Question

Difficulty: MediumProfiles and Object/Field-Level Security

A Salesforce Administrator at Cloud Real Estate Services needs to implement appropriate security and visibility controls for various business requirements. Match each business requirement to the correct Salesforce security or configuration feature.

  • Restrict login access for all users assigned to the Customer Support Profile so they can only log in from specific corporate network IP ranges.Profile Login IP Ranges
  • Dynamically hide a custom field on a Contact record page based on record status without modifying underlying access permissions.Dynamic Forms Component Visibility Rules
  • Grant read and edit access for a sensitive custom field to 3 specific users across different profiles without altering their base profiles.Permission Set with Field-Level Security (FLS)
  • Prevent all users assigned to the Sales Representative profile from deleting Account records while allowing them to create and edit Accounts.Profile Object Permissions

Answer

Each business security requirement maps to its optimal Salesforce feature: restricting profile login locations maps to Profile Login IP Ranges; conditionally hiding fields on record pages without altering access maps to Dynamic Forms Component Visibility; granting selective field access across profiles maps to Permission Sets with FLS; and restricting object-level delete rights for a profile maps to Profile Object Permissions.
The solution accurately pairs each requirement with the correct Salesforce feature by distinguishing between network login restrictions (Profile Login IP Ranges), dynamic UI rendering (Dynamic Forms), additive user-specific field access (Permission Sets), and baseline object CRUD privileges (Profile Object Permissions).

Step-by-Step Solution

1
Identify the mechanism for profile-specific IP login enforcement.
Profile Login IP Ranges strictly enforce login boundaries per profile.
Profile Login IP Ranges block login requests originating outside the configured IP ranges for users on that profile.
2
Identify the mechanism for dynamic page layout visibility.
Dynamic Forms Component Visibility rules dynamically display or hide fields based on record field values.
Dynamic Forms manage user interface presentation rules dynamically without modifying global security controls.
3
Identify the mechanism for extending field-level access to selected individuals.
A Permission Set with Field-Level Security grants additive read/edit access to targeted users.
Permission sets allow administrators to grant extra field permissions selectively without profile proliferation.
4
Identify the mechanism for object-level operation controls.
Profile Object Permissions configure standard Create, Read, Edit, and Delete access at the object level.
Removing Delete permission from the profile object settings prevents all users with that profile from deleting records of that object.

Key Concept

Configuring security layers (Profile Object Permissions, Field-Level Security, Login IP Restrictions) vs. UI presentation tools (Dynamic Forms).
Rate this question