Security-and-Privacy-Accredited-Professional Sample Questions Answers

Disconnect the lost verification method

Generate a temporary verification code so the user can log in

Ask the user to submit a lost verification method report before proceeding with any other steps Post about the incident to all Salesforce users as a learning opportunity

Monitor the user's account activity for suspicious activity

Upon triggering the refresh

During the next daily update

Immediately

When the API is called

Last Modified By

Formula

Currency field

Roll-Up Summary

1&& (2||3)

1+(2+3)

1&& (2 OR 3)

1 & (2 OR 3)

1 AND (2 OR 3)

Platform Events

Event Monitoring Analytics App

Event Manager

Transaction Security

Session time out, Welcome email template, Password complexity requirement

Session time out, Password complexity requirement, Login IP Ranges, Login Hours

Session time out, Enabled Custom Permissions, Email opt-in

Session time out, Welcome email template, Password complexity requirement, Enabled Custom

Click Query Preview in the Data Filter to preview your query in SOQL

Test the query on workbench or dev console.

Run an initial configuration from end to end without filtering

Execute script in filtered view

Setup/Manage Tenants

Setup/Security Center

Manage Security Tab

Connected Tenants Tab

Classic Encryption encrypts standard fields

Platform Encryption encrypts custom fields only. Classic Encryption encrypts standard fields

Platform Encryption is built on Classic Encryption

Classic Encryption masks characters whereas Platform Encryption does not

Sensitivity Level be accessed?

Field History Archive

Bulk API

Custom Metadata Types

Apex

Identity Verification Methods report

Login History page in Setup

Multi-Factor Authentication Dashboard App

Multi-Factor Authentication Assistant

Custom list view of Users in Setup

SCIMOpen

ID Connect

WS-Federation

SAML

Utilize the built-in dashboard and detail pages

Use an analytics tool of your choosing

Export to SEIM tool

Make a call to the REST API

Provide launch day support such as office hours or an onsite help desk

Enable MFA for a test period to see what issues arise.

Create onboarding materials on how to obtain, set up, and use verification methods to log in

Communicate frequently about when MFA is coming and why it's important Send users a single announcement email, the day before MFA is enabled

Use field level security or field permissions

Use object level security or object permissions

Use Apex managed sharing

Use record level security settings

Curiosity

Surprise

Fear

Rewards

Buy Shield as this provides features that can do this

The Setup Audit Trail is good for 180 days so, use this together with a process of exporting the changes out of Salesforce to another system

The Setup Audit Trail is good for 5 years so can be used to record this as standard.

Leverage Platform Encryption and enable the archive feature

Using single sign on

Requiring unique passwords

Prohibiting reuse of passwords on multiple accounts

Limiting the number of users with admin rights

is prior to, is within, is after

is before, is within, is after

is before, is after, is between

yesterday, today, a month ago

ApiEvent, LoginEvent, MobileEmailEvent

ApiEvent, ReportEvent, LoginEvent

ApiEvent, LogoutEvent, UriEvent

ApiEvent, LoginEvent, LightningURI Event

Train users on how to bypass MFA if they forget or lose their verification methods

Defer MFA logins for new hires until they're comfortable working in Salesforce

Watch for recurring login problems and changes to how many users are logging in

Collect and evaluate user feedback

Have a clear and easy access recovery process for users who forget or lose their verification method

SOAP API

Metadata API

REST API

Portability API

User level

Top-level account

Role level

Business unit level

Once every month per objectOnce every 24 hours per object

Once every hour per object

Once every week per object

Via Field Level Security settings, a Salesforce user has view access to a field that is encrypted via

Platform Encryption.

Percentage of records encrypted

Percentage of records failing encryption check

Number of records created since last sync job was run

Number of times encrypted data was accessed by user

6 months

30 days

1 year

1 week

Salesforce Authenticator, Third-party TOTP authenticator apps, Security keys

Security keys, Salesforce Authenticator, Third-party TOTP authenticator apps

Third-party TOTP authenticator apps, Security keys, Salesforce Authenticator

Salesforce Authenticator, Security keys, Third-party TOTP authenticator apps

Event Log Files

Set-up Audit Trail

Salesforce API

Pre-built Tableau CRM app