English
- Views
- 296
- Tags
- Rating
- No ratings yet Rate this quiz