Question

Difficulty: Very hardProfiles and Object/Field-Level Security

Match each Salesforce administrative requirement on the left with the most appropriate security or configuration mechanism on the right.

  • Restrict access to a sensitive SSN field on the Contact object globally across UI pages, standard reports, and API integrations.Field-Level Security (FLS) configuration
  • Enforce strict IP address restrictions for a user group so that login attempts originating outside specified corporate IP ranges are blocked.Profile Login IP Ranges setting
  • Grant Read and Create permissions on a custom Audit object to a single user without altering permissions for other users sharing the same Profile.Permission Set assignment
  • Hide a custom Salary field component on a Lightning Record Page for specific users while keeping the underlying field accessible via API integrations.Dynamic Forms Component Visibility rules

Answer

Field-Level Security matches restricting field access globally across UI, API, and reports. Profile Login IP Ranges matches strict login denial outside specified IP ranges. Permission Sets match granting object access to a single user without altering shared Profiles. Dynamic Forms Component Visibility rules match hiding fields on Lightning record pages while maintaining API field accessibility.
Each requirement maps to its optimal Salesforce configuration feature: Field-Level Security enforces universal field protection across UI, API, and reporting; Profile Login IP Ranges strictly block logins outside designated IP ranges; Permission Sets additively grant permissions to single users without profile sprawl; Dynamic Forms component visibility controls UI rendering while keeping field data accessible via API.

Step-by-Step Solution

1
Analyze global field security requirement across UI, API, and reporting channels.
Field-Level Security (FLS) is required because page layouts and dynamic component visibility do not restrict report or API access.
FLS is enforced at the platform data layer across all interfaces.
2
Evaluate IP address restriction mechanics at profile versus organization level.
Profile Login IP Ranges outright block unauthorized IP login attempts, whereas Org-Wide Network Access allows login following multi-factor authentication.
Profile-level IP restrictions define hard boundaries for user authentication.
3
Determine how to grant elevated object permissions to an individual user.
Assigning a Permission Set extends privileges cleanly to a specific user without causing profile duplication.
Profiles set baseline access for groups, while Permission Sets handle additive permissions per individual.
4
Identify the mechanism to hide fields strictly within UI view without restricting API integration access.
Dynamic Forms Component Visibility rules conditionally suppress UI rendering while retaining backend FLS visibility for integrations.
UI component visibility is distinct from platform field-level security.

Key Concept

Profiles, Permission Sets, Field-Level Security, and UI Visibility Controls
Rate this question