Examkin

Question

Difficulty: MediumProfiles and Object/Field-Level Security

Summit Financial Solutions requires a subset of financial analysts within the Operations department to have Read and Edit access to a sensitive custom field, Bank_Account_Number__c, on the Customer_Profile__c object. Currently, all Operations staff share a single baseline profile that grants no access to this field. Furthermore, management requires that these specific analysts be restricted to logging into Salesforce only from the corporate network IP range, while other Operations staff remain unaffected. Which TWO actions should the System Administrator take to meet these requirements securely? (Choose 2 answers)

  1. Create a Permission Set that grants Read and Edit field-level security for Bank_Account_Number__c, and assign it to the financial analysts.Answer
  2. Clone the standard profile to create a dedicated profile for the financial analysts, define the Login IP Ranges on the new profile, and reassign the analysts to this profile.Answer
  3. C
    Add the corporate network IP range to Network Access settings in Setup to restrict login access specifically for the financial analysts.
  4. D
    Set component visibility rules on the Lightning record page using Dynamic Forms to reveal the Bank_Account_Number__c field only to the financial analysts.

Answer

The administrator should create a Permission Set granting Read and Edit field-level security for the custom field and assign it to the analysts, and clone the baseline profile to create a dedicated profile where Login IP Ranges are configured for those specific users.
To grant additional field access to specific users without altering the shared baseline profile, a Permission Set granting Read and Edit field-level security should be assigned to those users. To enforce login IP restrictions for only those analysts, they must be assigned to a dedicated profile where Login IP Ranges are specified, because login IP restrictions are enforced at the profile level.

Step-by-Step Solution

1
Evaluate field-level security requirements.
Identify that additive field access for a subset of users sharing a profile requires a Permission Set rather than modifying the shared baseline profile.
Salesforce best practice dictates keeping profiles minimal and using Permission Sets to grant extra object or field permissions.
2
Evaluate login IP restriction requirements.
Recognize that Login IP Ranges must be enforced on a profile level to restrict login access strictly within a specified network range.
Since Login IP Ranges are defined per profile, users requiring distinct login restrictions must be assigned to a separate profile configured with those IP ranges.

Key Concept

Profiles control restrictive baseline settings like Login IP Ranges, whereas Permission Sets grant additive permissions such as Field-Level Security.
Estimated Time:1m 30s
Rate this question

Topics

Profiles and Object/Field-Level Security

More questions from this topic