All practice questions
1784 questions
A Salesforce Administrator at FreightGlobe Logistics is establishing access restrictions for employees assigned to the Regional Dispatcher profile. The administrator configures Organization-Wide Network Access with a trusted IP range of to . Additionally, on the Regional Dispatcher profile, the administrator sets Login IP Ranges to to . A dispatcher attempts to log into Salesforce from an IP address of . What behavior occurs during this login attempt?
An enterprise organization requires that a subset of users within the Support department gain access to a sensitive custom field, Salary_Grade__c, on the User object for auditing purposes. All Support representatives currently share the standard Support User profile, which restricts visibility to Salary_Grade__c via Field-Level Security (FLS). The administrator must grant access to this field exclusively to these designated auditors without impacting other Support representatives or creating unnecessary profile maintenance overhead. Which configuration approach should the administrator implement?
Universal Health System tracks confidential compliance findings using a custom object named Compliance_Audit__c. Executive leadership mandates that only record owners and users above them in the role hierarchy should have access to these records by default. All other users must be denied baseline access. Which Organization-Wide Default (OWD) setting and hierarchy configuration should the Salesforce administrator implement to satisfy this security mandate?
An administrator at a financial institution must immediately prevent a regional director from logging into Salesforce due to an unannounced compliance audit. However, the director is currently set as the Default Lead Owner for Web-to-Lead, the running user for critical nightly scheduled Apex jobs, and a specified user in custom hierarchy fields used by active approval processes. Deactivating the user immediately causes validation errors and breaks automated background processes. What action should the administrator take to instantly block access without disrupting ongoing system operations?
A Salesforce Administrator at an international renewable energy company needs to provision access for a newly contracted auditor. The auditor requires temporary access to view standard Accounts and Contacts, as well as Create and Edit permissions on a custom object named "Energy Audits". Company security guidelines mandate maintaining a minimal number of custom profiles and enforcing the principle of least privilege using additive access control models.
Which administration strategy should the administrator execute to provision this user in alignment with Salesforce best practices?
A Salesforce administrator at a wealth management firm needs to preserve custom data when converting prospective clients into client contacts. The firm uses a custom picklist field on the Lead object named Investment_Strategy__c to track client preferences. The administrator needs this value to automatically populate on the Contact record when a Lead is converted. What action must the administrator take to fulfill this business requirement?
A healthcare company tracks sensitive employee safety compliance reports using a custom object named Safety_Incident__c. Business governance requires that baseline visibility to these records be restricted so that only the record owner and managers above them in the role hierarchy can view or edit the records. Users outside of the owner's direct role hierarchy line must have no access to these records. Which configuration of Organization-Wide Defaults (OWD) and hierarchy access settings correctly fulfills this requirement?
A healthcare technology company configures security access for two customer support tier teams: Tier 1 Representatives and Tier 2 Escalation Specialists. Both teams rely on a core master Permission Set named "Customer Support Base" which grants read, create, and edit access to Cases and full access to patient custom fields. However, compliance regulations dictate that Tier 1 Representatives must NOT be able to delete Case records or view the "Social Security Number" custom field, whereas Tier 2 Escalation Specialists require these elevated capabilities. The administrator wants to avoid creating redundant permission sets that require duplicate maintenance whenever common permissions change. Which administrative configuration should the administrator implement to meet these security requirements?
Universal Containers has configured a Delegated Administration group named 'Support Lead Admins' to allow regional support leads to perform user management operations. The group configuration includes the 'Support Representative' role and subordinate roles, as well as specified assignable profiles.
A delegated administrator in this group attempts to process an offboarding request for a support representative who is assigned to an active workflow rule and an open approval process. The delegated administrator discovers that the option to deactivate the user account is unavailable in the user interface.
Which statement accurately explains why the delegated administrator cannot deactivate this user account?
A financial enterprise uses a custom object named Compliance_Audit__c to track sensitive regulatory investigations. The Organization-Wide Default (OWD) sharing setting for Compliance_Audit__c is configured as Private. Compliance auditors lower in the role hierarchy own these records, while regional managers receive record access via criteria-based sharing rules. Management requires that corporate executives positioned above regional managers in the Role Hierarchy must not automatically gain access to these audit records, even when access is granted to regional managers. What administrative action should be taken on the Compliance_Audit__c object to restrict automatic upward record exposure while preserving manual and rule-based sharing?
A Salesforce administrator at a luxury hospitality group is configuring custom fields to track guest charges. The organization has a parent custom object named Reservation__c and a child custom object named Addon_Service__c, linked together by a standard Lookup relationship. Management requires a field on the Reservation__c object that automatically calculates the total monetary sum of all related Addon_Service__c records. What administrative action must be completed before the administrator can create this calculated field?
An administrator is configuring custom objects in Salesforce and needs to decide between a Master-Detail relationship and a Lookup relationship. Which two statements accurately describe key characteristics of a Master-Detail relationship? (Select 2 answers)
Select all that apply
An administrator needs to restrict access to a sensitive custom field, Credit_Limit__c, on the Account object so that standard users cannot view or edit it across reports, list views, or the API. Additionally, one specific compliance auditor who holds a standard user profile requires Read-only access to this field.
Which TWO actions should the administrator take to meet these security requirements? (Choose 2 answers)
Select all that apply
An administrator is designing a custom data model for tracking Project__c records and Team_Member__c records using a junction object named Project_Assignment__c. The business requirement specifies that the total allocated hours from all Project_Assignment__c records must be aggregated directly on the Project__c record using standard declarative functionality without Apex code. Additionally, if a Team_Member__c record is deleted, any existing historical Project_Assignment__c records must remain in the system with their link to the deleted Team_Member__c cleared. Which relationship configuration on Project_Assignment__c fulfills these requirements?
An administrator at a digital media company is setting up a new custom object to track customer subscription plans. Which two features are standard characteristics of custom objects in Salesforce? (Select 2)
Select all that apply
An administrator at a financial services enterprise is configuring a custom data model to manage client investment portfolios using a custom object Portfolio__c and individual assets using a custom object Holding__c. The business requires that the total monetary value of all related Holding__c records automatically aggregates on the parent Portfolio__c record, that deleting a Portfolio__c record automatically removes all associated Holding__c records, and that users can reassign a Holding__c record to a different Portfolio__c if registered incorrectly. Additionally, compliance officers require that sensitive financial compliance fields on Holding__c are restricted from unauthorized data access across all platform interfaces, including reports and APIs. Which architectural configuration correctly meets all requirements while maintaining data security?
A Salesforce Administrator needs to provision a new team member who requires standard user functionality along with specialized permissions to manage custom campaign fields and delete opportunity records. Which TWO actions should the administrator take to configure access following Salesforce security best practices? (Select TWO.)
Select all that apply
An administrator needs to grant record-level access to specific groups of users for a custom object whose Organization-Wide Default (OWD) is set to Private. Which two native Salesforce features can the administrator use to expand access based on record ownership or specific field values?
Select all that apply
A Salesforce Administrator needs to build an autolaunched flow that updates a field on all Contact records related to an Account while adhering to Salesforce bulkification best practices. In what order should the administrator configure the Flow Builder elements to process these records without exceeding governor limits?
Drag items to arrange them in the correct order
A commercial real estate company tracks confidential contract negotiations using a custom object named Lease_Agreement__c. Management requires that users only have access to records they own by default, while managers in the role hierarchy automatically inherit access to records owned by their subordinates. Which TWO configuration actions or principles should the administrator apply to establish this baseline access model?
Select all that apply