Salesforce Certified Platform Sharing and Visibility Architect Free Sample Questions

Description

Covers object, field and UI-level permissions, record access through org-wide defaults, role hierarchy and sharing rules, non-object data access, and the scalability of security model choices.

12 free sample questions136 in the full practice test Other version: certified-sharing-and-visibility-architect(164)

Try simulator

Plat-Arch-205 Sample Questions

  1. Question 1

    Intermediate

    Permissions to Standard Objects, Custom Objects, and Fields · Object-Level Permissions

    A multinational financial services firm utilizes Permission Set Groups to manage user access based on job functions. The 'European Sales' group includes permission sets for 'Sales Core', 'GDPR Compliance', and 'Contract Editing'. However, a subset of interns within the European Sales team must not have the ability to delete Contracts, which is currently granted by the 'Contract Editing' permission set included in the group. How should the architect fulfill this requirement using the principle of least privilege without creating excessive new permission sets?

    Answer and explanation

    Correct answer: D

    Muting Permission Sets are specific to the Permission Set Group they are contained in. You cannot assign a Muting Permission Set directly to a user; it modifies the group itself. Therefore, to have a version of the group without Delete access, you must create a separate Permission Set Group for the interns and apply a Muting Permission Set to that specific group.

  2. Question 2

    Intermediate

    Permissions to Standard Objects, Custom Objects, and Fields · Programmatic Security Enforcement

    Universal Containers creates a custom Lightning Web Component that allows users to search for and view 'Confidential_Project__c' records. The component uses a custom Apex controller to perform the SOQL query. A developer realizes that users can see fields in the component that their profile restricts via Field-Level Security (FLS). Which Apex feature should be implemented in the query to strictly enforce FLS and object permissions within the SOQL statement?

    Answer and explanation

    Correct answer: C

    The WITH SECURITY_ENFORCED clause in SOQL checks for both field-level and object-level security permissions for the fields and objects selected in the query. If the user lacks permission, the query throws a System.QueryException. with sharing only enforces record-level sharing (visibility), not FLS.

  3. Question 3

    Advanced

    Permissions to Standard Objects, Custom Objects, and Fields · Sensitive Data Protection

    A healthcare organization stores patient SSNs in a custom field SSN__c. For compliance, this field must be encrypted at rest, but specific compliance officers need to search for patients using the last 4 digits of the SSN. Which encryption strategy supports this requirement?

    Answer and explanation

    Correct answer: C

    Shield Platform Encryption with Deterministic Encryption allows users to filter and search on encrypted data because it generates the same ciphertext for a given piece of data every time. Probabilistic encryption (the default) does not support filtering/searching. Classic Encryption allows masking but has limitations on standard search functionality compared to Shield.

  4. Question 4

    Intermediate

    Permissions to Standard Objects, Custom Objects, and Fields · Programmatic Security Enforcement

    In an Apex Class performing a secure update, the method Security.____(AccessType.UPDATABLE, records) is used to strip fields from the list of records that the current user does not have permission to update.

    Answer and explanation

    Correct answer: D

    The correct method is Security.stripInaccessible. It checks field-level security and object-level permissions for the specified access type (READABLE, CREATABLE, UPDATABLE, UPSERTABLE) and removes fields the user cannot access.

  5. Question 5

    Advanced

    Permissions to Standard Objects, Custom Objects, and Fields · Object-Level Permissions

    A Platform Architect is designing a security model for a 'Performance_Review__c' object. The requirement states that Managers should only be able to view the 'Rating__c' field for their direct reports during the 'Review Period'. At all other times, this field should be hidden from everyone except HR. Which solution best addresses this temporal requirement?

    Answer and explanation

    Correct answer: A

    Session-Based Permission Sets are designed for temporary access. A Flow can check the current date/time against the 'Review Period' criteria and activate the session-based permission set for the user, granting them FLS only when needed. Updating metadata (Profile FLS) via Apex is risky and can cause deployment/org locking issues.

  6. Question 6

    Beginner

    Permissions to Standard Objects, Custom Objects, and Fields · UI-Level Data Hiding

    True or False: Removing a field from a Page Layout ensures that users cannot access that field's data via Reports or the API.

    Answer and explanation

    Correct answer: B

    Page Layouts only control visibility on record detail pages. Field-Level Security (FLS) is required to restrict access via Reports, API, List Views, and Search.

Register free for 6 more questions

Or unlock all 136 Plat-Arch-205 questions with explanations, timed mode and flashcards.